Introduction

Amby ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, and share information about you when you use the Amby Mobile App (the “App”) and associated web services operated by Amby Limited. The App operates globally, with initial availability in the United States and Hong Kong. By using the App and participating in the Amby rewards and habit-tracking program, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Account Information: We may collect personally identifiable information such as your name, email address, and optional profile details when you create an Amby account.
2. Habit and Health Data: We collect information you log within the App—such as exercise, sleep, meals, hydration, screen-free time, or mood check-ins—and any data you choose to sync from Apple Health, Google Fit, or similar integrations. This data helps generate personalized AI insights and track your wellness progress.
3. Reward and Activity Data: We collect data about your earned points, reward redemptions, and submissions that contribute to your Amby Points balance. This may include timestamps or screenshots used for verification.
4. Device and Usage Information: We may collect information about the device and application you use to access our services, including device model, operating system, IP address, language preference, app version, and general usage analytics.
5. Location Information (optional): With your consent, we may collect approximate location data (city or region) to show localized content or rewards.

Use of Information

1. To Provide and Personalize Services: We use your information to operate the Amby App, manage your account, track your habits, award Amby Points, and deliver personalized AI insights based on your logged data.
2. To Administer Rewards: We use your information to calculate and maintain your Amby Points balance, process reward redemptions, and facilitate gift card or charitable donations.
3. To Improve Our App and AI Insights: We analyze usage patterns, anonymized habit trends, and feedback to enhance the functionality, accuracy, and user experience of the App.
4. To Communicate with You: We may send you notifications or messages about important updates, app features, policy changes, or promotional offers—always with the option to opt out.
5. To Comply with Legal Obligations: We may use or disclose information as required by law or to enforce our terms, protect users, or maintain the integrity and security of our systems.

Sharing of Information

1. Service Providers: We may share your information with trusted service providers who help us operate the Amby App and deliver our services, such as data hosting, analytics, customer support, payment processing (e.g., Stripe), rewards fulfillment (e.g., Tremendous), and AI insight generation (e.g., OpenAI or similar vendors). These providers are only authorized to use your information as necessary to perform their services for us.
2. Health and Integration Partners: If you choose to connect third-party services such as Apple Health or Google Fit, certain data may be shared between those platforms and Amby with your explicit consent. We do not sell or share this data for advertising purposes.
3. Legal Requirements: We may disclose your information if required by law, regulation, legal process, or valid requests by public authorities (e.g., a court or government agency).
4. Business Transfers: In the event of a merger, acquisition, or sale of company assets, your information may be transferred as part of that transaction, subject to the same privacy protections.
5. Aggregated or De-identified Data: We may share aggregated insights or de-identified statistics that do not personally identify you, to help improve wellness research or app performance.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes the use of encryption in transit and at rest, secure cloud storage, and restricted access controls for authorized personnel only. While we take reasonable steps to safeguard your data, no system is completely secure, and we cannot guarantee absolute security of information transmitted through the App.

Data Retention

We retain your personal information for as long as your Amby account remains active or as needed to provide our services. Habit data, reward history, and AI insights are kept while your account is active so we can maintain your progress records. When you delete your account, we remove or anonymize your personal data within a reasonable timeframe, unless a longer retention period is required by law or necessary for legitimate business, accounting, or security purposes. Aggregated or de-identified data may be retained for analytics and research.

Your Rights

You have the right to access, correct, or delete your personal data at any time. You may also request data portability, object to or restrict certain types of data processing (including AI-based personalization), or withdraw your consent. If you are a resident of the United States or Hong Kong, you have additional rights under local data protection laws, such as the California Consumer Privacy Act (CCPA/CPRA) and the Personal Data (Privacy) Ordinance (PDPO). To exercise these rights or submit a deletion request, please contact us at team@ambywell.com. We will respond to all verified requests within a reasonable timeframe.

Data Deletion Request

You have the right to request the deletion of your personal data held by us at any time. To submit a deletion request, please contact us at team@ambywell.com. Upon receiving your request, we will verify your identity and proceed to delete or anonymize your personal information from our active systems within a reasonable timeframe. Certain data may be retained as required by law, for security or fraud prevention, or to complete pending transactions. Aggregated or de-identified data that no longer identifies you may be retained for analytical and research purposes.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the “Effective Date” at the top of this page and, where appropriate, through in-app notifications or email. We encourage you to review this policy periodically to stay informed about how we protect your information.

Discrepancies Between Versions

If there are any discrepancies between the English version and any translated version of this Privacy Policy (including the Traditional Chinese version used in Hong Kong), the English version shall prevail.

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at team@ambywell.com. You may also write to our Data Protection Officer at Amby Limited once a registered office address in your region (e.g., United States or Hong Kong) becomes available. We will make every effort to respond to inquiries within a reasonable timeframe.