Scope
This notice applies to the current version of the Ambleaf iOS app, effective September 25, 2026. The privacy summary in the app is available offline.
Location and photos
From your Start to End actions, Ambleaf uses location to record an outing and associate photos with places. Photo access is used for relevant pictures, manual additions and saving cards. You can change permissions in iPhone Settings. During an outing, motion activity and step counts help analyze location drift. Related diagnostics stay on the device. Raw sensor data is never stored or uploaded. Shortly after an outing ends, the app may re-read the records for that same period to verify step counts.
Local storage
Outings, tracks, photo associations, card settings and cover settings are stored on the device. Ambleaf requires no account, provides no proprietary outing cloud sync and does not upload this content to an Ambleaf server. iOS device backup and iCloud Photo Library are controlled by your Apple settings.
Apple services may use the network
Maps and place names use Apple services. Selected photos may be downloaded from iCloud when needed. Account verification for app features uses the App Store. Those services follow their respective Apple terms and privacy rules; local-first does not mean fully offline.
Sharing and deletion
Sharing begins with your action and uses your chosen system or third-party app. The recipient handles the content under its own policies. Deleting an outing or clearing Ambleaf data does not delete original photos from your Photo Library. Save any cards you want to keep before clearing data.
Website and email
This site uses no ads, third-party analytics, third-party scripts or non-essential cookies. Limited technical logs support operation, security and troubleshooting. Access logs are retained for about 7 days and error logs for about 30 days, with access restricted to authorized operators. Access logs omit the last IPv4 segment, retain only a coarse IPv6 prefix (or an empty prefix), remove query strings, and retain only the referring origin. They also record time, path, status, bytes and a bounded User-Agent. Error logs may include necessary full network addresses. Statistics are processed locally on the server, never sent to analytics providers or published as dashboards, and are not used for profiles, device fingerprints or links to app outings. Feedback you email is handled through Outlook. Include only what is needed to investigate; avoid full tracks or sensitive photos.
Contact
For privacy questions, email ambleafapp@outlook.com.
Ambleaf is licensed under Apple’s Standard End User License Agreement.