Who operates Ambera
Ambera Health is the business responsible for the information described in this policy. Contact support@amberahealth.com for privacy, account-deletion, and support requests.
This policy covers amberahealth.com, app.amberahealth.com, and the Ambera Health Apple application, including its TestFlight beta. Features vary by platform and release. Future Android availability is not current availability.
Information we handle
Account information includes your name, email, sign-in identifiers, account role, profile details, and account settings. Professional profiles can include credentials, organization details, and care-team relationships.
Depending on what you enter or share, records can include pregnancy and birth dates, birth preferences, appointments, symptoms, mood and daily check-ins, weight, hydration, rest, movement and contraction records, hospital-bag lists, journal entries, and care notes. Messages, uploaded files, photos, audio, and video may contain health information.
We also handle saved resources, learning activity, subscription and transaction references, plan and capacity information, device/session identifiers, notification tokens, and information you provide when contacting us. Payment services handle payment credentials; Ambera uses transaction and subscription information to manage access.
Our servers and hosting services receive technical information such as IP addresses, requested URLs, timestamps, device/browser information, and error or security logs. TestFlight also supplies testing, crash, and feedback information under Apple’s terms.
Sources and purposes
Information comes from you, professionals and people you connect with, device features you enable, and authentication, hosting, notification, and payment services. We use it to operate accounts, save and display records, support communication and care coordination, provide selected tools and resources, verify purchases, manage professional capacity, respond to requests, and maintain and troubleshoot the service.
You choose whether to enter optional health records or enable optional device features. Information needed to sign in, operate a selected feature, or verify a purchase is necessary for that activity.
Device permissions, location, and storage
Features may request access to location, camera, microphone, photos, or notifications. Permission to access a device feature is separate from sharing with a care-team recipient. Manage device permissions in your device settings. Labor Circle location features can disclose location to their permitted audience; stopping a location stream does not erase previously shared locations or necessarily stop another signed-in device.
The public marketing website’s page code does not use advertising pixels or optional analytics cookies. The signed-in web app uses authentication cookies and browser storage, including local messaging/device state. Hosting infrastructure also processes web requests. Blocking essential storage can prevent sign-in or features from working. Our current no-sale/no-targeted-advertising practices apply regardless of a Do Not Track or Global Privacy Control signal.
Retention and deletion
We retain information for the purposes described here, considering account activity, the type of record, care and communication history, security, billing, disputes, and applicable recordkeeping requirements. Different categories can have different retention needs. Ending a care relationship or canceling a subscription does not automatically delete your personal account or records.
You can request deletion in account settings or by contacting support@amberahealth.com. The current account-deletion workflow provides a 30-day restoration window; scheduling deletion is not immediate erasure. Backups, records subject to legal obligations, and copies lawfully held by recipients may persist separately. We will explain relevant limitations when responding to your request rather than promise that every copy is immediately erased. Uninstalling the app does not delete the account or cancel a subscription.
Your choices and requests
Use account settings to correct available profile information and manage sharing. The web Privacy & Data area offers a download of available records; this is not a complete export of all attachments or all platform data. Contact support@amberahealth.com to request access, correction, a fuller export, deletion, withdrawal of consent, or review of a privacy decision.
We may verify your identity and, if applicable, a representative’s authority before acting. Do not send a password, payment card, identification document, or medical record in an initial email. Describe the request and the account email. We respond according to the rights and deadlines that apply to your location and request. You may appeal a decision by replying with “Privacy appeal” and may contact the relevant privacy regulator. We will not discriminate against you for exercising applicable privacy rights.
Pregnancy, reproductive-health records, care relationships, and location revealing care can be consumer health data. We collect and use those categories for the features you request and share them with the audiences and service providers described above. Where applicable law requires a separate consent or authorization, this policy does not replace it. Withdrawal can affect a feature’s availability without undoing prior lawful processing.
Users aged 13 and older
Ambera supports account holders aged 13 and older, including pregnant users aged 13–17. It is not intended for children under 13. If you believe an account holder is under 13, contact support@amberahealth.com so we can investigate and address the account and associated information. Do not send medical records or identity documents in the initial message.
Pregnancy and reproductive-health information can be confidential even when a user is a minor. Whether a parent, guardian, or another representative may consent, receive information, or exercise rights depends on applicable law, the service involved, the person’s authority, and the circumstances. A family relationship, payment for a subscription, or control of a device does not by itself establish unrestricted access. These notices also do not exclude access or involvement that the law requires.
Contact support about a request involving a minor or representative before sharing confidential information. We may need to verify identity, authority, and the scope of the request. We may pause a requested disclosure or account change while resolving those questions. Do not share passwords or recovery codes to establish authority. A professional must separately determine the consent and confidentiality requirements for the care they provide.
Security and international processing
We use authentication and access controls to restrict account and care information. No service can guarantee absolute security. Protect your sign-in credentials and use account/device controls when a device is lost or shared. Do not rely on a beta application as your only record or emergency communication channel.
Ambera is operated in the United States. Service providers may process information in the United States or other countries where they operate, whose privacy laws may differ from your location. Contact us with questions about a particular data transfer or request.
Messages and encrypted content
Ambera includes end-to-end encrypted messaging. Encryption of message content does not mean that all information in Ambera is end-to-end encrypted. Account details, care relationships, delivery information, journals, check-ins, notifications, and other records have different handling. Authorized recipients can read, save, or share information they receive.
Access to encrypted history depends on the keys and recovery options available to your devices. Resetting a password or restoring an account does not guarantee recovery of encrypted messages. Keep device and recovery credentials private; contact support for account help without sending passwords or encryption keys.
Choices for sensitive information
Before connecting a care professional, sharing a journal entry, sending a message, or enabling Labor Circle location, consider who can receive that information. Daily check-ins are shared care information and should not be treated as a private diary. A connected professional or backup may have access under the relationship’s permissions; parental status alone is not a care-team permission.
Notifications, lock-screen previews, Live Activities, shared devices, and downloaded or printed exports can reveal participation in pregnancy care or other sensitive information. Review both in-app notification preferences and your device’s notification and lock-screen settings. Choose a safe device and destination before downloading records. Ambera cannot recall a screenshot, printed record, or copy already received by someone else.
Service providers and their roles
Supabase provides backend database, authentication, and storage services for account and product records. Vercel hosts the website and web application and processes associated requests and operational data. Apple supports application distribution, TestFlight, device notification delivery, and Apple purchases. Stripe processes web payments and related billing information. The information involved depends on the feature used; payment providers do not need your journal or pregnancy records to process a purchase.
Website inquiry delivery uses Resend when online sending is configured. If sending is unavailable, the site directs you to email support; it does not confirm delivery. Messages you send by email are handled through the email services involved in that exchange. Do not include patient information, passwords, or unnecessary health details in public inquiry forms.
These service descriptions do not establish that every vendor acts as a HIPAA business associate or is covered by an executed business associate agreement. A professional or organization must determine whether its intended use needs additional contractual or regulatory arrangements before using Ambera for that purpose.
Changes and contact
This policy was updated September 18, 2026. We will post updates with a revised date and provide additional notice or request consent where required. Contact support@amberahealth.com with questions.