Privacy Policy

Embrly is operated by Ignite CFO Group (“we,” “us”). This policy explains what we collect, why, and the choices you have. It covers the Embrly mobile app and our websites, including public stylist portfolio pages.

What we collect

• Account information. Your email address, display name, and — if you choose — an Instagram handle. Sign-in is by email link; we never see or store a password.
• Salon and team data. The salon you belong to, your role (owner or stylist), invitations, weekly themes, streaks, kudos, and reactions.
• Photos. Before-and-after photos you capture, which may include images of your clients. Photos are stored privately; teammates see a photo only after you share it, and the public sees it only on your published portfolio page.
• Client consent records. When you record a client’s consent for a photo, we store the name or initials you enter and the time of consent, attached to that photo. For clients aged 13–17, the record also includes the name of the parent or guardian who gave consent.
• Caption voice samples. Example captions you paste in so that generated captions match your writing style.
• Usage and device data. Basic technical information needed to run the service (such as push-notification tokens you authorize) and, on public portfolio pages, page views and booking-link clicks with the referring site.

How we use it

• To run the product: themes, captures, sharing, streaks, team feeds, and portfolios.
• To generate captions. Your voice samples, service tags, and the week’s theme are sent to our AI provider (Anthropic) to draft captions. These requests are used to generate your captions — not to train the provider’s models.
• To keep consent honest: we use automated analysis to help flag photos that may show clients under 18, so we can confirm the right consent is on file. This is a safeguard, not an age determination — a flagged photo is simply held from public pages until the right consent is confirmed.
• To send app notifications you’ve authorized (weekly theme launches, reminders, kudos), capped and with quiet hours.
• To show stylists how their portfolio performs (views and booking clicks).
• To fix problems and keep the service secure.

We do not sell your data. We do not post to your social accounts — sharing always happens from your own device through your own apps.

What your team can and can’t see

• Salon owners and teammates can see your shared posts, streaks, and participation.
• Nobody — including your salon owner — can see photos you haven’t shared. Unshared captures and photos without client consent stay private to you.
• Your portfolio and captures belong to you and stay with you if you leave a salon.

Service providers

We use a small set of processors to run Embrly:

• Supabase (database, authentication, file storage)
• Vercel (website hosting)
• Anthropic (AI caption generation)
• Expo (app infrastructure and push notifications)
• Stripe (subscription billing and payment processing)
• PostHog (product analytics)
• Sentry (error monitoring)
• TikTok and Meta (advertising measurement on our websites — see below)

Each processes data on our behalf, under its own privacy terms, only as needed to run Embrly. We don’t sell your personal information.

Advertising measurement on our websites

Our websites (not the app) include small measurement scripts — “pixels” — from TikTok and Meta. They exist for one reason: when we run an ad, they tell us whether it worked. A pixel sets a cookie in your browser and reports the pages you visit here, along with technical details like your approximate location, to the platform that provided it. We don’t send them your name, your email, your photos, or anything from inside the app — and no pixels run in the Embrly app itself. When a purchase completes on our site, we may also confirm that one conversion to the platform from our server — the same measurement, just delivered reliably when a page doesn't finish loading. That confirmation carries only the pixel's own cookie identifiers and the technical details described above, never your name, your email, or anything from inside the app.

You can limit this: block cookies for our site in your browser, use a content blocker (the site works fine with pixels blocked), or use the ad-preference controls in your TikTok and Meta account settings. Some laws treat this kind of ad measurement as “sharing” personal information; if you’d rather we treat your visits as opted out, email privacy@embrly.app.

Retention & deletion

We keep your data while your account is active. You can delete your account at any time in Settings → Delete account, which permanently removes your account, photos, posts, consent records, and portfolio (residual copies leave backups within 30 days). See data deletion for details, including deletion by email if you can’t access the app.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Email privacy@embrly.app and we’ll help. If you appear in a photo taken by a stylist and want it removed, contact us and we’ll work with the stylist to resolve it.

Children

Embrly is for working professionals and is not directed to anyone under 16, and we do not knowingly collect data from children. Clients under 13 are not permitted subjects on Embrly: they may not appear in captures, and we do not knowingly collect children’s information. If we learn that we have, we remove it — contact privacy@embrly.app.

Changes & contact

We’ll update this page (and the effective date above) when our practices change. Questions: privacy@embrly.app.