PRIVACY NOTICE — Ember Companion Companion

Powered by Chatbase

Last Updated: April 8, 2026

Ember Health Inc. ("we," "us," or "our") operates the Ember Companion to provide emotional support, educational guidance, and navigation help for individuals and families facing cancer. This Privacy Notice explains:

  • what information we collect,
  • how it is used,
  • how it may be shared,
  • your rights and choices,
  • and how we protect your data.

Your use of the Service means you agree to this Privacy Notice.

1. Who We Are

The Ember Companion is operated by Ember Health Inc., a Delaware corporation. Our mission is to improve the lives of cancer patients, caregivers, and families through clarity, compassion, and trustworthy guidance.

The Service is powered by Chatbase, a third-party AI platform that securely processes user interactions. Chatbase is:

  • SOC 2 Type II certified
  • GDPR compliant
  • Committed to not using customer data to train generalized AI models

For Chatbase's policy: https://www.chatbase.co/legal/privacy

2. Information We Collect

We collect the following categories of information:

A. Information You Provide

When you interact with the Ember Companion, you may provide:

  • Messages typed into the chat
  • Questions about symptoms, treatments, imaging, or logistics
  • Emotional reflections or personal experiences
  • Caregiving information
  • Information about care coordination, emotional health, or decisions
  • Files or uploads you choose to submit (if enabled)

You should avoid sharing identifiable medical documents or sensitive personal information unless necessary.

B. Automatically Collected Information

Chatbase may automatically collect:

  • IP address (used only for general region, not precise geolocation)
  • Device and browser type
  • Operating system
  • Usage logs, time stamps, and session data
  • Interaction patterns (for analytics and security)

This data helps ensure the platform is stable, secure, and functioning properly.

3. How We Use Your Information

We use your information for the following purposes:

A. To Operate the Ember Companion

  • Process submissions
  • Generate responses
  • Maintain accuracy, functionality, and safety
  • Troubleshoot performance issues

B. To Improve the Service

We use de-identified inputs to improve:

  • clarity, tone, and safety of responses
  • emotional support frameworks
  • educational accuracy
  • user experience

C. To Develop Insights, Analytics & Research (Including Monetization)

Ember Health Inc. may analyze de-identified, aggregated, or derived data from user interactions to:

  • understand caregiver and patient needs
  • measure emotional or quality-of-life patterns
  • develop frameworks such as precision empathy, dQoL, or relational health indices
  • improve the AI model's support capabilities
  • support registries, advocacy, or research collaborations
  • create analytics, insights, dashboards, or reports
  • develop commercial offerings, including insights and analytics that may be sold or licensed to healthcare organizations, institutions, advocacy groups, or researchers

We never sell or monetize identifiable personal data. All commercial use applies only to de-identified, aggregated, or derived data.

D. No Use of Data to Train General AI Models

Chatbase does not use your data to train broad AI models. Your conversations remain within the GBM AI Companion's controlled environment.

E. Legal Compliance and Safety

We may use your data to:

  • detect misuse or security risks,
  • comply with legal obligations,
  • enforce our Terms of Use.

4. How We Share Information

We do not sell identifiable personal data. We may share:

A. With Service Providers

Including Chatbase and secure infrastructure providers who process data on our behalf.

B. With Research or Advocacy Partners (De-Identified Only)

Any shared insights or datasets are de-identified and aggregated.

C. For Legal Reasons

If required by law, court order, or to prevent harm.

5. How We Protect Your Information

We use industry-standard protections to safeguard data, including:

  • encryption in transit (HTTPS)
  • encryption at rest
  • SOC 2 Type II and GDPR-aligned security controls via Chatbase
  • access restrictions
  • auditing and monitoring
  • firewalls and automated security measures

We do not attempt to re-identify anonymized data.

6. Your Rights and Choices

You have the right to:

  • A. Access your identifiable data
  • B. Request correction of inaccurate information
  • C. Request deletion of identifiable data
  • D. Request restriction of processing where applicable

To exercise your rights, contact: hello@emberhealth.ai

Note: Deletion requests apply to identifiable data only. De-identified and aggregated insights already used in analytics or research cannot be removed, as they no longer contain personally identifying information.

7. Children's Privacy

The Service is not intended for children under 18. Minors should use the Service only with parental or guardian supervision. We do not knowingly collect data from children under 13.

8. Data Retention

We retain identifiable data only as long as necessary to operate the Service or comply with legal obligations. De-identified and aggregated data may be retained indefinitely for research, analytics, and improvement.

9. International Users

If you access the Service from outside the United States, your information may be transferred to and processed in the U.S., where data-protection laws may differ from those in your country.

10. Updates to This Privacy Notice

We may update this Notice periodically. Changes become effective when posted with a new "Last Updated" date. Continued use of the Service indicates acceptance of the updated Notice.

11. Contact Us

If you have questions about this Privacy Notice, data use, or your rights, please contact:

hello@emberhealth.ai

Ember Health Inc.