Last updated 15 October 2026

Red Ember Privacy Policy

Red Ember is a private household organizer. This page explains what it stores, what it does with data from Google, and what it will never do.

The short version

Red Ember stores what your household puts into it, plus a small amount of information read from services you explicitly connect. It does not sell your data, does not show advertising, and does not use your data to train AI models. Every family's records are isolated from every other family's at the database level. You can disconnect a service or delete your account at any time. Our public pages use Meta's pixel only for visitors who arrive from one of our ads, and never on the sign-in page or inside the app — see Advertising measurement.

Who runs Red Ember

Red Ember is operated by Medtrainers ("we", "us"). Questions about this policy, or requests to access or delete your data, go to andy@redember.app.

What Red Ember stores

Two kinds of information:

What you enter. Tasks, events, meal plans, recipes, shopping lists, household routines, notes, budget figures, account balances and transactions you import, and any documents you upload.
What you connect. If you link a third-party service such as Google Calendar or Gmail, Red Ember reads a limited slice of it on a schedule and keeps only what is needed to show you the resulting item.

Red Ember also stores your email address and an authentication record so you can sign in. Inside the app, it does not collect analytics on your behavior, does not use advertising or tracking cookies, and does not embed third-party trackers. The one exception is on our public pages, for visitors who arrive from our ads, described under Advertising measurement. Those pages also use Microsoft Clarity to see how visitors who do not have an account use them; it is never loaded on the sign-in page or inside the app.

Signing in with Google or Facebook. You can choose to create your account, or sign in, with your Google or Facebook account instead of a password. That service then shares your name, email address and profile picture with Red Ember, which keeps them as part of your sign-in record. Nothing else is requested, and nothing is ever posted on your behalf. The service you chose knows that you signed in to Red Ember, and handles that under its own privacy policy. It is not told anything you do or store in Red Ember.

Asking for your state. If you use the form on our home page to ask for Red Ember in your state, we receive the state you chose and your email address, by email. We use them only to reply to you and to tell you when your state is covered. They are not added to any account and not shared.

Advertising measurement

We advertise Red Ember on Facebook and Instagram. To learn whether those ads work, our public pages (never the sign-in page) load the Meta Pixel — but only for a visitor who arrived by clicking one of our ads within the last 7 days. Visitors who arrive any other way, including from a link shared in a Facebook group, do not get it.

For those visitors, Meta receives that the page was viewed, whether the "Start your 14-day free trial" button was clicked, and whether a Red Ember account was then created. Meta's pixel may set its own cookies (_fbp and _fbc) in your browser. Meta handles that information under Meta's Privacy Policy.

Never inside the app. The pixel is not loaded on the sign-in page or on any page you use after signing in. When an ad visitor creates an account, the sign-in page sends Meta a single notice that a trial started — without your email address, your name, or anything you typed.
Nothing you enter is sent to Meta. Not your household, health, money, documents, or anything read from Google. Google user data is never used for advertising.
Only ad visitors, only once. Signing in to an existing account is never reported, and neither is creating an account if you did not arrive from one of our ads. We also note, in your own account record, that it was created after an ad click, so we can count sign-ups ourselves. That note is never shared.

Opting out. We honor Global Privacy Control and Do Not Track: with either switched on in your browser, the pixel never loads. You can also turn it off for this browser here:

Google user data

If, and only if, you choose to connect your Google account, Red Ember requests these scopes. All of them are read-only — Red Ember cannot send mail, alter your calendar, or change anything in your Google account.

.../auth/calendar.readonly: Reads your upcoming calendar events so Red Ember can show the household's week in one place and flag events that need preparation. Red Ember stores the event title, start and end time, location and a link back to the event.
.../auth/gmail.readonly: Reads recent messages so Red Ember can surface commitments that would otherwise be buried — a form due, a reply someone is waiting on, an appointment to confirm. Red Ember stores only the derived item: a short title, the sender, the relevant date, and a link that opens the original message in Gmail. Full message bodies and attachments are processed in memory and are not retained, and message content is never written to disk beyond that derived summary.
.../auth/userinfo.email: Identifies which Google account is connected, so the right person's items land in the right place.

Red Ember does not request write access to any Google service, does not read messages or events on behalf of anyone who has not connected their own account, and does not share Google user data with any third party.

Limited Use disclosure

Red Ember's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Google user data obtained through these scopes is:

used only to provide and improve the user-facing features described above;
never transferred to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with the user's consent;
never used for advertising, and never sold;
never used to develop, improve or train generalised or generative AI or machine learning models;
never read by a human, except with the user's explicit consent for a specific support request, where required for security purposes or to comply with applicable law, or where the data is aggregated and anonymized.

Where data lives

Red Ember runs on Netlify and stores data in a Supabase PostgreSQL database and file store hosted in the United States. Both providers act as sub-processors. Data is encrypted in transit and at rest.

Access is enforced by database row-level security: every record is bound to a household, and a signed-in user's queries cannot return another household's rows even if the application code were wrong. Credentials for third-party services are held as server-side secrets and are never sent to the browser.

Red Ember never asks for or stores passwords to any third-party service. Connections are made with OAuth tokens you can revoke without changing any password.

Keeping and deleting data

Disconnect Google at any time at myaccount.google.com/permissions. Red Ember immediately loses access. Items already created from that data stay in your household until you delete them.
Remove Red Ember from Facebook, if you signed in with Facebook, under Settings & privacy → Settings → Apps and websites in Facebook. To delete your Red Ember account as well, email us as described below.
Delete individual records from within the app.
Delete your account and everything in it by emailing us. We remove your household's data from the live database within 30 days; encrypted backups age out within 90 days.

Children

Red Ember is for adults running a household. Children do not hold their own accounts, though an adult may store information about their own children in their household's records. We do not knowingly collect data directly from children under 13.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email us and we will action it. We do not sell personal information as that term is defined under California law. Other than the ad measurement described under Advertising measurement, we do not share it for cross-context behavioral advertising, and you can opt out of that as described there, including with Global Privacy Control.

Changes

If this policy changes materially, we will update the date at the top of this page and notify connected accounts by email before the change takes effect.

Contact

andy@redember.app

← Red Ember