Privacy Policy

Who we are

Amber is made by Smart Socials ApS (CVR 46141180), Nymarks Allé 231, 8320 Mårslet, Denmark. We are the data controller for the personal data described here. You can reach us at hello@ambermusic.app.

What Amber collects

If you join the waitlist, we store your email address and signup date to confirm your signup and let you know when Amber launches. We also keep a temporary, hashed network identifier to limit spam.

Your account. Amber receives an account identifier and, depending on how you sign in, your name and email address from Google or the email address you enter. The iPhone app does not ask Apple for your name or email address. Signing in with Apple on this website requests your email address so you can recognise the account used for your purchase. Email passwords are handled by Supabase and are not stored in Amber's app or website.

Your listening history, from the source you choose: the songs you have recently played and the play counts in your Apple Music library, the public last.fm scrobbles for the username you enter, or the plays in a Spotify or Apple Music data export you import. For each play Amber stores the song, artist and album names, when it was played and, where available, how long it played.

What you do in Amber: your album ratings, the cards you dismiss, and when your sources last synced.

Your playlists: names, mix settings, and the cover photos you choose are saved with your account. If you export a playlist, its tracks and cover are sent to the music service you selected.

What you share in the feature-request area: requests, comments, and votes are saved with your account. Requests and comments are visible to other Amber users.

Your Amber+ purchases: Amber stores the plan and subscription status against your account so it can provide access. Apple handles in-app purchases. For web purchases, Stripe handles checkout and billing; Amber receives a customer reference and payment status, not your card details.

Data export files are read on your phone. Only the plays found in them are uploaded, never the files themselves.

To find and fix crashes, Amber sends Sentry technical crash reports, the device and iOS version, the app version, and the names of screens visited before a crash. Amber does not add your account identity, listening history, screenshots, or network request details to these reports.

Optional usage analytics

Optional usage analytics is off by default. If you enable Share usage analytics in Settings, PostHog receives basic feature-usage events, an Amber account identifier when signed in, app and iOS versions, device type, and the build environment. These help us improve Amber. It receives no listening history, album or artist names, chat messages, email addresses, screenshots or session recordings. PostHog processes events in its EU region with location enrichment disabled. You can stop new collection in Settings; previously queued events may still arrive. Events follow the project's retention settings. Contact hello@ambermusic.app to request deletion; account deletion does not automatically erase PostHog records.

What Amber does not do

Amber has no advertising or cross-app tracking. It does not follow you across other apps or websites, does not sell your data, and does not share it with data brokers.

Reminders to check for your data export are scheduled on your phone. Nothing about them is sent to us.

How your data is used

To provide Amber: to build your library, recognise albums, and show rediscoveries, release dates, credits and artwork. The legal basis is that this processing is necessary to provide the service you asked for (GDPR Article 6(1)(b)). We use technical crash reports to keep Amber working reliably.

Who else handles it

When you use Ask Amber, OpenAI receives your question, filters, selected artist or album, recent conversation and summaries of relevant listening results. General music answers use web search with sources. Your full listening history stays in Amber.

Resend delivers waitlist confirmation and launch emails on our behalf.

Supabase hosts Amber's accounts and database in the European Union (Ireland).

Sentry processes technical crash reports for us so we can diagnose and fix errors.

Stripe processes payments made on Amber's website. Spotify and YouTube receive playlist information only when you choose to export to them.

Apple provides Sign in with Apple and, if you connect Apple Music, access to your listening data on your phone. Google provides Google sign-in when you choose it.

last.fm receives the username you enter when Amber reads your scrobbles.

To find album details and artwork, Amber sends artist and album names or catalogue numbers, never your account, to MusicBrainz, the Cover Art Archive, Discogs and Apple's public music catalogue. Amber resolves and caches cover links in the background. Discogs and background catalogue requests go through Amber's server. MusicBrainz and the Cover Art Archive can see your device's internet address, as any website can.

How long it is kept

Waitlist data is separate from app accounts. To leave the list and have your signup removed, reply to a waitlist email or contact hello@ambermusic.app. We use your email only for your signup confirmation and launch notification.

Until you delete your account. Deleting your account in Settings removes your account, listening history, ratings and settings from Amber's database straight away.

Crash reports are not linked to your Amber account and are retained according to the Sentry project's retention settings.

Your rights

You can ask to access, correct, export or delete your data, and object to or restrict how it is used. Delete your account in Settings, or email hello@ambermusic.app for anything else.

You can also complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

Optional cover checks

If you enable Blur sensitive covers, OpenAI receives cover images to check for nudity or graphic content. Amber caches the verdict for up to 30 days. Only covers identified as sensitive are blurred. Covers stay visible while a check is pending or unavailable, so this setting cannot guarantee that all sensitive artwork is hidden. The setting is off by default.

Children

You must be at least 13 to use Amber. If you are under 18, you need permission from a parent or guardian. A higher minimum age or additional parental consent may apply under the law where you live.

Amber does not knowingly collect personal data from children under 13. If you believe a child registered without meeting these requirements, contact hello@ambermusic.app so we can investigate and remove the account where appropriate.

Changes

The current policy is always available in Settings and on our website. If a change requires your consent, Amber will ask for it before you continue.