Ember Privacy Policy

Effective: September 24, 2026

Oriscen, Inc. (“Oriscen,” “we,” “us,” “our,”) provides Ember, an artificial intelligence (“AI”) thinking partner for the real situations of your own life, operating by telephone, by text message through your phone’s native messaging apps, and through your web browser. Ember is an AI and not a person; the Services say so on every door — a standing line under the conversation on the web, the welcome text and the HELP reply on the text door, the spoken words that open every call — and the Services place crisis resources in front of a user whose words carry a risk of self-harm; the protocol is published at ember.space/safety. You tell Ember about your own life situations; Ember responds, keeps context, and writes what you told as a private, first-person page for you (an “Ember”). Nothing you tell becomes a public post. Three different things can happen to what you tell: it is used to serve you; unless you turn this off, eligible Embers may be used — with identifying details removed — to help Ember understand and respond to people in similar situations (“Background Experience,” see Section 3); and no one can read your Ember unless you separately say yes — if Ember finds a real connection between what you told and what another user told, it asks each of you, and only if both say yes does that one user read that one Ember, in your words and without your identity (see Section 4).

This Privacy Policy explains how we collect, use and share the personal information that we may collect, when you visit the subdomains and websites on https://ember.space/ (the “Sites”), become a Customer, contact us to obtain more information, send an opt-in text or SMS message to our platform, or otherwise directly through your use of our online platform and services (“Services”). A reference to “Oriscen,” “we,” “us,” or the “Company” is a reference to Oriscen and its relevant affiliates involved in the collection, use, sharing, or other processing of personal information.

Please visit the following links to learn more about our Privacy Policy:

  1. Whose Personal Information We Collect
  2. Personal Information We Collect
  3. How We Use Your Personal Information
  4. How We Share Your Personal Information
  5. Cookies or Similar Technologies
  6. Privacy Rights & Additional Disclosures for Certain U.S. Residents
  7. Children’s Privacy
  8. International Transfers of Data
  9. Change of Control
  10. Data Security and Retention
  11. Privacy Policy Updates
  12. Contact Information

1. Whose Personal Information We Collect

Oriscen obtains information from various entities. These entities are defined below by what they are referred to in this Privacy Policy and when information is collected. Entities may overlap and are not exclusive categories.

  • Website visitors: When you visit our Sites or contact us directly for more information.
  • Customers: When you contact us or engage with our Services, including free and paid versions.

Third Party Links and Websites. Our Sites and Services may contain links to and from websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any data to these websites.

2. Personal Information We Collect

Information You Give Us. You may give us information by signing up for an online account, entering information through our forms or surveys, inputting information while using our Services (including sharing information about yourself or other individuals via messages), or contacting us by phone or email for information or customer service.

The categories of information include:

  • Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (“IP”) address, email address, account name, or other similar identifiers.
  • Categories of personal information described in Section 1798.80(e) of the California Civil Code, such as name, address, or telephone number.
  • Commercial information, such as products or services purchased, obtained or considered, or other purchasing or consumer histories or tendencies.
  • Internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application or advertisement.
  • Geolocation data.
  • Electronic or similar information.
  • Inferences drawn from your personal information to create a profile about you and your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. In practice these are Ember’s readings of where you stand in the situation you are describing, made from your own words in order to respond to you, to find related experience and, for account holders, to write the weekly letter, and a reading of whether your words carry a risk of self-harm (see Section 3).

We do not collect biometric information: your voice is transcribed, and no voiceprint or other biometric template is extracted from it.

The categories of sensitive personal information include:

  • Contents of mail, email, and text messages you send to Ember or otherwise authorize us to process, and — where you speak with Ember by telephone or through your browser — the recording of that conversation and its transcript;
  • Precise location information, if you choose to provide it or authorize us to access it; and
  • Other sensitive information that you voluntarily include in your messages or requests. This covers all statutorily required categories of sensitive personal information under California law.

When you input information while using our Services, including but not limited to sending messages, granting us access to third-party services, or instructing the Services to retrieve or act on information you provide, you acknowledge that you are responsible for ensuring you have the necessary rights, permissions, or authority to do so. We collect each category of sensitive personal information solely for the purposes outlined in Section 3.

Information We Automatically Collect.

  • Sites: Like many website operators, we collect information that your browser sends whenever you visit our Sites. This includes log data, such as your computer’s IP address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics, and whether you reached our page via a social or email campaign.
  • Services: Some of our Services will collect information such as IP addresses, log-in credentials, connectivity details and device and browser information, approximate or precise location information if enabled, usage logs, interaction timestamps, error reports, and information about how you interact with the Services. This is used for access control and management.

