Legal

Privacy Policy

Last updated: 9 May 2026

1. Who We Are

Ember Budget is operated by Nico Green, a sole trader based in the United Kingdom. Nico Green is the data controller for all personal data processed in connection with Ember.

Contact: n2buildz@gmail.com

2. What We Collect

We collect as little as possible. Here is exactly what Ember currently holds:

• Waitlist: your email address, if you joined the waitlist on the landing page. Nothing else — no name, no phone, no payment details.
• App account: budget data you enter manually — income figures, transactions, bill splits, savings goals. This is stored in a Supabase Postgres database.

Ember does not connect to your bank account. It does not use open banking, bank feeds, or any third-party financial data provider. It does not store bank credentials, card numbers, or any payment information.

3. Why We Collect It

• Waitlist email: to notify you when a beta access invite is ready, and occasionally to share updates about Ember's launch. You will not be added to any unrelated mailing list.
• Budget data: so that when you sign in, you can see your own figures. That is the entire purpose of the app. We do not analyse your spending data, sell it, or use it for anything other than showing it back to you.

4. Lawful Basis

Under UK GDPR and the Data Protection Act 2018:

• Waitlist emails: legitimate interests — you signed up specifically to hear about Ember, and sending you a beta invite is what you asked for.
• Budget data: contract — storing your data is necessary to provide the service you signed up to use.

5. Who Can See Your Data

Only Nico Green (the founder and sole operator of Ember) has access to user data for support and maintenance purposes.

Ember does not sell, rent, share, or pass your personal data to any third party for marketing or advertising purposes. Full stop.

6. Where Data Is Stored

Your data is stored in Supabase (a Postgres database platform), hosted on AWS infrastructure in EU/UK regions. Supabase acts as a data processor on Ember's behalf, under their standard data processing terms.

The Ember landing page is hosted on Vercel. Vercel may process request logs (IP addresses, user-agent strings) in the normal course of serving web pages. This is standard web infrastructure and is governed by Vercel's own data processing agreements.

No data is transferred to countries outside the UK/EEA without appropriate safeguards in place.

7. How Long We Keep It

• Waitlist emails: retained until you request deletion, or until the waitlist is closed and the list is deleted — whichever comes first.
• App account data: retained for as long as your account is active, or until you request deletion.

We do not hold data longer than necessary.

8. Your Rights

Under UK GDPR, you have the following rights. We have tried to explain each one plainly:

• Access: you can ask us what data we hold about you and receive a copy of it.
• Correction: if something we hold is wrong, you can ask us to correct it.
• Deletion: you can ask us to delete your data. We will do so within 30 days (see section 9).
• Restriction: you can ask us to pause processing your data in certain circumstances — for example, while a dispute is being resolved.
• Portability: you can ask for your data in a structured, machine-readable format so you can take it elsewhere.
• Objection: you can object to us processing your data where we rely on legitimate interests as our lawful basis.
• Complaint: if you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to sort things out directly first.

9. How to Request Deletion

Email n2buildz@gmail.com from the address you signed up with. State that you want your account and/or waitlist entry deleted.

We will confirm receipt and complete the deletion within 30 days.

10. Cookies and Tracking

We do not currently use cookies or third-party analytics on the landing page. The only external network requests the landing page makes are to Google Fonts (to load typefaces) and to Supabase (to record waitlist sign-ups and retrieve the signup count). No advertising pixels, no session recording, no behavioural tracking.

If we introduce analytics or cookies in the future, we will update this policy and — where required — ask for your consent.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make a material change — one that affects your rights or how we use your data — we will notify you by email before the change takes effect.

Minor clarifications or formatting changes may be made without notification. The "Last updated" date at the top of this page always reflects the most recent version.

12. Contact

For any privacy-related queries, rights requests, or concerns, contact: n2buildz@gmail.com