Privacy Policy

1. Who We Are

inAmber is a trading name of Capitalizt Ltd (Company No. 16890768), registered at 128 City Road, London, EC1V 2NX, United Kingdom. We are the data controller responsible for your personal data.

For any privacy-related queries, contact us at hello@inamber.ai.

2. Data We Collect

We collect the minimum data required to provide our service: your name, email address, and account credentials. When you create messages, those are encrypted client-side using AES-256-GCM before they reach our servers. We cannot read your messages.

We also collect basic usage analytics (page views, feature usage) to improve the service, and payment information processed securely by Stripe. We never store your full card details.

3. How We Use Your Data

Your data is used to: provide and maintain the inAmber service, process payments, send delivery notifications to recipients and guardians, communicate service updates, and comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Ever.

4. Encryption and Security

All messages are encrypted end-to-end using AES-256-GCM via the Web Crypto API. Encryption happens in your browser before data is transmitted. We operate on a zero-knowledge architecture: we cannot decrypt or read your messages. Your encryption keys are derived from your password and are never stored on our servers.

5. Data Storage and Retention

Your data is stored on servers within the European Economic Area (EEA) via Supabase (backed by AWS infrastructure). Messages are retained for the duration specified by your plan (2 to 50+ years depending on tier). Account data is retained for as long as your account is active.

6. Your Rights

Under GDPR and the UK Data Protection Act 2018, you have the right to: access your personal data, rectify inaccurate data, erase your data (right to be forgotten), restrict processing, data portability, and object to processing. To exercise any of these rights, email hello@inamber.ai.

7. Cookies

We use essential cookies only, required for authentication and security. We do not use advertising or tracking cookies. See our Cookie Policy for details.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notification. Your continued use of inAmber after changes constitutes acceptance of the updated policy.