Privacy Policy

The Short Version

• em stores your writing as plain Markdown files in folders you choose.
• Those folders sync between your own devices through your own iCloud account — never through servers em operates, because em doesn't operate any.
• Ghost publishing sends data only to the Ghost site you connect, using your own Admin API key, which is stored in Apple's Keychain.
• AI features are off by default and begin with Apple's on-device models if enabled. If you connect your own Claude, ChatGPT, or Gemini API key, only files from libraries you specify are sent to the model. Your API key is stored in Apple's Keychain, and the provider bills you according to their usage policy.
• em and its developer never see your writing, your credentials, or your usage. Even better, there is nothing to see — no analytics, no crash reporting unless you choose to share it.
• em keeps a log of its own activity on the device for up to seven days, used only when you compile a bug report. If you choose to send diagnostics with a bug report, the log is redacted of any personal details.
• You can delete all of em's saved files, settings, and on-device logs from the Help tab in em's Settings.

Your Files

Your libraries are folders that live in your iCloud Drive. em reads and writes to them directly. Sync between your Mac, iPad, and iPhone happens through Apple's iCloud with your Apple Account. No copy of your writing is ever transmitted to em's developer or to any server em controls, because that server doesn't exist.

Deleting em from a device does not delete your files — they remain in the original storage directory. em's settings, Version History, and preferences live in em's own iCloud folder, not alongside your writing. See the FAQ to learn what happens to these synced files if you stop using em.

Ghost Publishing

If you connect a Ghost site, em talks directly to that site's Admin API using a key you generate in your own Ghost site's settings. That key is stored in your Keychain and synced via iCloud. Data only ever flows between your device and the Ghost site you connected — never through em. Ghost connections are read-only by default, and nothing writes to your site until you explicitly enable the feature and then save or publish a draft. There is no background or automatic upload of your drafts.

AI Features

AI features are off by default in em. You can choose to leave it that way or use AI on your terms. There are three tiers of AI models built into em:

1. On-Device. Apple Intelligence's on-device model. Nothing about your writing leaves your device — not to Apple, not to em's developer. Learn more about Apple's on-device Foundation Models.
2. Private Cloud Compute, via Shortcuts. If you add an Editorial Review Shortcut using Apple's on-device model, your draft is processed on Apple's Private Cloud Compute infrastructure under Apple's own PCC privacy guarantees. em hands the Shortcut your draft — the Shortcut's own permissions govern the rest.
3. Remote Models (Claude, ChatGPT, or Gemini). You supply your own API key. When this tier answers a question or reviews a draft, it receives only content from the library or libraries you enable for AI. Requests go directly from your device to the provider you chose, using your key. em never sees your key or the information sent with it.

Search, indexing, and reading your files happen entirely on-device in every configuration, regardless of which AI model you enable.

Billing and control belong to you. External model usage is billed by the provider to your account — em takes no cut and does not act as a middleman. Your API key is stored in your Keychain and syncs via iCloud; only you can see it, and you can revoke it from the provider's console or em's settings at any time. Apple's Private Cloud Compute may have usage limit based on Apple's iCloud service, but the on-device model is always free.

Web search is up to you. You can choose to give a remote model access to the internet via em's model settings. If you do, web search runs under the model's API key through that provider's own search. Web search is off by default.

What em Doesn't Collect

There is no em account, no sign-up, and no telemetry. em doesn't operate analytics, crash reporting outside of Apple's opt-in model, or usage tracking of any kind — there's no server for that data to reach even if em wanted to collect it. Any crash reports you choose to send go through Apple's standard OS-level mechanism and are governed by Apple's own privacy policy, not em's.

Children's Privacy

em collects no personal information from anyone, of any age, because it collects no personal information at all — everything described above stays on your device or moves directly between your device and services you explicitly connect.

Changes to This Policy

If em's architecture changes in a way that affects this policy, this document would be updated first, and the change would be visible in the app before it took effect.

Contact

Questions about this policy can be sent to the developer.

Acknowledgements

Fonts

em uses the following fonts in the app and on this site:

Icons

The icons on this site are from Font Awesome Free, used under its Free License (icons: CC BY 4.0).

Markdown

Markdown was created by John Gruber.

Trademarks

• Ghost is a trademark of Ghost Foundation Ltd.
• Apple, Apple Intelligence, iCloud, Private Cloud Compute, and Siri are trademarks of Apple Inc.
• Anthropic and Claude are trademarks of Anthropic, PBC.
• OpenAI and ChatGPT are trademarks of OpenAI, L.L.C.
• Google and Gemini are trademarks of Google LLC.

All other trademarks are property of their respective owners.