Privacy Policy — Ambra
In short. Ambra is a personal journal that runs on your device. There is no account, no sign-up, and no server that stores your entries. We use no analytics profiling, no advertising, and we never sell or share personal data.
What you write stays where you write it. Uninstalling the app removes it.
This policy also explicitly outlines the two only technical interactions that may leave your device if you choose to use specific optional features, neither of which ever carries the text of your journal.
1. What the app handles and where it stays
Everything you create — memories, mood ratings, tags, dreams, photos, reminders, and lists — is stored locally on your device only: text and preferences in localStorage, photos in IndexedDB. There is no copy on any server of ours, because no server receives it. We cannot read your entries, cannot recover them if you lose your phone, and cannot delete them for you: we simply do not possess them.
Optional aggregated telemetry: to understand which features are used and improve the app, we collect anonymous aggregated usage events via Firebase Analytics (e.g. screen views, relaxation exercises, PRO unlocks). No journal contents, dreams, photos, voice notes, or personal identifying data are ever transmitted. You can disable telemetry at any time in Settings → Anonymous telemetry.
The search assistant stays on your device: keyword search and mood trend calculations are performed entirely by on-device code inside the app, making zero network calls and functioning identically in airplane mode.
2. The two things that leave your device
2.1 Sync between your own devices (only if enabled)
Entries travel directly device-to-device (Peer-to-Peer) over encrypted WebRTC. To let devices discover each other, a brief technical exchange leaves your device: a 6-character pairing code and technical connection metadata (SDP and ICE candidates, including IP address). This reaches our signalling server on Cloudflare Workers (ambra-signal.ambraweb.workers.dev) and, for backwards compatibility, Netlify (ambraweb.netlify.app). It is kept for a maximum of 2 minutes and then permanently deleted. No journal content ever passes through it.
Devices contact public STUN servers operated by Google and Twilio to negotiate the direct P2P connection, which is a standard protocol step carrying no journal text.
2.2 The website (if visited in a browser)
Hosted on Cloudflare Pages, which records standard server logs (IP address, browser type, request time). No analytics cookies or advertising scripts are used. The app installed from Google Play makes no requests to the website.
3. Notifications
Reminders use local notifications scheduled on your smartphone's operating system. No external push notification servers are used: no server knows what you scheduled or when.
4. Photos & Attachments
Images attached to memories remain in your device's local database (IndexedDB). They are never uploaded to any cloud server. If you sync two devices via WebRTC, they transfer directly device-to-device in encrypted P2P mode.
5. Retention and Deletion
Data remains on device until you delete it: individual entries, Settings → Delete all data to reset local storage, or by uninstalling the application.
When you delete an entry, the app internally notes that it was deleted (ID and date, never the content) so the deletion propagates to your other device during the next sync instead of being undone. This tombstone record expires and self-deletes after 90 days.
6. Your Rights (GDPR)
Under the European General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict, and export your personal data.
In Ambra, you exercise these rights directly on your phone, because we hold no personal data on remote systems: there is nothing for us to show, modify, or erase. To export your data at any time, use Settings → Full backup (JSON) or Export (CSV).
Questions or inquiries: info.digitalbenefit@gmail.com. You also have the right to lodge a complaint with your competent data protection authority.
7. Minors
The app is not directed at children under 14 and does not knowingly collect data from minors. With zero registration and zero cloud collection, we process no age-related information.
8. Updates
If this policy is updated, we will modify the date at the top and publish the revised version at this exact URL. Material updates will be noted in the application release notes on Google Play.