Information We Collect from Third Parties. If you access our Sites or Services through third parties (e.g., Meta or Google), or if you share content from our Sites to a third-party social media service, the third-party service will send us information about you if the third-party service and your account settings allow such sharing. The information we receive will depend on the policies and your account settings with the third-party service.

3. How We Use Your Personal Information

We use your personal information for the following purposes:

  • To provide you with the Services on our Sites, which includes:
    • maintaining and servicing accounts,
    • providing customer service,
    • processing and filling orders and transactions,
    • verifying customer information,
    • processing payments,
    • providing advertising or marketing services to you.
    • understanding your messages, prompts, instructions, and context;
    • generating responses, suggestions, reminders, plans, or other AI-powered outputs.
  • To provide analytics services, such as analyzing customer usage to personalize and customize your experience across our Services.
  • To improve and develop our Services and conduct research, for example to develop new features.
  • To evaluate and improve the safety, reliability, and performance of our Services. We may use aggregated, deidentified, or otherwise privacy-protective information to improve the Services, including training and improving our AI models.
  • To conduct market research and project planning.
  • To detect security incidents, protect against fraudulent or other criminal activity, debug and repair errors, and maintain the overall quality and safety of our Sites and Services.
  • To share your website visitor activity, through website cookies, with third-party marketing partners to market our Services and our Sites and other websites that you may visit.
  • To fulfill our legal and financial obligations.
  • To investigate and resolve disputes.

Background Experience. To help Ember understand and respond to life situations, we may analyze and use eligible Embers and derived versions of them as background experience for the Services. Before an Ember is used in this way, identifying details may be removed, generalized, or otherwise transformed. Background Experience may be used to improve the relevance, reasoning, retrieval, matching, and responses provided by Ember in similar situations. Background Experience does not, by itself, authorize Ember to display, quote, or provide your Ember to another user. Access by another user requires a separate feature or permission described in the Services. You can disable Background Experience through your privacy settings (the “Help Ember understand similar situations” switch); doing so stops future background use of your Embers. We do not use information for Background Experience where applicable law requires consent that we have not obtained or where the information is otherwise ineligible under our privacy rules.

Marketing. We may use your personal information to contact you with newsletters, marketing, or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of the communications from us by following the unsubscribe instructions provided in any email we send, or you can contact us using the contact details provided at the bottom of this Privacy Policy. You will still continue to receive service-related messages concerning products and Services you have purchased (unless we have indicated otherwise). For more information about our mobile messaging services, please visit our Mobile Terms.

4. How We Share Your Personal Information

To Other Users, Subject to Your Settings. We may share your information with other users or the public with your consent, and the settings you choose determine how much is shared. No other user can read your Ember unless you separately say yes. When Ember finds a real connection between one of your Embers and what another user has told, it first asks that user whether they would like to read it, then asks you whether this one user may; only if you both say yes does that one user read that one Ember, in your words and without your name, voice, recording, transcript, or contact details, and you can close it again at any time. Background Experience (Section 3) is not sharing with another user: it never displays, quotes, or provides your Ember to anyone. You may also choose to leave feedback or a testimonial, or to send your Ember to someone yourself with a link you can take back.

Affiliates and Service Providers. We share your information with our third-party service providers and any subcontractors as required to offer our Services. The service providers we use help us to:

  • Run, operate, and maintain our Sites and Services through third-party platforms and software tools;
  • Perform content moderation and crash analytics;
  • Provide the artificial intelligence models that generate and evaluate the Services’ responses;
  • Provide voice calling, speech recognition, and transcription for our phone and browser voice features;
  • Generate the header image and the background music that accompany a story page, from a short description of its scene and mood;
  • Run email and mobile messaging campaigns;
  • Provide measurement services and targeted ads (you can opt out of these services at websites such as http://www.aboutads.info/choices);
  • Provide payment attribution; and
  • Provide technical and customer support.

As of the Effective Date these providers are: Render (hosting) and Cloudflare (content delivery); Anthropic, OpenAI, Google Cloud Vertex AI and Fireworks AI (the AI models that generate and evaluate responses, write the Ember page and compute the retrieval signals that find related experience — configured so that our requests are not used to train their models and, where the provider offers it, not retained after the request); ElevenLabs (voice calling, speech recognition and transcription; the recording and transcript of a call are held there and deleted when your account is deleted); Google Firebase (phone-number sign-in and app notifications); Linq (text messaging); Cloudinary (the photos you add); Stripe (payments); Meta, TikTok and Google Ads (measurement of our advertising — hashed identifiers, ad click identifiers and event names only, never the contents of a conversation, and only from a browser that accepted cookies); Google Analytics (aggregate usage statistics for our Sites, only from a browser that accepted cookies).

