Privacy Policy
Last Updated: November 12, 2025
This Privacy Policy describes how Emberskill LLC ("Emberskill," "we," "us," or "our") collects, uses, discloses, and protects your information when you use our website, mobile applications, and related services (collectively, the "Services").
By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
We collect the following categories of information to provide and improve our Services:
1.1 Account Information
When you create an account, we collect your:
- Name
- Email address
- Department name, role, and rank (for fire department users)
If you sign in using a third-party provider (such as Google), we receive limited account data (name, email, profile image) from that provider as authorized by your settings.
1.2 Course and Progress Data
We collect data related to your training progress, including:
- Course enrollments
- Quiz results, XP, and completion status
- Time spent on lessons or modules
1.3 Uploaded Content
Departments and users may upload files such as:
- PDF training manuals
- Course materials and media
Uploaded files are stored securely using Vercel Blob. Course content generated from these uploads may also be stored in structured form within our database.
1.4 Payment Information
Payments are processed securely by Stripe or another third-party payment processor. We do not store credit card numbers or banking details. Stripe's use of your personal information is governed by its own Privacy Policy.
1.5 Analytics and Technical Data
We collect technical and usage information through:
- Vercel Analytics and PostHog (site performance and engagement)
- Standard web logs (IP address, browser type, device type)
- Cookies for login persistence and session management
We do not use cookies for targeted advertising.
1.6 Location Data
We may collect approximate location data (e.g., city or region) for analytics or feature optimization. We do not track precise GPS location.
1.7 AI Processing Data
We use OpenAI services to assist in course generation.
- Uploaded PDFs and text may be temporarily stored in a vector database for processing (up to 30 days).
- We store only structured course and question data returned from AI models.
- Chat or AI interaction history is not stored.
2. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve our Services
- Authenticate users and manage accounts
- Generate and personalize training content
- Process payments and subscriptions
- Monitor system performance and prevent abuse
- Communicate with you about updates or support issues
- Comply with legal obligations and enforce our Terms of Service
3. How We Share Information
We may share your information only as follows:
With Service Providers: Including Supabase (database), Vercel (hosting), OpenAI (AI processing), Trigger.dev (automations), and Stripe (payments).
With Department Administrators: For users who belong to a fire department team, training progress and course participation data may be visible to department admins.
For Legal Compliance: If required by law, subpoena, or government request.
In Business Transfers: In case of a merger, acquisition, or sale of assets, user data may be transferred under this same policy.
We never sell personal data to third parties.
4. Data Retention
- PDFs and other uploads are stored until deleted by the user or department.
- AI processing data (vector embeddings and related text) are automatically deleted after 30 days.
- Account and course data are retained while your account remains active.
- You may request deletion of your account and associated data at any time (see Section 8).
5. Data Security
We implement industry-standard safeguards to protect your data, including:
- Encrypted data transmission (HTTPS / TLS)
- Limited employee access to production data
- Vercel and Supabase's managed security infrastructure
No system is completely secure, but we work continuously to mitigate risks and respond quickly to potential vulnerabilities.
6. Children's Privacy
Our Services are intended for users ages 12 and older.
We do not knowingly collect personal data from children under 13. If we learn that we have inadvertently collected such data, we will promptly delete it.
7. Cookies and Tracking
We use cookies and similar technologies solely for:
- Authentication and session persistence
- Site performance and reliability
You can disable cookies through your browser settings, though some features may not function properly.
8. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access or download your personal data
- Request correction or deletion of your data
- Withdraw consent for certain processing
- Request a copy of stored information in a portable format
You can make these requests by contacting us at:
We will respond to verified requests within a reasonable time frame.
9. International Data Transfers
Emberskill currently operates within the United States and does not intentionally offer services to users located in the European Union or other international regions.
If you access our Services from outside the U.S., you consent to your information being transferred to and processed in the United States.
10. Changes to This Policy
We may update this Privacy Policy periodically. When we do, we will update the "Last Updated" date at the top of this page. Significant changes will be communicated through in-app notifications or email where appropriate.
11. Contact Us
If you have questions, concerns, or data requests, please contact us at:
Email: admin+privacy@emberskill.com
Physical Address: Omitted for privacy; available upon lawful request.