Security & privacy
How Ember looks after your money data.
The short version: you bring your own bank exports, the data is stored in Sydney, AI is used carefully, and you can take it all or delete it whenever you like. The detail is below, and the Privacy Policy is the formal version.
Getting your data in
Ember doesn't connect to your bank. You download a CSV of your transactions from internet banking and upload it, or email it to your own Ember address. Ember never asks for, sees or stores your banking password, and never sees your full account or card numbers.
We're exploring bank feeds through Australia's Consumer Data Right (CDR). They aren't available, and we won't offer them until they meet the CDR rules.
Where it's stored
Your data is stored in Australia, in Supabase's Sydney region. It's encrypted on the way to us (HTTPS) and when stored. Each household's data is kept separate: only the members of your household can see it.
Signing in
There's no Ember password to leak. You sign in with a one-time code sent to your email. During the beta, only invited email addresses can create an account.
How AI is used
Most categorisation needs no AI: your own corrections and Ember's merchant list handle it. For a merchant Ember hasn't seen before, it sends Anthropic's Claude a short request with the description and amount. Emails, phone numbers, BSB-like and card-like numbers and street addresses are removed first.
When you use Ember AI chat or read Ember's insights, the parts of your financial data needed to answer are sent to Claude. Anthropic doesn't use this data to train its models, and keeps requests for up to 30 days for abuse monitoring before deleting them.
You can turn AI categorisation off in Settings, and not use chat. Ember's answers are general information about your own money, not financial advice.
Services we use
These are the companies that handle Ember data, and where.
| Service | What it does | Where |
|---|---|---|
| Supabase | Database and sign-in. Your transactions, accounts and settings live here.Sydney, Australia | Sydney, Australia |
| Vercel | Runs the website and app. Server functions run in Sydney.Sydney, with a global network for the site itself | Sydney, with a global network for the site itself |
| Anthropic | The AI models behind categorisation and Ember AI chat. Doesn’t train on this data.United States | United States |
| Postmark | Sends sign-in codes and receives the exports you email to Ember.United States | United States |
| GitHub | Makes a nightly backup of the database and encrypts it before storing it for 30 days. The key to read it is kept offline by us, not at GitHub.United States | United States |
We don't sell your data, show ads, or share it with banks, insurers or employers.
Your control
- Download everything Ember holds about you as a file, from Settings.
- Close your account from Settings. Your data is deleted after a 30-day grace period, in case you change your mind. Copies in the encrypted backups expire within a further 30 days.
- Turn off AI categorisation, or disconnect an AI assistant you've linked.
Who's behind Ember
Ember is built and run by EmberFI Pty Ltd (ACN 700 035 089), an Australian company. Access to Ember's systems is limited to the founder, with two-step sign-in on every service that can reach your data.
Found a problem?
If you think you've found a security issue, or have a question about your data, email tech@emberfi.com.au. We'll reply as soon as we can.