Privacy policy

What changed

This version adds accounts (email, Sign in with Apple and Sign in with Google), sync across devices, and the Ambertide Pro subscription. The sections below explain what each one stores. The 27 September update adds the Android waitlist.

Who we are

Ambertide is a calendar, tasks and deadlines planner for iPhone, iPad, Mac, Apple TV and the web. This policy covers the Ambertide apps and this website, ambertide.app. The data controller is Mousa Alwaraki, trading as Ambertide. Contact: support@ambertide.app.

Using Ambertide as a guest

You can use Ambertide without an account. Your deadlines, tasks, events, habits, widgets and settings are then stored only on your device: in the app's storage on Apple devices, and in your browser's storage on the web. Nothing is sent to our servers, and we can't see it.

Accounts

You can create an account with an email and password, Sign in with Apple, or Sign in with Google. Accounts and sign-in are run by Supabase, which acts as our processor. Your account data is stored in London, UK (AWS eu-west-2).

For each account we store:

• your email address and display name;
• your password, as a one-way hash (if you use email and password);
• the account identifiers Apple or Google give us (if you use them to sign in).

Sign in with Apple

Apple shares your name only the first time you sign in. You can choose to hide your email, in which case we receive an Apple relay address that forwards to you.

Sign in with Google

Google shares your name, email address and profile picture URL.

Sync

If you have an account, your plans sync across the devices you're signed in on. We store:

• deadlines and tasks;
• habits and habit check-ins;
• widget settings (for example the cities and stock symbols you choose) and reminder settings;
• your app preferences, such as workday hours and daily focus capacity;
• calendar events you create in the web app.

Events Ambertide reads from your device calendar on Apple devices are never uploaded.

Each synced item carries a random identifier for the device that made the change, so your devices don't re-apply their own changes. When you delete an item, a short deletion marker is kept so your other devices remove it too.

Data is encrypted in transit (TLS) and at rest by our provider. Database rules restrict every record to the account that owns it: other users can't read or change your data.

Subscriptions

Ambertide Pro is bought through the App Store, and Apple processes the payment. We never receive your card or payment details. To unlock Pro on your account, we receive and store your subscription status from Apple: the product, the original transaction ID and the expiry date, linked to your account.

Usage analytics

To see which features are used and where the app needs work, Ambertide sends our own servers (in London, UK) short usage events, such as "a task was completed", "the week view was opened" or "the paywall was shown". Each event carries:

• the event name and a few simple details (for example which view, or how many items), never the content of your plans: no titles, notes, names or email addresses;
• a random ID for this install, a random ID for the current session, and your account ID when you're signed in;
• the platform, app version, operating system version, language setting and device model.

We use this only to understand and improve Ambertide. It isn't used for advertising, shared with anyone, or combined with data from other companies. Turn it off any time in Settings → Privacy → Share usage analytics; the app then stops sending events. Raw events are kept for 90 days; after that only daily totals remain, which don't identify you.

No tracking, no ads

Ambertide has no advertising, no tracking and no third-party analytics or crash-reporting SDKs. We don't sell or share your data, and we don't build profiles about you. This website sets no cookies and runs no scripts; the only outside service it loads is Google Fonts, for its typefaces.

Other services Ambertide contacts

Weather and location

Your location is used only for the weather widget, and only if you allow it. It is not stored on our servers.

• On Apple devices, your location is sent to Apple WeatherKit to get the forecast. Apple's handling is described in Apple's privacy policy.
• On the web, coarse coordinates are sent to Open-Meteo to get the forecast, and to BigDataCloud to look up the name of your city. City searches you type are sent to Open-Meteo's geocoding service.

You can turn off current location and pick a city instead, or deny location access entirely.

Stocks

The stock symbols you add to the stocks widget are sent to Yahoo Finance to fetch quotes. Nothing else about you is included.

Calendar access (Apple devices)

If you allow calendar access, Ambertide reads your events on your device to show them next to your tasks. They are never uploaded anywhere. On the web you can import an .ics file instead, which is read in your browser.

Notifications and reminders

Deadline reminders, at-risk alerts, the daily plan, task-start and habit reminders, and the focus timer are all local notifications, created on your device. Ambertide has no push server. On the web, reminders only appear while Ambertide is open in a browser tab.

Android waitlist

If you join the Android waitlist on ambertide.app/android, we store your email address, where you signed up (for example the website or Instagram) and the date, in our database in London, UK. We use it only to email you when Ambertide for Android is available. We don't use it for anything else, share it or add you to other lists. To be removed, reply to that email or write to support@ambertide.app.

Why we use your data

• To provide the service you asked for (your account, sync and Pro): this is necessary to perform our contract with you.
• To keep the service secure and prevent abuse: our legitimate interests.
• Usage analytics: our legitimate interest in understanding how Ambertide is used so we can improve it. You can object at any time by turning it off in Settings.
• Android waitlist: your consent, which you can withdraw at any time by asking us to remove your email.
• Location: your consent, which you can withdraw at any time in your device or browser settings.

International transfers

Your account and synced data are stored in the UK. Signing in with Apple or Google, and requests to Yahoo Finance and Open-Meteo, may involve processing outside the UK by those providers, under their own safeguards and privacy policies.

How long we keep data

• Account and synced data are kept for as long as your account exists.
• Deleting your account permanently removes the account and all synced data from our servers immediately, and from our provider's backups within 30 days.
• App Store purchase records (product, price, currency, dates and status, as signed by Apple) are kept for our accounting. If you delete your account, they're kept without any link to you.
• Usage events are kept for 90 days; daily totals that don't identify you are kept for up to 400 days.
• Android waitlist emails are kept until we've sent the launch email, then deleted within 90 days, or sooner if you ask.
• Guest data stays on your device until you delete it.

Deleting your data

Go to Settings → Account → Delete account. This permanently deletes your account, your profile, your subscription status, your usage events and all synced data from our servers, then removes it from the device. If you use Sign in with Apple, we also revoke Ambertide's access to your Apple ID. This can't be undone, so export your data first if you want a copy.

Deleting your account doesn't cancel an App Store subscription. Cancel it separately in your Apple ID's subscription settings.

Guests can choose Delete all data on this device in the same place. Uninstalling the app or clearing your browser's site data also removes on-device data.

Your rights

You can ask us to access, correct, delete or export your personal data. You can also object to or ask us to restrict certain processing. These rights apply to everyone, including under the UK GDPR and, for people in the EEA, the EU GDPR. Email support@ambertide.app and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Children

Ambertide is not directed at children under 13, and we don't knowingly collect personal information from them.

Changes to this policy

If we change this policy, we'll update this page and the effective date above. For significant changes, we'll also tell you in the app before they take effect.

Contact us

Email support@ambertide.app with any privacy question or request.