Amble

Privacy Policy

Last updated: 30 October 2026

Introduction

Amble ("we," "us," "our," "the app") is a personal finance app designed around a simple principle: your financial data belongs to you, and only you. This policy explains what information Amble interacts with, how it's handled, and why, in plain terms.

Amble is published by an individual developer, Mohammad Fahham Khan, registered as a personal developer account on the app stores.

The short version

Amble does not operate servers that store, process, or have access to your financial data. All entries you make are stored locally on your device and encrypted before anything ever leaves it. When you back up your data, it's encrypted on your device first, then stored in your own personal cloud storage: a private storage area only your Amble app can access, not a folder you browse yourself, and never on infrastructure we control. We cannot read, recover, or reconstruct your financial data, under any circumstance, including if compelled to try.

What information we collect

Information you enter into the app

Everything you record in Amble (income, variable earnings, expenses, savings goals, and any transaction notes) is created and stored locally on your device. This data is protected on your device using a random 256-bit AES-GCM master key. We do not have a copy of this data, do not hold the encryption keys needed to read it, and cannot view or restore it on your behalf.

Biometric information

If you enable fingerprint or face unlock, authentication is handled entirely by your device's operating system. Amble never receives, processes, or stores your biometric data.

There is no Amble account

Amble has no sign-up, no sign-in, and no user accounts. Access to the app is protected by a 6-digit PIN that is verified entirely on your device. Your PIN is never sent anywhere and is never recoverable by us.

Cloud backups (optional)

If you choose to turn on encrypted backups, Amble asks your cloud storage provider for permission to use your account as a backup destination. Backups can run automatically in the background (such as after completing a monthly ledger) or manually on demand.

  • We request access to a private, hidden storage area tied to your cloud account that only Amble can read or write to. It is not visible in your regular cloud storage, and the provider does not grant us access to any of your other files.
  • We also request the provider's standard email and profile permissions. Amble reads only your account email address, on your device, to show which account is connected in Settings. It is kept on your device only and is never sent to us. Your name and profile photo are not used.
  • The backup is a single encrypted file stored in that hidden folder.
  • Disconnecting cloud backup inside Amble stops future backups but does not delete the backup already stored in your cloud account.

Reminders and exports

  • Reminders: Any reminders you enable are scheduled by your device itself. There are no push servers and no push tokens, and no financial figures are used to create them.
  • PDF exports: Monthly history exports are generated on your device and shared using your device's own share sheet. The file is never uploaded to us.

Information we do not collect

As of the date of this policy, we do not use analytics, tracking, or crash-reporting tools of any kind. We do not collect device identifiers, usage statistics, behavioural data, or advertising identifiers. We do not run advertising in the app and do not share data with advertisers, because there is no data on our servers to share.

Information collected by app stores and platform services

Separately from Amble itself, app store providers collect certain information as part of operating their stores and platforms (such as install and crash data visible to us in aggregate, if enabled). This is governed by the store's own privacy policy, not this one.

How your data is protected

  • Local-first: Your data lives on your device by default. Nothing is sent anywhere unless you choose to enable backup.
  • Client-side encryption: Encryption happens on your device before data is transmitted, using AES-GCM-256 with a random 256-bit master key. We never receive your PIN, your keys, or your unencrypted financial data.
  • Zero-knowledge architecture: Because we never operate servers that hold your encryption keys, we are structurally unable to access your records. There is no central server password reset and no backdoor for us to unlock your vault.
  • User-owned storage: Encrypted backups are stored in your own cloud storage account, under your provider's own security and infrastructure, not on servers owned or operated by us. Your provider stores the encrypted file under its own terms, but it does not receive your PIN or your keys.

Your rights

Depending on where you live, you may have rights under data protection law (such as the UK GDPR) including the right to access, correct, delete, or export your data, and to object to or restrict certain processing.

In practice, because we do not hold your financial data, most of these rights are exercised directly within the app or through your own cloud account settings:

  • Access and export: Your data is on your device and you can view it, or export your history as a PDF, directly in the app. Encrypted backups sit in your cloud provider's hidden app data area, so they can only be read back through Amble, not opened from the provider's own app or website.
  • Deletion: Deleting the app removes your data from your device. To remove the encrypted backup, open your cloud provider's app or website, go to its settings, find Amble under connected apps, and delete the hidden app data. Amble's in-app "Delete all my data" and "Disconnect" options affect only your device and do not remove the file in your cloud storage. We hold no separate copy to delete on our end.
  • Correction: All entries are editable directly within the app, apart from your PIN.

If you have questions about exercising these rights, contact us at info@amble.live.

Children's privacy

Amble is not directed at children and is not intended for use by anyone under the age of 16. We do not knowingly collect information from children, and given our architecture, we do not collect personal information from any user, child or otherwise.

International data

Because your data is encrypted on your device and stored in your own personal cloud account, its storage location follows your chosen provider's infrastructure and account settings, not a jurisdiction we choose. We do not transfer your data internationally ourselves, as we do not receive or hold it.

Changes to this policy

If we update this policy (for example, when we introduce new features such as subscriptions), we'll update the "Last updated" date above and, for material changes, notify you within the app.

Contact us

If you have questions about this policy or how Amble handles data, contact us at info@amble.live.