This Privacy Policy explains how Antonio Moricca (“we”, “our”, “us”), the developer of the Ambry mobile application (“App”), collects, uses, and protects the personal data of users (“you”) in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable French data protection law.
By creating an account or using the App, you acknowledge that you have read and understood this Policy.
1. Data Controller
The data controller responsible for your personal data is:
Antonio Moricca
Email: moricca.antonio@gmail.com
2. Data We Collect
We collect only the data that is strictly necessary to provide the App’s functionality.
Account data
- Email address
- Display name
- Profile picture (optional, uploaded by you)
User-generated content
- Photos, videos, and media files you choose to upload or save within the App
- Links and references to third-party content you manually select and save
- Notes, tags, and metadata you attach to saved items
Location data
- If you choose to associate a location with a saved item, we use your device’s location at that moment solely to record that association.
- We do not store raw GPS coordinates persistently. Location is stored only as a place name or region label linked to the specific content item you explicitly tagged.
- Location access is always optional and requires your explicit permission via your device’s operating system prompt.
Authentication data
- We use Firebase Authentication (Google LLC) to manage sign-in securely. Firebase may collect technical identifiers such as device tokens. Please refer to Google’s Privacy Policy for details on Firebase data handling.
Data we do NOT collect
- We do not use analytics or behavioural tracking SDKs.
- We do not collect advertising identifiers.
- We do not sell or share your data with advertisers.
3. How We Use Your Data
- To create and manage your account
- To store and display your saved content within the App
- To provide location-based organisation features when you opt in
- To send you push notifications related to the App (when and if this feature is enabled, with your prior consent)
- To respond to your support requests
- To comply with legal obligations
The legal bases for processing under the GDPR are: performance of a contract (Art. 6(1)(b)) for core App functionality, and your consent (Art. 6(1)(a)) for optional features such as location tagging and push notifications.
4. Third-Party Content
The App allows you to manually save references to content from third-party platforms (such as links or embedded previews). When you save such content:
- The original content remains hosted on and owned by the respective third-party platform and its creator.
- Ambry always displays the original source and author attribution.
- Ambry always provides a link back to the original content on the source platform.
- You are solely responsible for ensuring your use of third-party content complies with the terms of service of the respective platform.
The App contains links to third-party services. We are not responsible for their privacy practices.
5. Data Storage and Security
Your data is stored on our servers hosted on a dedicated virtual machine managed by us. We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.
Firebase Authentication infrastructure is operated by Google LLC and hosted within the European Economic Area where possible. For more information, see Firebase Privacy.
6. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
7. Your Rights (GDPR)
As a resident of the European Economic Area, you have the following rights:
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure— ask us to delete your data (“right to be forgotten”)
- Right to restriction — ask us to limit how we process your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
To exercise any of these rights, contact us at moricca.antonio@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with your national supervisory authority. In France, this is the CNIL (Commission Nationale de l’Informatique et des Libertés).
8. Children’s Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Push Notifications
If and when push notifications are introduced, we will request your explicit consent before sending any notification. You may withdraw consent at any time via your device’s notification settings.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the App or by email. The “last updated” date at the top of this page will always reflect the most recent version. Continued use of the App after changes constitutes acceptance of the updated Policy.
11. Contact
For any questions, requests, or complaints regarding this Privacy Policy:
Antonio Moricca
moricca.antonio@gmail.com