Privacy Policy
Last updated 8 August 2026Amble Club ("Amble", "we") is a step-competition app made by SPRRRINT NEXTGEN GLOBAL SOLUTIONS LLP, which is the data controller for the information described here.
This policy explains what we collect, why, who can see it, and what happens to it. It describes what the app actually does. If you find something here that does not match the app, tell us and we will fix whichever one is wrong.
What we collect
- Account info: your name, username, email address, profile photo and date of birth, provided when you sign up with Apple, Google, or email. If you sign in with Apple and choose to hide your address, we only ever receive Apple's private relay address. If you sign in with Google you may choose to bring your Google profile photo across, in which case we store our own copy.
- Date of birth is collected once, to enforce our minimum age. We do not use it for anything else.
- Health and fitness data: your daily step counts, distance and active energy, and the workouts you import or record, including duration, distance, average and maximum heart rate, and a heart-rate series where your device recorded one. This is read from Apple Health only after you grant permission, and on the day itself your live step count also comes from your iPhone's motion coprocessor.
- Precise location: the GPS track of a workout you actively record, stored as the route of that workout. Location is only read while a recording is running.
- Coarse location: which country you are in, checked only when you open your country's leaderboard and only if you allow it. We store the two-letter country code, never the coordinates it came from. If you decline, we simply have no country for you, and your name still appears on the global board, without a flag. We do not infer your country from your App Store account or your device's region settings, because neither of those is where you are.
- Content you create: posts, photos, workout titles, comments, reactions, chat messages, group names, step challenges, and any report you file.
- Answers you give during onboarding: why you joined, where you heard about Amble, which workouts you like, and how you rate your fitness. We use these to understand who Amble is for.
- Settings and technical data: your time zone (so your day closes at the right hour), your step goal, your notification and privacy preferences, and a push notification token for each device you allow notifications on.
- Subscription status: whether you have an active Amble Pro subscription, which product it is, when a trial ends, and the price you were shown. Payments are processed entirely by Apple; we never see your card or payment details.
- Safety records: reports you file or that are filed about you, blocks, and any moderation action taken on an account.
We do not collect your contacts, your browsing history, or your advertising identifier, and Amble contains no advertising or analytics SDK.
What other people can see
Amble is a social app, so some of this is visible to others by design. Please read this section rather than skimming it.
Your route map is shown to other people when you post a workout. A recorded route is a precise GPS trace of where you walked, ran or rode. If you post a workout that starts or ends at your home, your workplace, your child's school or anywhere else you would rather keep private, posting it shows that place to everyone who can see the post.
If you do not want that, do not post that workout. A workout you record and keep unposted stays private to you, and you can delete it.
- Your step counts are visible to the members of any group you join, on that group's leaderboard, and your total appears on the global leaderboard alongside your country.
- Your profile, meaning name, username, photo, streak and totals, is visible to other members and to people who open your profile link.
- Posts, photos and comments are visible to your followers and to the groups you share them with. Chat messages are visible to the people in that conversation.
- An invite link to a group shows that group's name and member preview to anyone who opens it.
How we use it
Step counts power the leaderboards, streaks and challenges you share with the groups you join. Health and route data render your workouts. Your email address is used to sign you in and to send you service messages, such as a sign-in code, or a reminder two days before a free trial converts. Push tokens deliver the notifications you switched on. Safety records let us act on reports. We use your data to run these features and for nothing else.
We do not sell your data. We show no ads, we share nothing with data brokers, and we do not use your data, health data least of all, to train AI models or hand it to AI providers.
Legal bases
Where the GDPR or UK GDPR applies: we process account, content and settings data to perform our contract with you; health and precise location data on your explicit consent, given through the iOS permission prompts and withdrawable at any time in Settings; safety and anti-cheat records under our legitimate interest in keeping the game fair and the community safe; and service emails under legitimate interest, except where consent is required.
Who we share it with
We use a small number of processors, each acting only on our instructions:
- Supabase, our database, authentication and file storage.
- Apple, push notification delivery (APNs), Sign in with Apple, and all subscription payments.
- Google, Sign in with Google, if you choose that door.
- RevenueCat, subscription status management.
- Resend, delivery of our service emails.
We may also disclose information if the law requires it, or to protect the rights and safety of our users. If Amble is ever acquired, we will tell you before your information becomes subject to a different policy.
Where it lives, and international transfers
Your data is stored with Supabase in the Asia-Pacific region, and our company is established in India. If you use Amble from the EEA or the UK, your information is transferred outside it. Where that transfer needs a safeguard, we rely on the European Commission's Standard Contractual Clauses with our processors.
Health data promise
Health and fitness data is used only to provide the app's features. It is never used for advertising or marketing, never sold, never shared with data brokers, never used to train models, and never disclosed to third parties beyond the storage infrastructure named above, in line with Apple's HealthKit rules.
How long we keep it, and what deletion means
We keep your information for as long as your account exists.
When you delete your account in Settings, it disappears from Amble immediately. Your profile, posts, leaderboard entries and group memberships stop being visible to anyone, but the account is not destroyed straight away. We hold it for 30 days, during which signing in again restores the account exactly as it was, and nobody else can take your username. After those 30 days a scheduled job permanently erases the account and its data. If you want it erased sooner than that, email us and we will do it.
Two things outlive that window by design: messages you sent to other people remain in their conversations, and a group you created continues without you under a new owner. A signup that never finished onboarding is deleted automatically within a day.
Your controls
- Revoke Health access at any time in the Health app, and location access in iOS Settings. Amble keeps working; it simply stops receiving that data.
- Choose who can message you and who can poke you, whether everyone, people you follow, or nobody, in Amble's settings.
- Block any user from their profile, and report any post, message or account.
- Delete individual posts, photos, messages or recorded workouts at any time.
- Turn off any category of notification, or all of them.
- Delete your whole account in Settings > Delete account.
Your rights
Depending on where you live you may have the right to access the personal data we hold about you, to receive a portable copy, to correct it, to delete it, to restrict or object to how we use it, and to withdraw consent you previously gave. If you are in California or another US state with a privacy law, you may also have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights, and we confirm that we do not sell or share personal information for targeted advertising.
Email hello@myamble.com and we will respond within 30 days. You can also complain to your local data protection authority.
Security
Data is encrypted in transit and at rest by our infrastructure providers, and access to it is restricted to the people who need it to run Amble. Every row is protected by database-level access rules, so one account cannot read another's data. No system is perfect; if a breach ever affects you, we will tell you and the relevant regulator as the law requires.
Children
Amble is not directed at children under 13 (or the minimum age in your country), and we ask for your date of birth at sign-up to enforce that. If you believe a child under that age has given us personal data, email us and we will delete the account.
Changes and contact
If this policy changes materially, we'll note it here with a new date and tell you in the app. Questions or requests: hello@myamble.com.