Privacy Policy

Effective 19 September 2026. Short version: Emberleaf collects nothing. Your data stays on your devices.

What stays on your iPhone

Everything you enter or the app works out lives in the app's own database on your iPhone:

• your profile — age, sex, height, weight, activity level, goal and the loss rate you chose;
• your 12-week plan, the meals you swapped, the food you logged and the extras you added;
• your weigh-ins, workouts, sets, weights and reps;
• your shopping lists and what you ticked off;
• your settings, including which voice and which model you picked.

Like any app's data, it is included in your own device backup (iCloud Backup or a computer backup) under your Apple account. Emberleaf does not sync it to any cloud of its own. Deleting the app deletes the data.

Apple Health

If you allow it, Emberleaf reads steps, weight, active energy, heart rate, heart rate variability, resting heart rate, sleep and workouts from Apple Health, to show your progress and estimate your recovery, and writes the weigh-ins you log and the workouts you finish. You can change or withdraw this permission at any time in the Health app under Sharing.

Health data is read on the device and stays there. Emberleaf never transmits Health data, never uses it for advertising or marketing, never sells it and never shares it with anyone. When you delete a weigh-in in Emberleaf, the app also deletes the sample it wrote to Health.

Microphone and speech

The microphone is used only while you hold the microphone button to say what you ate, or while you are in a conversation with the coach. Speech is turned into text on the device — by Apple's speech framework or by a Whisper model you downloaded. No recording is kept and no audio leaves the phone.

The coach and the estimates

The coach, and the estimate of what you ate, run on the device: with Apple Intelligence's on-device model where your iPhone has it, or with a language model you download once. Your conversation is not sent to any server, not stored beyond the current conversation, and not used to train anything.

Model downloads — the only network traffic

When you tap Download in Settings › Models, Emberleaf fetches model files (the speech model, the language model, the voice) from huggingface.co over HTTPS. As with any download, that server sees your IP address while it serves the file. Emberleaf sends nothing else with the request — no identifier, no data about you. If you never download a model, the app makes no network request at all.

Apple Watch and widgets

The Apple Watch app receives your day's plan and workouts from the iPhone over Apple's device-to-device connection and keeps a copy on the watch. Widgets read a small snapshot the app writes in a container shared only between Emberleaf and its own widgets. Nothing in this path leaves your devices.

Notifications

Meal and workout reminders are local notifications, scheduled on your iPhone. Emberleaf has no push server.

Children

Emberleaf is a weight-management and fitness app for adults. It is not directed at children, and we knowingly collect no data from anyone — children included.

Your rights

Because we hold no data about you, there is nothing for us to access, correct, export or erase on your behalf: all of it is on your device, under your control. To erase everything, delete the app; to remove what the app wrote to Apple Health, use the Health app (Sharing › Apps › Emberleaf › Delete All Data from Emberleaf).

Changes

If Emberleaf ever starts to collect anything, this page will say so before that version ships, and the App Store label will change with it.

Contact

Questions about privacy: the support page.