Data Deletion

Delete It Yourself, on Your Phone

1. To remove one thing, open it on your shelf and delete it. Its photo is deleted with it.
2. To keep a copy first, open Settings in Amberjar and choose Export my shelf (CSV).
3. To remove everything, delete the Amberjar app from your phone, or on Android clear its storage in Android's settings. This erases your shelf, its photos, your places, your settings and your scheduled reminders.
4. On Android, if backup is on, Android keeps a copy of your shelf and the App's settings (not the photos) in your Google account, which can bring them back on a reinstall or a new phone. To remove it, delete Amberjar's backup in the backup settings of your Google account (Google One), or turn backup off.

You can also keep data on your phone at any time: type things in or add them by their code instead of photographing the label, so no photo is sent to be read. On iPhone, you can also refuse or turn off tracking for Amberjar in iOS Settings, under Privacy & Security, then Tracking. On Android, the App never collects the advertising ID.

Ask Us to Delete Provider Records

RevenueCat holds your subscription status against a random identifier, Meta receives App install and subscription events for advertising measurement, and Google Analytics for Firebase holds usage events against a Firebase app instance identifier. To have us delete what they hold for you:

1. Email [email protected] with the subject Amberjar data deletion.
2. If you ever bought Amberjar Plus, include the Order ID from Apple's purchase receipt email, the order number from Google Play's, or the approximate date of purchase. We hold no name or email for you, so this is how we find your record.
3. We delete your customer record at RevenueCat, including the attribution identifiers stored with it, so no further events about you can be matched and sent to Meta, and we ask Google Analytics to delete the usage data for the app instance identifier stored in that record. We confirm by email within 30 days, and may ask one question first to make sure the request is yours.

Events that have already reached Meta are held under Meta's own policies. You can review and disconnect them in your Meta account under "Your activity off Meta technologies".

What Is Not Deleted, and Why

• Apple's or Google Play's records of your purchase. Apple (on iPhone) or Google Play (on Android) handles payment and keeps its own transaction records, which we cannot delete. Transaction records may also be kept, by Apple, Google, RevenueCat or us, as long as accounting and tax law requires.
• Three small values in the iOS Keychain (iPhone). iOS keeps them after the App is deleted: a flag that onboarding is done, the times of recent cloud reads (for the fair daily limit), and the random subscription identifier. They contain nothing about your shelf, and they are removed if you erase your iPhone. On Android, the same three values are in the App's settings file: deleting the App removes them, but Android's backup can bring them back, as described above.
• Cloud reader requests. We never receive or keep the photos read by the cloud reader, so there is nothing for us to delete. Google keeps them only as its terms for paid API use allow.
• Crash reports. They are tied to a random installation identifier, not to you or your subscription, so we cannot find yours. Firebase Crashlytics deletes them after 90 days, and you can stop them, and usage analytics, with "Share usage and crash reports" in the App's Settings.