Privacy Policy

The short version

Relic is built so that we cannot read what you save. Your content is encrypted on your device with a key only you hold, and only the encrypted form is ever stored or synced. The intelligence that organizes your history runs on your device, not in our cloud.

We collect the minimum needed to run your account, sync across your devices, and handle billing. We do not sell your data, and we do not use advertising networks.

Who we are

Relic is provided by Ember Technologies, LLC, a Montana limited liability company located at 3507 Tommy Armour Circle, Billings, Montana 59106, USA. In this policy, "we", "us", and "Relic" refer to Ember Technologies, LLC.

For any privacy question, or to exercise the rights described below, contact us at support@relic.space.

Information we collect

Account information: your email address, which we use to create your account, sign you in, send you service messages, and (if you ask) grant beta access.

Content you save: the text, images, and files you capture, along with any titles, tags, and notes. This is end-to-end encrypted on your device before it ever reaches us. We receive and store only the encrypted form and a wrapped (still-encrypted) key. We cannot read it.

Service metadata: an account identifier, a hashed access token, your plan tier, the approximate sizes and counts of your items and devices, timestamps, and which items you chose to keep. We need this to run sync and enforce plan limits. It reveals nothing readable about what you copied.

Payment information: if you subscribe to Relic Pro, payments are processed by Stripe. We receive limited billing details such as your subscription status, card brand and last four digits, and billing country. We do not receive or store full card numbers.

Website usage: when you visit relic.space, we collect standard analytics such as pages viewed, approximate location derived from your IP address, device and browser type, and the site that referred you. We use Google Analytics and Cloudflare Web Analytics for this.

Communications: if you email us for support, we keep that correspondence so we can help you and improve.

What we can never see

We cannot see your content: your text, images, or files. We cannot see your titles, notes, or tags. We cannot see your master key, your passphrase, or your recovery key.

Because your data is end-to-end encrypted, it stays unreadable to everyone else, including an intruder, law enforcement, or us, even under a breach or a subpoena.

How we use information

We use the information above to provide, maintain, and sync the service; to enforce plan limits; to process payments and manage subscriptions; to send you service-related messages; to respond to your support requests; to keep the service secure and prevent abuse; to understand and improve our website; and to comply with our legal obligations.

We do not use your content to show you ads, and we do not use it to train AI models.

Legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process your information on these legal bases: to perform our contract with you (running your account, sync, and billing); for our legitimate interests (keeping the service secure, preventing abuse, and understanding and improving our website), balanced against your rights; with your consent where it is required (for example, certain analytics or optional communications, which you can withdraw at any time); and to comply with a legal obligation (such as tax or responding to lawful requests).

How we share information

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

We rely on a small set of service providers (subprocessors) that process data on our behalf under contract: Cloudflare, Inc. for hosting, encrypted storage, and sync; Stripe, Inc. for payment processing; Google LLC (Google Analytics) for website analytics; and our email provider for sending account and support email. These providers are located in the United States.

Because your content is end-to-end encrypted, any provider that touches it only ever handles its encrypted form. We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users, the public, or Relic.

International transfers

We are based in the United States and our providers are primarily in the United States. If you access Relic from the EEA, the UK, or elsewhere, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards, such as the Standard Contractual Clauses, in our agreements with these providers.

Data retention

We keep your account and service metadata while your account is active. When you delete an item, or delete your account, we remove the associated encrypted data from our active systems within 30 days. Residual copies in routine backups cycle out shortly afterward.

We may retain limited records for longer where we are required to for legal, tax, or security reasons.

Your rights and choices

You are in control. You can pause capture at any time, delete any item, and Relic skips content that an app flags as sensitive, such as your password manager.

Depending on where you live, you may have the right to access, correct, or delete your personal information; to object to or restrict certain processing; to data portability; and to withdraw consent. California residents have the right to know, delete, and correct their personal information and to opt out of its sale or sharing. We do not sell or share personal information, and we will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email us at support@relic.space. We may need to verify your identity first. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.

Cookies and analytics

Essential cookies keep the website and your account working. For analytics, we use Cloudflare Web Analytics, which is cookieless, and Google Analytics, which we have configured to limit data collection. Google Analytics may set a cookie to measure site usage. We do not use advertising or cross-site tracking cookies.

Where applicable, we honor browser Do Not Track and Global Privacy Control signals.

Processing on your device

Tagging, reading screenshots (OCR), captioning, and search all run locally on your device. Nothing you copy is sent to a cloud AI model.

Security

Your content is encrypted on your device with XChaCha20-Poly1305, using a master key that is wrapped by a key derived from your passphrase with Argon2id. Only the encrypted form is ever transmitted or stored, and connections to our servers are protected with TLS. No system is perfectly secure, but Relic is designed so that a breach of our servers would expose only unreadable ciphertext.

Children

Relic is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact support@relic.space and we will delete it.

Changes to this policy

We may update this policy as the product develops. If we make a material change, we will update the date below and, where appropriate, let you know. Your continued use of Relic after a change means you accept the updated policy.

Contact

Ember Technologies, LLC, 3507 Tommy Armour Circle, Billings, Montana 59106, USA. Questions about privacy or your data: support@relic.space.