Some external service providers may also collect information directly from you (for example, a payment processor may request your billing and financial information) in accordance with their own privacy policy. These external service providers do not share your financial information, like credit card number, with us, but may share limited information with us related to your purchase, like your zip code.

Aggregated or Deidentified Data. We may use and disclose aggregated or otherwise deidentified information that does not identify and cannot reasonably be linked to an individual. We will maintain and use deidentified information in deidentified form and will not attempt to reidentify it, except as permitted or required by applicable law.

Third Party Marketing and Advertising Cookies. With respect to website cookies, we share your information with third-party marketing and advertising partners to market our products and Services on our Sites and other websites you may visit.

Third Party Marketing. If you are one of our Customers, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information to third parties for third parties’ direct marketing purposes. To make such a request, please contact us using the details in the “Contact Information” section below.

Disclosures Required by Law. We may be required to disclose your data in response to lawful requests by public authorities, including meeting law enforcement requirements. We may be under a duty to disclose or share your personal information to comply with any legal obligation, to enforce or apply our terms and conditions and other agreements, to protect our rights, property, safety, or to protect the rights, property, or safety of others. This includes exchanging information with other companies and organizations for the purposes of fraud protection.

5. Cookies or Similar Technologies

To make our Sites and Services work properly, we use technologies such as cookies, web beacons, clear GIFs, and other means, such as the Meta Pixel, the TikTok Pixel, the Google tag (Google Ads and Google Analytics), and our product analytics tools, to collect information.

Cookies

We sometimes place small data files called cookies on your device. A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, shopping cart, or other preferences) over a period of time, so you do not have to keep re-entering them whenever you come back to the site or browse from one page to another.

You may wish to restrict the use of cookies. Please be aware that some of the features of our Sites may not function correctly if you disable cookies. Most modern browsers allow you to change your cookie settings. You can usually find these settings in the options or preferences menu of your browser. To understand these settings, the following links for commonly used browsers may be helpful:

Do Not Track

Some browsers provide you with a way to signal that you do not want your browsing activity to be tracked. The Sites honor the Global Privacy Control signal described below; they do not respond to the older Do Not Track (“DNT”) signal, for which there is no agreed meaning.

California and certain other U.S. state residents may opt out of tracking technologies by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (“GPC”) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. A browser sending the GPC signal loads none of the advertising cookies, and the signal, read by our servers, removes the stored advertising identifiers for that browser and — if you are signed in — for your account, so that no further measurement events about you are sent to an advertising platform.

6. Privacy Rights & Additional Disclosures for Certain U.S. Residents

Several jurisdictions grant state residents certain rights and disclosures. We provide the following information to further help you understand your potential privacy rights. If you would like to exercise any rights or inquire as to whether such rights are available to you, please email us at contact@oriscen.ai.

Request for Information. Residents of certain U.S. states have the right to know whether we are processing your personal information, and in some instances, you have the right to request that we disclose to you the categories listed below for the preceding 12 months. In responding to this right, we shall provide to you:

  • The categories of personal information we collect about you.
  • The categories of sources from which your personal information is collected.
  • The business or commercial purpose(s) for collecting, selling, sharing, or disclosing your personal information, and the categories of personal information disclosed for such purpose(s).
  • The categories of third parties with whom we share your personal information.
  • The categories of personal information we have sold, if any, about you and the categories of third parties to whom your personal information was sold, by category or categories of personal information for each third party to whom the personal information was sold.
  • The specific pieces of personal information we have collected about you.

Request for Deletion. Residents of certain U.S. states have the right to request we delete your personal information. Once we receive your request and confirm your identity, we will delete or deidentify personal information and direct our service providers to take similar action. Deleting your account (see ember.space/delete-account) erases everything the account holds after a 30-day window, including the recordings and transcripts of your calls held by our voice provider. Deleting a single Ember from Your Embers withdraws it from every place it appeared — Background Experience, any reader you had said yes to, the lights it stood at — while the conversation it was written from stays in your account until the account is deleted; you may also ask us to delete a particular conversation or part of one by contacting us.

Request for Correction. Residents of certain U.S. states have the right to request the correction or rectification of inaccurate information in the resident’s personal information.

Request for Portable Data. Residents of certain U.S. states have the right to receive, in certain circumstances, a portable format of their personal information that allows the data to be transmitted to another entity.

Do Not Sell or Share My Personal Information. Residents of certain U.S. states have the right to opt out of the sale or sharing of the consumer’s personal information. We do not sell personal information. The one sharing we do is the advertising measurement described in Section 5; you may opt out of it by choosing “Reject” under “Cookie preferences” in the footer of the Sites, by sending the Global Privacy Control signal, or by contacting us using the details in the “Contact Information” section below.

Limiting the Use of Sensitive Personal Information. Residents of California have the right to direct us to use or disclose sensitive personal information only for providing goods or services, or as otherwise minimally permitted under applicable law.

