Privacy Policy

Amble Club ("Amble", "we") is a step-competition app made by SPRRRINT NEXTGEN GLOBAL SOLUTIONS LLP, which is the data controller for the information described here.

This policy explains what we collect, why, who can see it, and what happens to it. It describes what the app actually does. If you find something here that does not match the app, tell us and we will fix whichever one is wrong.

What we collect

• Account info: your name, username, email address, profile photo and date of birth, provided when you sign up with Apple, Google, or email. If you sign in with Apple and choose to hide your address, we only ever receive Apple's private relay address. If you sign in with Google you may choose to bring your Google profile photo across, in which case we store our own copy.
• Date of birth is collected once, to enforce our minimum age. If you use the AI coach and allow it, we also work out your age from it, so the coach can judge how hard a workout was for you. Only your age in years is used; the date itself never leaves our database. We do not use it for anything else.
• Health and fitness data: your daily step counts, distance and active energy, and the workouts you import or record, including duration, distance, average and maximum heart rate, and a heart-rate series where your device recorded one. This is read from Apple Health (or Health Connect on Android) only after you grant permission, and on the day itself your live step count also comes from your iPhone's motion coprocessor.
• Precise location: the GPS track of a workout you actively record, stored as the route of that workout. Location is only read while a recording is running.
• Coarse location: which country you are in, checked only when you open your country's leaderboard and only if you allow it. We store the two-letter country code, never the coordinates it came from. If you decline, we simply have no country for you, and your name still appears on the global board, without a flag. We do not infer your country from your App Store account or your device's region settings, because neither of those is where you are.
• Content you create: posts, photos, workout titles, comments, reactions, chat messages, group names, step challenges, and any report you file.
• Answers you give during onboarding: why you joined, where you heard about Amble, which workouts you like, and how you rate your fitness. We use these to understand who Amble is for.
• Settings and technical data: your time zone (so your day closes at the right hour), your step goal, your notification and privacy preferences, a push notification token for each device you allow notifications on, and which kind of phone (iPhone or Android) your account last used. Messages you send to Team Amble, and the feedback we file from them, also carry your Amble version and your phone's system version, so a bug report arrives with them.
• Subscription status: whether you have an active Amble Pro subscription, which product it is, when a trial ends, and the price you were shown. Payments are processed entirely by Apple; we never see your card or payment details.
• Safety records: reports you file or that are filed about you, blocks, and any moderation action taken on an account.
• AI coach and Team Amble conversations: the questions you ask the AI workout coach and its answers, and the messages you exchange with Team Amble, our in-app support chat. We store these so the conversation works, so we can answer you, and so we can spot bugs and abuse.

We do not collect your contacts or browsing history. In versions with advertising measurement, we ask for Apple's tracking permission on iOS or your opt-in in Amble on Android before enabling the Meta SDK. If you allow it, device identifiers, technical context such as app and device versions, pseudonymous account identifiers (including a hashed RevenueCat app user ID), app activation, completed signup and subscription events may be shared with Meta to measure our ads, including through RevenueCat. We never send health data, steps, workouts, routes, messages, email addresses or phone numbers to Meta for this purpose. You can decline without losing any app features, or change your choice in iOS Settings > Privacy & Security > Tracking or, on Android, Amble Settings > Privacy > Advertising measurement.

What other people can see

Amble is a social app, so some of this is visible to others by design. Please read this section rather than skimming it.

• Your step counts are visible to the members of any group you join, on that group's leaderboard, and your total appears on the global leaderboard alongside your country.
• Your profile, meaning name, username, photo, streak and totals, is visible to other members and to people who open your profile link.
• Posts, photos and comments are visible to your followers and to the groups you share them with. Chat messages are visible to the people in that conversation.
• An invite link to a group shows that group's name and member preview to anyone who opens it.
• Your posted workouts can reach the AI coach when someone who can see them uses it: as the post they ask about, as a session they compare with, or inside an average across the people they follow, which carries no names. Workouts you have not posted never reach anyone else's coach.

How we use it

Step counts power the leaderboards, streaks and challenges you share with the groups you join. Health and route data render your workouts. Your email address is used to sign you in and to send you service messages, such as a sign-in code, or a reminder two days before a free trial converts. Push tokens deliver the notifications you switched on. Safety records let us act on reports. We use your data to run these features and for nothing else.

