Welcome
Doga Cimen (“Amber,” “we,” “us,” or “our”) provides the Amber iOS application and this website at https://amberhabit.app (together, the “Services”). By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
We built Amber so habit accountability can feel tangible — gems, photo check-ins, referees, and optional stakes. That means we store some data so the product works across devices and so we can keep improving it. We do not sell your personal information, and we do not show third-party ads in the app.
What we collect
Depending on how you use Amber, we may collect:
- Account information. Email address used for magic-link sign-in (no passwords). Profile details you choose, such as display name, @handle, and avatar.
- Habit & progress data. Goals, check-in history, gem progression, stake activity, token balance, and related timestamps.
- Photos. Check-in evidence photos you submit, and optional profile avatars. Avatars may be stored in a publicly accessible bucket so friends can see them.
- Social graph. Friend relationships, referee invitations and decisions, feed posts visible to people you connect with, and reports or blocks you submit.
- Device & notifications. Push notification tokens and basic device information needed to deliver alerts.
- Analytics & diagnostics. Product analytics (e.g. PostHog) and crash reports (e.g. Sentry) so we can understand usage and fix bugs. These may include device identifiers and approximate location derived from IP.
- Support communications. Messages you send to support@amberhabit.app.
How we use information
We use the information above to:
- Provide, operate, and improve the Services
- Authenticate you and keep your account secure
- Run habit verification (human referees and AI assistance)
- Show your progress, gems, feed, and social features
- Send transactional push notifications you enable
- Process subscriptions via Apple / RevenueCat
- Respond to support requests and enforce our Terms and Guidelines
- Comply with law and protect safety, rights, and integrity
Sharing
We share personal information only as needed to run the Services:
- Other users. Friends, referees, and people who see your feed posts may see your handle, avatar, habit activity you share, and check-in outcomes — depending on product settings.
- Service providers. Infrastructure and tools that process data on our behalf, including Supabase (database, auth, storage), Apple (App Store, push), RevenueCat (subscriptions), OpenAI (AI verification of check-in photos), PostHog (analytics), and Sentry (crash reporting).
- Legal & safety. When required by law, or to protect users, the Services, or our rights.
- Business transfers. If we are involved in a merger, acquisition, or asset sale, information may transfer subject to this policy’s protections.
We do not sell or rent personal information. We do not allow third-party advertising networks inside the app.
AI verification
When you use self-paced mode (or until a referee joins), check-in photos may be sent to an AI model to help verify that the evidence matches your habit. Photos are processed for verification and product integrity — not to train public generative models for unrelated marketing. AI decisions are assistive; they are not a guarantee of accuracy. You can invite a human referee for human review.
Payments
Purchases (including Amber Pro) are processed by Apple through the App Store. We do not receive or store your full payment card details. We receive subscription status via Apple / RevenueCat so we can unlock Pro features on your account.
Retention & deletion
We retain information for as long as your account is active and as needed to provide the Services, comply with law, resolve disputes, and enforce agreements. You can delete your account in the app (Settings → delete account). Deletion removes your profile, habits, gems, evidence photos, and avatar from our systems, subject to short processing windows and any data we must keep for legal reasons.
Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact support@amberhabit.app and we will take appropriate steps to delete it.
California & other rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of certain personal information, and to opt out of “sale” or “sharing” as those terms are defined under applicable law (we do not sell personal information as commonly understood). To exercise rights, email support@amberhabit.app. We may need to verify your request. You will not be discriminated against for exercising privacy rights.
International transfers
We operate from the Province of Ontario, Canada. Our infrastructure providers store and process data in the United States and in other countries where they operate, so your information is transferred outside your own country — and outside Canada — as part of running the Services. Those countries may have data-protection laws that differ from the laws where you live, and information held there can be subject to lawful access requests by local authorities. We rely on contractual protections with our providers to keep your information protected wherever it is handled.
Security
We use industry-standard measures (including encryption in transit, access controls, and least-privilege practices) to protect information. No method of transmission or storage is 100% secure. Please use a secure email account for magic-link sign-in and tell us promptly about any suspected unauthorized access.
Changes
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes may also be communicated in-app or by email when appropriate.
Contact
Privacy and support: support@amberhabit.app
Doga Cimen
Website: https://amberhabit.app