We use sensitive personal information — the contents of what you tell Ember — to provide the Services: to respond to you, to read where you stand in the situation you describe, to find related experience, to write you, if you have an account, a weekly letter about what you have told Ember, and to read whether your words carry a risk of self-harm. We do not use it to infer characteristics about you for advertising or for any purpose other than providing the Services, maintaining security and complying with law. You retain the statutory right to limit our use of your sensitive personal information.

Consumer Health Data and Background Experience. Some jurisdictions, including Washington, require affirmative, opt-in consent before consumer health data or other sensitive personal information may be processed for a purpose beyond providing the service you requested. Ember does not use such information for Background Experience where applicable law requires affirmative consent unless that consent has been obtained: an Ember that reveals it is kept out of Background Experience until you turn Background Experience on for that Ember yourself, on its own page, and the moment you do is recorded. Turning it off again, or disabling Background Experience in Settings, stops such use from the next conversation on.

Automated Processing and Profiling. Residents of certain U.S. states have the right to opt out of the processing of personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer. However, we do not process your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects.

Right to Equal Service and Price. You have the right to receive equal service and price, even if you exercise a privacy right.

Response Timing and Fees. We respond to verifiable consumer requests within 45 days, extendable another 45 days with prior notice. Two verifiable right to know requests per 12-month period are provided free of charge.

Verification Process for Exercising Rights. To protect our consumers’ privacy, we verify privacy rights requests to ensure that only you (or your authorized agent) can exercise rights pertaining to your personal information with reasonable methods. As part of our verification process, we may request you to submit additional information.

If you are using an authorized agent wishing to exercise rights on behalf of a state resident, please contact us using the information at the bottom of this Privacy Policy and provide us with a copy of the consumer’s written authorization designating you as their agent. We may need to verify your identity and place of residence before completing your rights request. We will not require you to provide more information than reasonably necessary to verify your identity or authority to make the request.

Appeal Process. In certain cases, we may decline to take action on your request as permitted by law. Should we decline your request, we may provide you with a written explanation of the reasons for our decision and an opportunity to appeal the decision.

If we deny your appeal, we may provide a written explanation of our decision with instructions on how to contact your local Attorney General or Department of Justice for further review, where permitted under certain U.S. state privacy laws.

7. Children’s Privacy

The Sites and Services are not directed at children under the age of 18, and Ember may not be suitable for some minors. The web and app sign-in ask you to confirm that you are 18 or over, and the text door says so when you join. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us using the contact details provided at the end of this Privacy Policy, and we may delete or anonymize associated personal information in accordance with applicable law within a reasonable time.

8. International Transfers of Data

Any information that you provide to us may be accessed, shared, or processed by our offices, located in the United States, and service providers located in the United States, if such data transfer is necessary for the specific purpose for which you submitted your data (such as the provision of goods or services under a written contract). This may entail a transfer of your personal information across international borders. The data protection standards may differ and be lower than the standards enforced in your jurisdiction. We maintain appropriate safeguards as required by applicable law for any personal information transferred internationally.

9. Change of Control

Personal information may be transferred to a third party because of a sale, acquisition, merger, reorganization, or other change in control. If we sell, merge, or transfer any part of the business, part of the sale may include your personal information.

10. Data Security and Retention

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. However, no website, application, or transmission can guarantee security. Thus, while we have established and maintain what we believe to be appropriate technical and organizational measures to protect the confidentiality, security, and integrity of personal information obtained through the Sites, we cannot ensure or warrant the security of any information you transmit to us.

We retain information from or about you for so long as necessary to fulfill the purposes outlined in this Privacy Policy. When the information is no longer necessary for these purposes, we delete it or keep it in a form that does not identify you, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrollment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations. In practice: your conversations, Embers and settings are kept for as long as your account exists and are erased 30 days after you delete it; an unclaimed guest telling is erased after 7 days; our AI model providers do not retain our requests beyond the request itself or, where the provider requires it, a short abuse-monitoring window; and the small set of compliance records described at ember.space/delete-account outlives the account.

11. Privacy Policy Updates

This Privacy Policy may be periodically updated. When we make material changes, we may provide reasonable notice if required by applicable law. We encourage you to periodically review this Privacy Policy to ensure you are familiar with the most current version. Please review carefully before submitting personal information to our Sites or Services. The date this Privacy Policy was last updated is indicated at the top of the page. We will review and update this Privacy Policy at least once every 12 months where required by applicable law.

12. Contact Information

If you wish to contact us or have any questions or complaints about this Privacy Policy, please contact us using the following information:

contact@oriscen.ai

Oriscen, Inc.
2261 Market Street STE 86857
San Francisco, CA 94114