This Privacy Policy explains how Embra LLC ("Embra," "we," "us," or "our"), the operator of the Zuba mobile application and the website at apps.embrallc.com (together, the "Service"), collects, uses, shares, and protects information. By creating an account or using the Service, you agree to this Policy.
When you schedule and perform inspections, you may enter and we will process on your behalf:
With your permission, we collect your device's precise location to optimize your daily driving route, estimate arrival times and drive time/mileage, and detect when you have arrived at an inspection. You can disable location access at any time in your device settings; route features will be limited without it.
Card payments your customers make are processed by Stripe, which is responsible for handling cardholder data in accordance with PCI-DSS. We store only a non-sensitive mirror of payment status (e.g., requested, paid, refunded), the payment amount, and Stripe identifiers — never full card numbers.
Where required (e.g., EEA/UK), our legal bases are: performance of our contract with you; your consent (e.g., location, marketing, SMS); our legitimate interests in operating and securing the Service; and compliance with legal obligations.
We share information only as described here:
We use the following providers to deliver the Service. Each processes data for the purpose shown and under its own privacy policy:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Supabase, Inc. | Cloud database, authentication, file storage, and serverless functions (hosts account & inspection data, photos, reports) | supabase.com/privacy |
| Stripe, Inc. | Payment processing & payouts (Stripe Connect); PCI-compliant card handling | stripe.com/privacy |
| Resend | Transactional email delivery (reports, invoices, notifications) | resend.com/legal/privacy-policy |
| Twilio Inc. | SMS appointment reminders | twilio.com/legal/privacy |
| Google LLC | Maps & Routes (route optimization, maps), Gemini API (AI features), Firebase Cloud Messaging (Android push), Google Play services | policies.google.com/privacy |
| WeatherAPI.com | Weather data for the daily route briefing | weatherapi.com/privacy.aspx |
| RevenueCat, Inc. | Subscription / in-app purchase management | revenuecat.com/privacy |
| Apple Inc. | App distribution, push notifications (APNs), in-app purchases, on-device speech recognition | apple.com/legal/privacy |
| Expo (650 Industries, Inc.) | App build/update infrastructure and notification delivery | expo.dev/privacy |
We maintain a current list of sub-processors and will update this section as our providers change.
The app requests these permissions; each is optional and used only for the stated purpose:
We retain personal information for as long as your account is active and as needed to provide the Service, then delete or de-identify it within a commercially reasonable period, unless a longer period is required for legal, accounting, security, fraud-prevention, or dispute-resolution purposes. Inspection records you create are retained so you can access your business history; you can delete individual records, and deleting your account removes your data as described in §10. Backups are purged on a rolling schedule.
We use industry-standard safeguards including encryption in transit (TLS) and at rest, row-level database access controls, scoped API keys held only on our servers, and secure on-device storage of credentials (iOS Keychain / Android Keystore). No method of transmission or storage is 100% secure; we cannot guarantee absolute security, and you are responsible for safeguarding your login credentials.
Depending on where you live, you may have the right to:
To exercise any right, email support@embrallc.com. We will verify and respond within the time required by applicable law. If we process customer data on behalf of an inspector, we will refer requests from that inspector's customers to the inspector and assist as the service provider. You may also manage notifications and permissions in your device settings, and reply STOP to any text message to opt out.
You can delete your account and associated personal data in two ways:
Deleting your account permanently removes your account profile and the inspection data associated with it, except where we must retain limited records for legal, tax, security, or fraud-prevention reasons (e.g., transaction records held by Stripe for financial compliance). We complete deletion requests within the period required by applicable law.
If you are a California resident (CCPA/CPRA) or a resident of another U.S. state with a comprehensive privacy law, you have the rights described in §9, including to know, access, correct, delete, and port your information, and to opt out of sale/sharing and certain profiling. We do not sell or share personal information as those terms are defined under these laws, and we do not use or disclose sensitive personal information beyond the purposes permitted. The categories of personal information we collect, the sources, business purposes, and the categories of recipients are described throughout this Policy (see §1, §2, §4, §5). You may exercise rights via support@embrallc.com; you may use an authorized agent, and we will verify your identity before responding. We will not discriminate against you for exercising your rights.
We operate in the United States, and our providers may process and store information in the U.S. and other countries. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses. By using the Service, you understand your information may be processed in the United States.
The Service is intended for professional/business use and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us information, contact us and we will delete it.
Inspectors may, with their customers' consent, send appointment-reminder texts through the Service. Message frequency varies; message and data rates may apply; reply STOP to opt out and HELP for help. As stated in §4, mobile opt-in and consent information is not shared with third parties or affiliates for marketing, and is not sold. See our SMS Terms for details.
We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice (e.g., in-app or by email). Your continued use of the Service after changes take effect constitutes acceptance.
Embra LLC
Privacy: support@embrallc.com • Support: support@embrallc.com
Mailing address: 117 S Lexington St, STE 100, Harrisonville, MO 64701
Web: apps.embrallc.com