EMBRA← Back to Home

Privacy Policy

Last updated: March 2026

Embra Law is built for law students. We take your privacy seriously — especially because you share personal wellness data with us. This policy explains what we collect, why we collect it, and what we never do.

1. Who We Are

Embra Law (“Embra,” “we,” “our,” or “us”) is an educational technology platform designed to help law students navigate law school. We are based in Little Rock, Arkansas.

Questions about this policy can be sent to: adrianbond@myembra.com

2. What We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored securely via Supabase Auth). We do not collect Social Security numbers, financial information, or government IDs.

Profile Information

You may provide your law school, class year, target bar states, and practice interests. This information is used to personalize your experience. You control what you share.

Wellness Data

Embra collects mood check-in data including mood words, intensity levels, and optional notes you write. This data is treated with extra care:

  • Individual mood entries are never shared with your law school, professors, or anyone outside Embra
  • Mentors cannot access your mood data
  • We do not sell wellness data to any third party
  • You can delete all mood data at any time from Settings

Academic Work

Your case briefs, course outlines, class logs, and calendar events are stored securely and are only accessible by you. We use row-level security to ensure no other user can access your academic work.

Mentor Connections

If you use the Mentor feature, we store your mentor-facing profile (which you control), connection requests, and messages. Your main student profile — including mood data, briefs, outlines, and milestones — is completely invisible to mentors. Mentors only see what you explicitly share in your mentor-facing profile.

Usage Data

We collect basic usage information such as which features you use and when. This helps us improve the product. We do not track your activity outside of Embra.

3. How We Use Your Data

We use your data to:

  • Provide and improve the Embra Law platform
  • Personalize your experience based on your law school, stage, and preferences
  • Generate AI-powered features such as brief assistance and outline suggestions
  • Send you notifications about activity in the app (with your permission)
  • Provide anonymized, aggregated data to law school partners (never individual student data without explicit consent)

We do NOT use your data to:

  • Sell your personal information to third parties
  • Train AI models on your personal content without explicit consent
  • Share identifiable student data with law schools or faculty
  • Target you with advertising

4. AI Features

Embra uses the Anthropic Claude API to power AI features including brief generation, outline suggestions, and wellness summaries.

When you use AI features:

  • Case text you paste for brief generation is sent to Anthropic's API for processing
  • Mood summaries use only aggregate data (counts and averages) — never your individual entries or notes
  • Your name, email, and personal details are never included in AI prompts
  • Anthropic's privacy policy governs their handling of data sent to their API

You can disable AI features at any time in your Settings under Features.

5. FERPA Compliance

Embra is designed with FERPA (Family Educational Rights and Privacy Act) compliance in mind:

  • Student education records are protected with row-level security — no data crosses between student accounts
  • We do not share personally identifiable student information with third parties without consent
  • Law school partners receive only anonymized aggregate data, never individual student data
  • Students have the right to access, export, and delete their data at any time

6. Data Security

We protect your data with:

  • HTTPS encryption for all data in transit
  • Row-level security on all database tables (your data is only accessible by you)
  • Secure authentication via Supabase Auth
  • API keys and secrets stored securely, never in client-side code
  • Regular security reviews

7. Your Rights

You have the right to:

  • Access all data we have about you via Settings → Export Data
  • Delete your account and all associated data via Settings → Delete Account. Deletion is permanent and cascades to all your data.
  • Correct your information at any time in your profile settings
  • Opt out of specific features like mood tracking or AI features via Settings → Features
  • Contact us with any privacy questions or concerns

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days.

Anonymized, aggregated data (not linked to you personally) may be retained for product improvement purposes.

9. Third-Party Services

Embra uses these third-party services:

  • Supabase — Database, authentication, and file storage
  • Vercel — Application hosting and deployment
  • Anthropic — AI features (Claude API)

Each of these services has their own privacy policies. We carefully select partners who maintain high standards for data security.

10. Changes to This Policy

We may update this policy as Embra grows. When we make significant changes, we will notify you via email or an in-app notice. The “last updated” date at the top of this page always reflects the most recent version.

11. Contact Us

For any privacy questions, data requests, or concerns:

Email: adrianbond@myembra.com

Embra Law
Little Rock, Arkansas