We do not sell your data. We show no ads, we share nothing with data brokers, and we do not use your data, health data least of all, to train AI models.

The AI coach and Team Amble

Two optional features use artificial intelligence. Neither sends anything until you allow it in the app, and you can simply not use either.

• The AI workout coach answers questions about a workout. When you use it, we send our AI provider, Anthropic, which writes the answer:
  • the workout you are looking at: its title, sport, date and times, duration, distance, pace, splits, steps, calories, heart rate (average, maximum, time in each zone and heart rate per split), climb, running form figures, temperature and humidity, and which app or device recorded it;
  • your other workouts of the same sport, one by one, each with its date, duration, distance, pace, calories and average heart rate. This includes workouts you saved but did not post, and workouts that are only in Apple Health or Health Connect and were never imported into Amble. We do not keep those; they pass through our server only to reach Anthropic;
  • any workout you pick to compare with, in the same detail as the first;
  • for your own workouts: a summary of your recent training in every sport (how often and how long you trained, your last hard session and your best efforts), your daily step averages, today's steps, your step goal and streak, and your age in years;
  • your first name and username, and the first name and username of the person whose workout it is;
  • your questions, typed or dictated, and the conversation so far;
  • which kind of phone you use, and, where the app sends them, your Amble and system versions.
  When you ask about a friend's post, the workouts they posted of that sport are included too, and so is an average across the posted workouts of the people you follow, without names. We never send your date of birth, your GPS route, where a workout took place, or your raw heart-rate recording. Dictated questions are turned into text by your phone's speech recognition, on the device itself where it can, before anything is sent; your voice never reaches us or Anthropic.
• Team Amble is our support chat. A member of our team can read the conversation and reply in person. If you allow it, the recent messages in that chat, and which kind of phone you use with your Amble and system versions, are also sent to the same AI provider so our AI assistant can reply straight away on our behalf; photos are not sent. Its replies are labelled as AI. If a message is feedback or a bug report, we file it for our team with your phone and app versions attached.

Anthropic acts as our processor: it uses what we send only to produce the reply, under commercial terms that do not allow it to train its models on your data, and it may keep it for a limited time under those terms, for example to detect misuse. We ask for your permission in the app before either feature first sends anything to Anthropic, and we ask again whenever what it sends changes. Our team may read coach and Team Amble conversations to answer you, fix problems, and prevent abuse. We keep AI coach questions and answers for 90 days, then delete them automatically; Team Amble messages are kept like your other chats. AI answers can be wrong; they are not medical advice.

Legal bases

Where the GDPR or UK GDPR applies: we process account, content and settings data to perform our contract with you; health and precise location data on your explicit consent, given through the iOS permission prompts and withdrawable at any time in Settings; safety and anti-cheat records under our legitimate interest in keeping the game fair and the community safe; service emails under legitimate interest, except where consent is required; and sending your workouts, training summary, steps and device details to our AI provider for the coach, or your Team Amble messages and device details for the AI assistant, on your explicit consent, asked for in the app before first use.

Who we share it with

We use a small number of processors, each acting only on our instructions:

• Supabase, our database, authentication and file storage.
• Apple, push notification delivery (APNs), Sign in with Apple, and all subscription payments.
• Google, Sign in with Google, if you choose that door, and on Android, push notification delivery (Firebase Cloud Messaging) and subscription payments (Google Play).
• RevenueCat, subscription status management and, with tracking permission, delivery of subscription conversion events to Meta.
• Resend, delivery of our service emails.
• LiveKit, which carries the video and audio of a live workout to its viewers and, when a replay is made, records it into our storage.
• Anthropic, the AI model behind the workout coach and Team Amble, acting as our processor, and only after you allow it in the app.

With your tracking permission, Meta also receives the limited advertising measurement information described above and processes it under its own privacy policy. We may also disclose information if the law requires it, or to protect the rights and safety of our users. If Amble is ever acquired, we will tell you before your information becomes subject to a different policy.

