Last updated 19 August 2026

Red Ember Privacy Policy

Red Ember is a private household organizer. This page explains what it stores, what it does with data from Google, and what it will never do.

The short version

Red Ember stores what your household puts into it, plus a small amount of information read from services you explicitly connect. It does not sell your data, does not show advertising, and does not use your data to train AI models. Every family's records are isolated from every other family's at the database level. You can disconnect a service or delete your account at any time.

Who runs Red Ember

Red Ember is operated by Medtrainers ("we", "us"). Questions about this policy, or requests to access or delete your data, go to edwards.andrew86@gmail.com.

What Red Ember stores

Two kinds of information:

What you enter. Tasks, events, meal plans, recipes, shopping lists, household routines, notes, budget figures, account balances and transactions you import, and any documents you upload.
What you connect. If you link a third-party service such as Google Calendar or Gmail, Red Ember reads a limited slice of it on a schedule and keeps only what is needed to show you the resulting item.

Red Ember also stores your email address and an authentication record so you can sign in. It does not collect analytics on your behavior, does not use advertising or tracking cookies, and does not embed third-party trackers.

Google user data

If, and only if, you choose to connect your Google account, Red Ember requests these scopes. All of them are read-only — Red Ember cannot send mail, alter your calendar, or change anything in your Google account.

.../auth/calendar.readonly: Reads your upcoming calendar events so Red Ember can show the household's week in one place and flag events that need preparation. Red Ember stores the event title, start and end time, location and a link back to the event.
.../auth/gmail.readonly: Reads recent messages so Red Ember can surface commitments that would otherwise be buried — a form due, a reply someone is waiting on, an appointment to confirm. Red Ember stores only the derived item: a short title, the sender, the relevant date, and a link that opens the original message in Gmail. Full message bodies and attachments are processed in memory and are not retained, and message content is never written to disk beyond that derived summary.
.../auth/userinfo.email: Identifies which Google account is connected, so the right person's items land in the right place.

Red Ember does not request write access to any Google service, does not read messages or events on behalf of anyone who has not connected their own account, and does not share Google user data with any third party.

Limited Use disclosure

Red Ember's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Google user data obtained through these scopes is:

used only to provide and improve the user-facing features described above;
never transferred to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with the user's consent;
never used for advertising, and never sold;
never used to develop, improve or train generalised or generative AI or machine learning models;
never read by a human, except with the user's explicit consent for a specific support request, where required for security purposes or to comply with applicable law, or where the data is aggregated and anonymised.

Where data lives

Red Ember runs on Netlify and stores data in a Supabase PostgreSQL database and file store hosted in the United States. Both providers act as sub-processors. Data is encrypted in transit and at rest.

Access is enforced by database row-level security: every record is bound to a household, and a signed-in user's queries cannot return another household's rows even if the application code were wrong. Credentials for third-party services are held as server-side secrets and are never sent to the browser.

Red Ember never asks for or stores passwords to any third-party service. Connections are made with OAuth tokens you can revoke without changing any password.

Keeping and deleting data

Disconnect Google at any time at myaccount.google.com/permissions. Red Ember immediately loses access. Items already created from that data stay in your household until you delete them.
Delete individual records from within the app.
Delete your account and everything in it by emailing us. We remove your household's data from the live database within 30 days; encrypted backups age out within 90 days.

Children

Red Ember is for adults running a household. Children do not hold their own accounts, though an adult may store information about their own children in their household's records. We do not knowingly collect data directly from children under 13.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email us and we will action it. We do not sell personal information as that term is defined under California law, and we do not share it for cross-context behavioral advertising.

Changes

If this policy changes materially, we will update the date at the top of this page and notify connected accounts by email before the change takes effect.

Contact

edwards.andrew86@gmail.com

← Red Ember