Privacy policy
Last updated: 18 October 2026 (draft).
Who we are
EM Field Guide is published by E2C2 Pte Ltd, a company in Singapore. E2C2 Pte Ltd is the controller of your personal data. We trade under the brand Polanyi Works.
For anything about your data, write to privacy@polanyiworks.com.
In short
- You can browse the app without an account. Every visitor gets an anonymous ID.
- To store your own content, such as rehearsals, you sign in with Apple, Google or an email code.
- Your rehearsals are stored on our servers so you can come back to them. You can export or delete them at any time.
- We use outside services to run the AI characters, purchases and sign-in, and, if you use voice (not yet available), voice. They are listed below.
- Analytics and crash reports are pseudonymous: they use an ID, not your name or email. You can turn them off in one tap.
- We have no advertising and we do not track you across other apps or sites.
What we collect
| Data | When | Why |
|---|---|---|
| Anonymous user ID | Every visitor gets one. | To run the app and apply limits. |
| Sign-in identity | Only if you choose Apple or Google sign-in. We receive an identity token. We never see a password or your contacts. | To keep your progress on every phone you use. |
| Email address | Only if you choose "Continue with email". It is never required. Apple and Google sign-in work too. | To send you a sign-in code and identify your account. |
| Rehearsal content | When you are signed in: what you type in a rehearsal, the replies, the debrief and scores, saved lines, reminders, check-ins and reading progress. | To give you your history and progress. Stored on our servers. |
| Voice | Voice is not yet available in the app, and the app does not ask for the microphone. If you use voice (not yet available) once it is offered, the microphone is used while you hold the talk button. | To turn your speech into text and speak the replies, if you use voice (not yet available). |
| Case finder text | What you type into the finder is used to find a case and is not saved. We keep usage counts. | To limit abuse and cost. |
| Feedback and reports | If you send feedback, report a reply, ask for an introduction or send a gift: what you enter, including an email address if you type one. | To reply to you and improve the app. |
| Purchases | Your purchase status, linked to your user ID. Apple or Google takes the payment. Your card details never reach us. | To unlock paid features on your account. |
| Usage and crash reports | Pseudonymous counts of how the app is used, and crash reports. They use an ID, not your name or email. Off with one tap. | To fix problems and see what is useful. |
Who processes your data for us
We use these services. Each one receives only what it needs to do its job. Each has its own privacy terms.
| Service | What it does for us | What it receives |
|---|---|---|
| Supabase | Hosts our database, sign-in and server functions. Our project is in Singapore. | Your account, rehearsals and settings. |
| Anthropic | Runs the Claude AI models that check what you type for safety and set up each character's inner layer. | The case text and your rehearsal turns. |
| Vercel AI Gateway | Routes our requests to AI models. It is the service that sends the characters' replies, the debriefs and the case finder to model providers, including Z.ai (open-weight GLM models), and sends the Claude requests above to Anthropic. | The same model requests as above. |
| Google Gemini | If you use voice (not yet available): turns your speech into text. | Your voice audio. |
| Deepgram | If you use voice (not yet available): an alternative speech-to-text service. | Your voice audio. |
| Cartesia | If you use voice (not yet available): speaks the character's replies. | The reply text. |
| RevenueCat | Manages subscriptions and purchase status. | Your user ID and purchase records from the store. |
| Apple | Sign in with Apple, if you choose it. Apple also takes payment for the App Store. | An identity token that proves who you are. |
| Google sign-in | Sign in with Google, if you choose it. Google Play also takes payment on Android. | An identity token that proves who you are. |
| PostHog | Pseudonymous product analytics, tied to an ID and not to your name or email. You can switch it off at any time. | Named events from a fixed list. Never free text. No screen recording. |
| Sentry | Crash reports. Scrubbed before sending. Follows the same one-tap switch. | Technical crash details with user text removed. |
| Cloudflare Turnstile | A bot check on the web version of the app only. It is conditional and not currently active. If we switch it on, we will update this policy. | If active: a browser check result, to stop scripts creating accounts. |
We also use an email delivery service to send sign-in codes. It receives your email address and the code, and only when you choose email sign-in.
Some of these services process data outside Singapore. We choose providers that protect personal data to a standard comparable to the Personal Data Protection Act 2012.
Analytics and crash reports
Analytics are pseudonymous. They are linked to an ID, not to your name or email. The app sends only named events from a fixed list. It never sends text you type or say. It does not record your screen.
Crash reports are scrubbed so that your text is removed before they leave your phone.
To turn both off, go to Settings, then Privacy, and switch off usage and crash reports. It takes effect at once.
Your choices
- Export: download your data from Settings, then Privacy.
- Delete one rehearsal: the transcript (and any audio, if you use voice (not yet available)) is deleted.
- Auto-delete: in Settings, then Privacy, choose 7 days, 30 days or Never. Our servers delete each of your rehearsals once it is older than your choice: the conversation text, the debrief and any report you sent about a reply. Your scores and progress stay. New accounts start at 30 days.
- Reset progress: clears your reading and rehearsal progress.
- Delete your account: removes your account and the data stored with it, including your email address.
How long we keep data
We keep your rehearsals and other stored data until you delete them or your auto-delete choice removes them. A job runs every hour on our servers and deletes every rehearsal that started longer ago than your choice, so a rehearsal can stay up to an hour past it. If you choose Never, we keep your rehearsals until you delete them. The job records only how many rehearsals it deleted, never their content. A check-in you saved stays, no longer linked to the deleted rehearsal. You can also delete one rehearsal at a time, reset all your progress, or delete your whole account, in the app. Our service providers may keep their own logs for a limited time under their own terms.
Your rights under Singapore law
Under the Personal Data Protection Act 2012 (PDPA), you can ask to see the personal data we hold about you, ask us to correct it, and withdraw your consent to our use of it. Write to privacy@polanyiworks.com. We will reply within a reasonable time. If you are not happy, you can complain to the Personal Data Protection Commission.
Who the app is for
EM Field Guide is written for working adults. It is not meant for children.
This website
This website is plain pages. It runs no scripts and no analytics.
Changes and contact
If we change this policy in a way that matters, we will say so in the app. Questions: privacy@polanyiworks.com. For help with the app, see support.