Data Deletion

Delete It Yourself, on Your iPhone

1. To remove one thing, open it on your shelf and delete it. Its photo is deleted with it.
2. To keep a copy first, open Settings in Amberjar and choose Export my shelf (CSV).
3. To remove everything, delete the Amberjar app from your iPhone. This erases your shelf, its photos, your places, your settings and your scheduled reminders.

You can also keep data on your iPhone at any time: type things in or add them by their code instead of photographing the label, so no photo is sent to be read, and refuse or turn off tracking for Amberjar in iOS Settings, under Privacy & Security, then Tracking.

Ask Us to Delete Provider Records

RevenueCat holds your subscription status against a random identifier, Meta receives App install and subscription events for advertising measurement, and Google Analytics for Firebase holds usage events against a Firebase app instance identifier. To have us delete what they hold for you:

1. Email [email protected] with the subject Amberjar data deletion.
2. If you ever bought Amberjar Plus, include the Order ID from Apple's purchase receipt email, or the approximate date of purchase. We hold no name or email for you, so this is how we find your record.
3. We delete your customer record at RevenueCat, including the attribution identifiers stored with it, so no further events about you can be matched and sent to Meta, and we ask Google Analytics to delete the usage data for the app instance identifier stored in that record. We confirm by email within 30 days, and may ask one question first to make sure the request is yours.

Events that have already reached Meta are held under Meta's own policies. You can review and disconnect them in your Meta account under "Your activity off Meta technologies".

What Is Not Deleted, and Why

• Apple's records of your purchase. Apple handles payment and keeps its own transaction records, which we cannot delete. Transaction records may also be kept, by Apple, RevenueCat or us, as long as accounting and tax law requires.
• Three small values in the iOS Keychain. iOS keeps them after the App is deleted: a flag that onboarding is done, the times of recent cloud reads (for the fair daily limit), and the random subscription identifier. They contain nothing about your shelf, and they are removed if you erase your iPhone.
• Cloud reader requests. We never receive or keep the photos read by the cloud reader, so there is nothing for us to delete. Google keeps them only as its terms for paid API use allow.
• Crash reports. They are tied to a random installation identifier, not to you or your subscription, so we cannot find yours. Firebase Crashlytics deletes them after 90 days, and you can stop them, and usage analytics, with "Share usage and crash reports" in the App's Settings.