Privacy policy

Summary

Ambar is a personal health folder. Your data is yours. By default, it stays on your iPhone. No account is required to use the app. We do not sell health data or use your records for advertising or health tracking.

Ambar does not diagnose, treat, or replace evaluation by a healthcare professional.

Health data

The app may store information you record: symptoms, appointments, exams, treatments, notes and documents (such as PDFs). This data is considered sensitive and is handled carefully on the device.

Local storage

Ambar saves data on your iPhone first. The app's core operation does not depend on a central server holding your health records.

iCloud (optional)

If you enable iCloud sync, a copy of data may be stored in your Apple account via CloudKit (Private Database), subject to Apple's policies and security. iCloud is optional.

The Ambar team does not keep a central database with everyone’s health folder. With iCloud on, the copy lives in your Apple account — not “in Ambar’s account”. Installing the app or joining TestFlight does not open your private folder to us.

In normal use, the team CloudKit Dashboard shows schema and aggregated metrics — not the clinical contents of your folder.
Another person’s private folder would only appear if someone acted as that Apple ID (for example, that person testing their own account).
For support, we prefer technical diagnostics without clinical content (ambar-support-diagnostics). Sensitive content only if you send it voluntarily.

Care Circle

If you invite someone to Care Circle, shared profile data may sync via CloudKit Sharing with people you authorize. You control who participates. In the external beta this feature is still experimental.

HealthKit / Health app (optional)

With your explicit permission in iOS, Ambar can read or write authorized categories in the Health app — for example compatible symptoms, metrics (such as steps, sleep or heart rate) and compatible lab values. You control which data types are shared. Ambar does not automatically access everything in the Health app.

In this version, Ambar does not access hospital Health Records or institutional health records in FHIR format.

Calendar and Reminders (optional)

If you allow it, the app can create or read events and reminders related to your care. These permissions are optional and controlled by iOS.

Documents and PDFs

Files you attach stay in app storage (and in iCloud, if enabled). When you export a .ambar file, you create a copy that may contain sensitive data — share only with people you trust.

Subscription via Apple

During the external beta there are no active paid plans. When paid plans exist, payments and subscriptions are processed by the App Store. Ambar does not store your full card details. Subscription information follows Apple's rules.

What we do not do

We do not sell health data.
We do not use your clinical records for advertising.
We do not track health for marketing purposes.
We do not use third-party analytics SDKs for health data.
We do not keep a central server with the contents of your health folder.
We do not access your private CloudKit folder just because you install the app or join TestFlight.
This website (webambar.app) does not collect or store your app data.

Data deletion

You can delete records in the app, erase all data in settings, or remove the app from your iPhone. If you used iCloud, check Apple settings to manage cloud data.

Export and import

You can export and import your data as a .ambar file. Export is a snapshot — it does not automatically sync with other people.

Email support

If you contact ambarcare.app@gmail.com, send only what is needed to resolve your issue.

Do not send exams, ID numbers, documents or sensitive information by email unless truly necessary and you are comfortable doing so.

Changes to this policy

We may update this policy as the app evolves. The date at the top indicates the latest version. Relevant changes will be reflected on this page.

Contact

Privacy questions: ambarcare.app@gmail.com