Privacy Policy

Last updated: April 11, 2026

Ambag ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Ambag mobile application.

1. Information We Collect

We collect the following information when you use Ambag:

• Account information — name, email address, and password (stored as a secure hash)
• Group and expense data — groups you belong to, expenses you add, payment records, and group goals you participate in
• Personal finance data — personal expenses, income, budgets, and savings goals you log (visible only to you)
• Device token — a Firebase Cloud Messaging token used to send you push notifications
• Usage data — anonymised in-app events to help us understand how the app is used

2. How We Use Your Information

• To provide and operate the Ambag service
• To calculate balances and settlement plans within your groups
• To send you push notifications about group activity (you can opt out in Settings)
• To improve the app experience based on anonymised usage patterns

3. Data Sharing

We do not sell your personal data. We share data only with:

• Firebase (Google) — for push notification delivery via Firebase Cloud Messaging
• Render — our cloud hosting provider where the Ambag API runs

All third-party providers are contractually required to protect your data and may not use it for their own purposes.

4. Personal Finance Privacy

Your personal finance data (expenses, income, budgets, savings goals) is strictly private. It is never shared with other group members and never appears in any group screen or report.

5. Data Retention

We retain your data for as long as your account is active. You may delete your account at any time from the Profile screen in the app, which will permanently remove your personal data from our systems.

6. Security

We use industry-standard security practices including HTTPS encryption in transit, hashed passwords, and JWT-based authentication. We do not store plain-text passwords.

7. Children's Privacy

Ambag is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of Ambag after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
privacy@ambag.app