PRIVACY POLICY Last Updated: August 19, 2026 This Privacy Policy explains how amber ("the App," "we," "us," or "our") collects, uses, and shares information when you use our mobile application. amber is available worldwide, and this policy is written to address the rights of users in the European Union/EEA/UK (GDPR), California (CCPA/CPRA), Brazil (LGPD), and other regions with similar data protection laws. By using amber, you agree to the collection and use of information as described in this policy. 1. INFORMATION WE COLLECT Camera, Microphone, and Photo Library Access amber requests access to your device's Camera (to take photos and record video), Microphone (to record audio during video capture), and Photo Library (to display your existing photos in the in-app gallery and to save new photos/videos you create). Photos and videos you capture or edit are processed entirely on your device — we do not upload your photos, videos, or their content to our servers or any third party. Face and Biometric Data amber does not perform facial recognition or face detection, and does not include any feature that scans, analyzes, or maps facial geometry. We do not collect, use, disclose, share, retain, or store any face data or other biometric data, from you or anyone captured in your photos or videos. Because no face data is collected, there is no face data for us to delete or to share with third parties, and no consent to revoke; if this changes in a future version of the app, we will update this section to describe what is collected, how it is used and shared, how long it is retained, how you can delete it, and how you can revoke consent, before that feature becomes active. Location Data (Optional) If you enable "Tag Images with Location" in Settings, amber uses your device's GPS to embed geographic coordinates (latitude/longitude) into the metadata of photos you save. This feature is off by default and only active if you explicitly turn it on. We do not collect or resolve this into a street address, city, or postal code, and this location data is never sent to us — it stays embedded in the photo file on your device and in your Photos library. Onboarding Survey When you first open the app, we may ask optional questions about your age bracket, gender, what motivated you to download the app, where you found out about the app, whether you've used similar apps before (and which ones), what you typically use to share your photos, and what you plan to create. You may skip this survey. If you complete it, your answers are sent to Firebase Analytics (see "Usage and Analytics Data" below) and associated with a randomly generated device/analytics identifier — not your name or any account (amber does not require account creation or login). If you skip the survey, no survey data is sent. Usage and Analytics Data If you enable "Allow Analytics" in Settings — this is off by default and requires your explicit consent — we use Firebase Analytics (provided by Google) to collect the following events: - capture_content — logged each time you take a photo or record a video. Includes the filter ID and its parameters, and capture settings such as flash, lens, and timer. - save_image — logged when you save an edited image. Includes the filter state and parameters applied to the image. - share_image — logged when you share an image from the app to any other app. Includes the filter state and the name of the destination app (e.g., Instagram, TikTok, Gmail). - onboarding_survey_completed — logged when you finish the onboarding survey described above. Includes your age bracket, gender, competitor apps you've used, your typical share destinations, your motivation for downloading the app, and how you heard about the app. - onboarding_survey_skipped — logged when you skip the onboarding survey. No additional data is included. This data is associated with a randomly generated device/analytics identifier, not your name, email, or Apple ID — we do not assign a persistent user ID to this data. It may also include approximate location (city/region level, derived from IP address — not GPS) and general device information (such as device model and OS version). If you do not enable "Allow Analytics," none of the events above are sent. Purchase Information If you subscribe to amber premium, the transaction is handled entirely by Apple's App Store (via StoreKit) and our subscription management provider, RevenueCat. We receive confirmation of your subscription status and purchase history through RevenueCat, but we never see or store your payment card details — those are held exclusively by Apple. 2. HOW WE USE YOUR INFORMATION We use the information described above to: - Provide and operate the app's core photo/video filtering features - Understand aggregate usage patterns to improve the app and prioritize features - Manage and validate your premium subscription - Diagnose crashes and technical issues - Communicate with you if you contact us for support We do not use your information for third-party advertising, and we do not sell your personal information to anyone. 3. THIRD-PARTY SERVICE PROVIDERS We share limited information with the following service providers, each of which processes data on our behalf under their own privacy and security commitments: - Google Firebase (Analytics, Core Infrastructure) — https://policies.google.com/privacy - RevenueCat (Subscription Management) — https://www.revenuecat.com/privacy - Apple (App Store purchases, iCloud/device services) — https://www.apple.com/legal/privacy/ These providers may process data on servers located outside your country of residence, including in the United States. Where required (e.g., for EU/EEA/UK users), such transfers are covered by Standard Contractual Clauses or equivalent safeguards maintained by these providers. We only share information with third parties who agree to provide at least the same level of protection for your information as is described in this Privacy Policy. We do not permit these providers to use data we share with them for any purpose other than providing services to us, and we require them to implement appropriate technical and organizational safeguards to protect that data. 4. DATA RETENTION We retain analytics and survey data for as long as necessary to fulfill the purposes described in this policy, or as required by our service providers' default retention periods. Photos, videos, and location metadata you create remain on your device and in your Photos library under your control — we do not retain copies of your content. 5. YOUR RIGHTS If you are in the European Economic Area, United Kingdom, or Switzerland (GDPR): You have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, to receive a copy of your data (data portability), and to withdraw consent at any time (e.g., by disabling location tagging in Settings). You may also lodge a complaint with your local data protection authority. If you are a California resident (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion of your personal information, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA/CPRA. If you are a resident of Brazil (LGPD): You have similar rights to access, correct, delete, and port your personal data, and to be informed about data sharing with third parties, as described above. All other regions: If your local law provides similar data protection rights, we will honor requests to the extent required by applicable law. To exercise any of these rights, contact us at the email address below. A note on what we can actually locate: amber does not require account creation and does not collect information that directly identifies you within our analytics data — no name, email, or login is tied to your app usage. As a result, we may not be able to locate or verify analytics data associated with a specific request, since we have no way to distinguish your data from any other user's within that dataset. We can act on requests related to identifiable records we do hold, such as a subscription or purchase made through the App Store — if your request relates to a purchase, please include your App Store order ID, receipt, or the email associated with your Apple ID subscription so we can locate it. Where we cannot identify data belonging to you within our systems, applicable law does not require us to acquire additional information solely to enable that identification. 6. CHILDREN'S PRIVACY amber is not directed to children under the age of 13 (or the relevant age of digital consent in your jurisdiction), and we do not knowingly collect personal information from children under 13. Our onboarding survey only collects a broad age bracket (e.g., "Under 18") and never an exact birthdate, so we have no way of identifying whether a specific user is under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it. 7. DATA SECURITY We rely on industry-standard security measures provided by Apple, Google Firebase, and RevenueCat to protect information transmitted through the app. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. 8. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. Changes will be posted here with a revised "Last Updated" date. Continued use of the app after changes take effect constitutes acceptance of the updated policy. 9. CONTACT US If you have questions about this Privacy Policy or wish to exercise any of your data rights, contact us at: shotonamber@gmail.com