Where it lives, and international transfers

Your data is stored with Supabase in the Asia-Pacific region, and our company is established in India. If you use Amble from the EEA or the UK, your information is transferred outside it. Where that transfer needs a safeguard, we rely on the European Commission's Standard Contractual Clauses with our processors.

Health data promise

Health and fitness data is used only to provide the app's features. It is never used for advertising or marketing, never sold, never shared with data brokers, and never used to train models. It is not disclosed to third parties beyond the storage infrastructure named above, with one exception you control: when you use the AI coach and give permission, the workout you ask about, your other workouts of that sport one by one (including ones only in Apple Health or Health Connect), a summary of your recent training and your daily steps are sent to our AI provider solely to answer you, in line with Apple's HealthKit rules and Google Play's Health Connect policy.

Camera and face data

Wear your medal uses your camera to show your medal on you (Wear) or on a surface (Place). To find your head and neck it uses face tracking on your phone - Apple ARKit on iPhone, Google ML Kit face detection on Android. Face data is used live, on your phone only: it is never stored, never sent to Amble or anyone else, and never used for advertising, analytics or to identify you. Photos and videos you make stay on your phone and are deleted when you close the camera, unless you save or share them. On Android, Place runs on Google Play Services for AR (ARCore), which is provided by Google LLC and governed by the Google Privacy Policy.

Live workouts

When you choose to go live during a workout, your camera video, your microphone audio if you turn it on, and your live stats are streamed to the people you allow - everyone, your followers, or nobody else (followers by default). Viewers can see that you are live, comment and react; we keep the list of viewers, comments and reactions with the live workout. Video and audio are carried by LiveKit, acting as our processor. If a replay is made, it is stored in our Supabase storage, is private to you unless you choose to share it, and stays until you delete it or your account. Nothing is streamed unless you start a live workout, and the camera and microphone stop when it ends.

How long we keep it, and what deletion means

We keep your information for as long as your account exists, except AI coach questions and answers, which we delete automatically after 90 days.

When you delete your account in Settings, it disappears from Amble immediately. Your profile, posts, leaderboard entries and group memberships stop being visible to anyone, but the account is not destroyed straight away. We hold it for 30 days, during which signing in again restores the account exactly as it was, and nobody else can take your username. After those 30 days a scheduled job permanently erases the account and its data. If you want it erased sooner than that, email us and we will do it.

Two things outlive that window by design: messages you sent to other people remain in their conversations, and a group you created continues without you under a new owner. A signup that never finished onboarding is deleted automatically within a day.

Your controls

• Revoke Health access at any time in the Health app, and location access in iOS Settings. Amble keeps working; it simply stops receiving that data.
• Choose who can message you and who can poke you, whether everyone, people you follow, or nobody, in Amble's settings.
• Block any user from their profile, and report any post, message or account.
• Delete individual posts, photos, messages or recorded workouts at any time.
• Turn off any category of notification, or all of them.
• Withdraw advertising measurement permission in iOS Settings > Privacy & Security > Tracking or, on Android, Amble Settings > Privacy > Advertising measurement.
• Delete your whole account in Settings > Delete account.

Your rights

Depending on where you live you may have the right to access the personal data we hold about you, to receive a portable copy, to correct it, to delete it, to restrict or object to how we use it, and to withdraw consent you previously gave. If you are in California or another US state with a privacy law, you may also have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights, and we do not sell your personal information. Optional sharing with Meta for advertising measurement occurs only with your permission; you can withdraw it in iOS Settings > Privacy & Security > Tracking or, on Android, Amble Settings > Privacy > Advertising measurement.

Email hello@myamble.com and we will respond within 30 days. You can also complain to your local data protection authority.

Security

Data is encrypted in transit and at rest by our infrastructure providers, and access to it is restricted to the people who need it to run Amble. Every row is protected by database-level access rules, so one account cannot read another's data. No system is perfect; if a breach ever affects you, we will tell you and the relevant regulator as the law requires.

Children

Amble is not directed at children under 13 (or the minimum age in your country), and we ask for your date of birth at sign-up to enforce that. If you believe a child under that age has given us personal data, email us and we will delete the account.

Changes and contact

If this policy changes materially, we'll note it here with a new date and tell you in the app. Questions or requests: hello@myamble.com.