This policy describes what Amble does with your data. It's written in plain language because that's how privacy policies should be written. If anything here is unclear, email privacy@amble.fit and we'll fix it.
This data is stored on your iPhone in the app's local storage. It does not leave your phone unless one of the following sections applies.
To plot you a route, we send small, anonymous queries to public OpenStreetMap-based services. These services do not know you are an Amble user.
| Service | What we send | Why |
|---|---|---|
| Overpass API (overpass-api.de) | A bounding box around you (typically 1-2 km radius) | To download the walking-path data for your area |
| OpenStreetMap Nominatim | A search string (e.g. "Sheffield Cathedral") or coordinate | When you type into the via-point picker, or to name your start location |
| OpenTopoData / SRTM | A list of route coordinates | To compute the elevation profile of a generated walk |
| open-meteo.com | Your latitude and longitude | To show you the current weather glance |
| BRouter / OpenRouteService / GraphHopper | Route start and end coordinates | When the offline planner can't compute a route and we fall back to a hosted routing service |
These services have their own privacy policies; see Third-party services below. None receive any identifier that links the request to you, your device, or your phone number.
Sign-in is optional. When you sign in, Amble will:
The cloud copy is encrypted in transit (HTTPS) and at rest (Supabase encrypts its disks). You can delete your account at any time from the Profile tab; deleting wipes everything we hold within 30 days.
If you grant permission, Amble can:
This data flows directly between Amble and the iOS Health / Android Health Connect system. It is not transmitted to our servers. You can revoke this permission at any time in your device settings.
If you use the web trip planner, it stores your sign-in session in your browser's local storage so you stay logged in. No cookies are used. Route planning queries are sent to BRouter (an open-source routing service) over HTTPS; these contain route coordinates but no account information.
| Permission | Why | If you decline |
|---|---|---|
| Location (When in use) | To plan a route from where you are, and track your walk | Use Plan-a-Walk mode by typing a start address |
| Location (Always) | To keep tracking your walk when the screen is off | Walk tracking pauses when you lock the phone |
| Notifications | To send a daily walk reminder if you set one | No reminders sent |
| Camera & Photos | To attach photos to walks | Photo feature unavailable |
| Apple Health | To import past walks and save new ones | Health integration unavailable |
Amble does not use any of these. There is no tracking SDK in the app. We don't measure how often you open the app, which features you use, or how long your sessions last. We do not show ads.
Amble is rated for general audiences, but it is designed for adults and it collects precise location. It is not directed to children under 13 (or under 16 in parts of the EEA and UK where that is the applicable age of digital consent), and we do not knowingly collect personal information from them.
Children can of course walk with Amble — a parent or guardian should set it up and remain responsible for the walk. Nothing in the app is intended to be used by a child on their own.
If you believe a child has provided us with personal information, email privacy@amble.fit and we will delete it promptly.
You can:
Amble is operated from the United Kingdom. We are the data controller for the limited personal data described in this policy, and you can reach us at privacy@amble.fit.
Under the UK GDPR and EU GDPR you have the right to access, correct, delete and port your data, to object to or restrict processing, and to withdraw consent at any time. Our lawful bases are: consent for location access, health data and notifications (withdraw it any time in your device settings), and legitimate interests for running and securing the app. We respond to requests within one month.
If you think we have handled your data badly, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to your local EEA supervisory authority.
Under the CCPA/CPRA you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, and we never have. We do not use it for cross-context behavioural advertising. Exercising these rights will never result in worse service. Email privacy@amble.fit.
We apply the same standard to everyone, wherever you live: you can see, export and delete everything Amble holds, from inside the app. If your country gives you additional rights, email us and we will honour them.
Amble uses these external services. Each has its own privacy policy; the terms apply when your device communicates with them.
Amble is operated from the United Kingdom. Several of the services above are run by volunteers, non-profits or companies based elsewhere, including in the European Economic Area and the United States. When your device contacts them, the request — which may include coordinates — leaves your country.
These are direct connections from your device to that service. We do not route them through our own servers, and no account identifier, device identifier or phone number is sent with them. Our own cloud backup (Supabase) is separate and described above.
Where personal data is transferred out of the UK or EEA, we rely on the UK and European Commission adequacy decisions where they apply, and otherwise on the International Data Transfer Agreement or Standard Contractual Clauses. For detail on a specific service, email privacy@amble.fit.
The “Between us” feature finds a fair meeting point between you and up to four other people. To do that, the places you enter are sent to the OSRM routing service listed above so driving times can be compared.
Enter a town, postcode or general area for someone else rather than their exact home address, unless they are happy for you to. We do not store these locations — they are used to calculate the meeting point and discarded when you close the search. But the request does reach a third-party service, and the people you enter have not agreed to this policy.
If we change this policy, we'll update the "Last updated" date at the top and, if the change is material, show you a notice in the app the next time you open it.