Privacy Notice

Ember Health Inc. ("we," "us," or "our") operates the Ember Companion to provide emotional support, educational guidance, and navigation help for individuals and families facing cancer. This Privacy Notice explains what information we collect, how it is used, how it may be shared, your rights and choices, and how we protect your data. Your use of the Service means you agree to this Privacy Notice.

1. Who We Are

The Ember Companion is operated by Ember Health Inc., a Delaware corporation. Our mission is to improve the lives of cancer patients, caregivers, and families through clarity, compassion, and trustworthy guidance.

The Service is powered by Chatbase, a third-party AI platform that securely processes user interactions. Chatbase is SOC 2 Type II certified, GDPR compliant, and committed to not using customer data to train generalized AI models. For Chatbase's policy: chatbase.co/legal/privacy.

2. Information We Collect

A. Information you provide

When you interact with the Ember Companion, you may provide:

• Messages typed into the chat
• Questions about symptoms, treatments, imaging, or logistics
• Emotional reflections or personal experiences
• Caregiving information
• Information about care coordination, emotional health, or decisions
• Files or uploads you choose to submit (if enabled)

You should avoid sharing identifiable medical documents or sensitive personal information unless necessary.

B. Automatically collected information

Chatbase may automatically collect:

• IP address (used only for general region, not precise geolocation)
• Device and browser type
• Operating system
• Usage logs, time stamps, and session data
• Interaction patterns (for analytics and security)

This data helps ensure the platform is stable, secure, and functioning properly.

3. How We Use Your Information

A. To operate the Ember Companion

• Process submissions
• Generate responses
• Maintain accuracy, functionality, and safety
• Troubleshoot performance issues

B. To improve the Service

We use de-identified inputs to improve clarity, tone, and safety of responses; emotional support frameworks; educational accuracy; and user experience.

C. To develop insights, analytics & research (including monetization)

Ember Health Inc. may analyze de-identified, aggregated, or derived data from user interactions to understand caregiver and patient needs; measure emotional or quality-of-life patterns; develop frameworks such as precision empathy, dQoL, or relational health indices; improve the AI model's support capabilities; support registries, advocacy, or research collaborations; create analytics, insights, dashboards, or reports; and develop commercial offerings, including insights and analytics that may be sold or licensed to healthcare organizations, institutions, advocacy groups, or researchers.

We never sell or monetize identifiable personal data. All commercial use applies only to de-identified, aggregated, or derived data.

D. No use of data to train general AI models

Chatbase does not use your data to train broad AI models. Your conversations remain within the Companion's controlled environment.

E. Legal compliance and safety

We may use your data to detect misuse or security risks, comply with legal obligations, and enforce our Terms of Use.

4. How We Share Information

We do not sell identifiable personal data. We may share information with service providers (including Chatbase and secure infrastructure providers who process data on our behalf); with research or advocacy partners, where any shared insights or datasets are de-identified and aggregated; and for legal reasons, if required by law, court order, or to prevent harm.

5. How We Protect Your Information

We use industry-standard protections to safeguard data, including:

• Encryption in transit (HTTPS)
• Encryption at rest
• SOC 2 Type II and GDPR-aligned security controls via Chatbase
• Access restrictions
• Auditing and monitoring
• Firewalls and automated security measures

We do not attempt to re-identify anonymized data.

6. Your Rights and Choices

You have the right to access your identifiable data, request correction of inaccurate information, request deletion of identifiable data, and request restriction of processing where applicable. To exercise your rights, contact hello@emberhealth.ai.

Deletion requests apply to identifiable data only. De-identified and aggregated insights already used in analytics or research cannot be removed, as they no longer contain personally identifying information.

7. Children's Privacy

The Service is not intended for children under 18. Minors should use the Service only with parental or guardian supervision. We do not knowingly collect data from children under 13.

8. Data Retention

We retain identifiable data only as long as necessary to operate the Service or comply with legal obligations. De-identified and aggregated data may be retained indefinitely for research, analytics, and improvement.

9. International Users

If you access the Service from outside the United States, your information may be transferred to and processed in the U.S., where data-protection laws may differ from those in your country.

10. Updates to This Privacy Notice

We may update this Notice periodically. Changes become effective when posted with a new "Last Updated" date. Continued use of the Service indicates acceptance of the updated Notice.

11. Contact Us

If you have questions about this Privacy Notice, data use, or your rights, please contact hello@emberhealth.ai.

Ember Health Inc.