Privacy & saved data

Your steps.
Your quiet corner.

Draft for owner review

This privacy draft describes the current Embertrail preview. The responsible developer, contact details and public hosting data handling still need confirmation before publication.

Who is responsible

The app is Embertrail. Public developer: Embertrail preview.

Step data and its purpose

Embertrail reads step reports from Health Connect and supported watch Health Services to advance a fictional personal journey. It stores recent daily reports, a starting reference and accumulated journey progress. With your Steps write permission, Embertrail sends its timestamped watch measurements to Health Connect. From the next full local day, Health Connect combines phone and watch coverage using your source priority for overlapping intervals. The first partial day keeps the higher-report fallback. Separate full-day totals are never added.

Reports can arrive late or be revised downward. A source update preserves previously saved progress rather than adding old steps again. Missing older reports can leave gaps. Fictional distance uses a fixed 0.762 metres per step and does not represent a GPS measurement.

If you place an Embertrail home-screen widget and allow background access, Embertrail reads step reports from Health Connect about every 30 minutes to keep the widget current. Without a placed widget, background reading stops.

How step data is used

Step data is used only to show and advance your personal journey, its widgets and its watch display. Embertrail does not sell step data, use it for advertising or share it with third parties. The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

What stays on your devices

The current preview stores the personal journey, recent reports, appearance and other preferences in app-private storage. Local recovery copies preserve some earlier saves. Paired phone/watch components exchange step reports and appearance or widget state to support the journey; this is separate from any public party service.

There is no user account or automatic cloud restore. In Help or Privacy, Backup & restore lets you save a portable copy of your journey, earned looks and settings through Android’s file picker. Keep it outside the app before changing phones or uninstalling. Without a usable exported backup, device loss or uninstalling can lose the journey. Postcards are keepsakes, not backups.

Your portable backup

Backup files include private step totals and settings. Choose a storage location you trust; the selected file provider controls that storage. Health permissions, separate watch tracking history, diagnostics and party membership are not included. Embertrail checks the file and shows its saved progress before you confirm restore. Restore replaces the current journey rather than adding totals, keeps a previous local save and pauses step syncing until you reconnect.

Exported backups remain outside the app after local deletion. Manage or delete those copies through the file provider you chose. The app does not automatically upload backups to an Embertrail service.

Development diagnostics

This calibration preview keeps local step/sync diagnostics and up to three recent bounded accelerometer captures while the phone app is open. Explicit walk checks also save local reports and sensor captures. Managed walk-check files remain until you delete the local journey. Phone/watch system logs or tracking records may have separate retention; local journey deletion does not erase every device record.

No GPS or microphone recording is requested. Physical activity access supplies optional walking cues; cues and demonstration steps do not create real journey credit.

Sharing and Party Together

Postcards are rendered on your device. Saving writes an image to your photo storage; sharing opens Android's chooser so you can choose a recipient. Cards include your chosen traveler and current Emberseed stage, with optional fictional journey distance. Daily health totals and real-world location are not included.

Saved and shared copies remain after deleting the local journey and are handled by the receiving app or recipient. Party Together is disabled in the current preview. No name or daily totals are sent to its service while disabled. A future enabled party requires a separate explanation and deliberate join; personal progress remains separate.

Your controls and deletion

You can revoke step access in Android's Health Connect app permissions and manage physical activity access in Android settings. Changing permission does not erase saved journey progress.

In Embertrail, open Privacy & saved data and choose Delete local journey & settings. The app removes its managed personal save, recovery copies and managed diagnostic files, then starts a fresh profile. This does not delete Health Connect records, separate watch tracking history, exported backups or postcards, or copies sent to others. No remote deletion request is needed for the current local personal journey.

Website and optional interest list

This site's current local preview uses no analytics, advertising scripts, signup form, tracking cookies or embedded third-party content. The app's current Unity service/analytics settings are disabled.

Public hosting has not been selected. Before publication, this section must explain the host's request-data handling, including IP addresses, technical logs and retention. The local preview server does not retain access logs.

Changes and questions

Review this information again when a new service or feature is enabled. The privacy policy shown in the app and Health Connect should match the published version.

The support/privacy contact is awaiting owner confirmation.