Privacy Policy

SHORT VERSION
This app has no account system. It does not know who you are. Almost everything
stays on your phone. The one exception is described under "What leaves your phone",
and you control it.

WHAT WE COLLECT
We do not collect your name, email address, phone number, or any account identifier,
because the app does not have accounts.

The app stores the following on your device only:
• Your itinerary and the places on it
• Your check-ins, including the time of each one
• Your stated preferences (interests, pace, things to avoid)
• A randomly generated device identifier, used only to rate-limit requests.
  It is not linked to you and is not shared with advertisers or analytics providers.

WHAT LEAVES YOUR PHONE
If — and only if — you turn on "Personalized suggestions", the app sends the
following to DeepSeek, an AI provider, through our own server:
• The interests, pace and avoidances you selected
• Your destination and trip length
• The names of places on your itinerary, when generating your journal

DeepSeek operates servers in China. By allowing this, your trip preferences are
processed there. You can withdraw this at any time in Settings, and the app
continues to work without it.

WHAT NEVER LEAVES YOUR PHONE
• Your photos. When you check in with a photo, the app reads its EXIF data
  (location and timestamp) on the device. The image itself is never uploaded.
• Your location. It is used on-device to recognize that you have arrived at a stop.
• Your check-in history and journal entries, unless you choose to share one.

LOCATION
Location access is requested only while you are using the app, and only to
recognize arrivals at itinerary stops. The app does not request background location
and does not track your movements.

RETENTION
Data on your device remains until you delete it. Settings → Clear local data removes
all of it. Requests sent to our server are not stored after the response is returned.

THIRD PARTIES
• DeepSeek — AI processing, as described above. Only when you have allowed it.
• Cloudflare — hosts the server that forwards those requests.
We do not use advertising networks or analytics SDKs.

CHILDREN
This app is not directed at children and does not knowingly collect data from them.

YOUR RIGHTS
Because the app holds no account and no server-side profile, there is nothing for us
to look up about you. Clearing local data in Settings removes everything the app holds.
For questions, contact support@ambly.cc.

CHANGES
If this policy changes materially, the app will tell you before the change applies.