Welcome to Ambulo Group Ltd. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information across our website, web application, and iOS application (collectively, the "Services").

Important Information and Who We Are

Ambulo Group Ltd is the data controller responsible for your personal data.

Contact Details: If you have any questions about this privacy policy or our privacy practices, please contact our Data Protection Team:

Email: dataprotection@ambulo.co

The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

• Identity Data: Name and username.
• Contact Data: Email address (collected via waitlist forms and account registration).
• Technical Data: IP address, login data, browser type/version, time zone setting, operating system, platform, and device identifiers (such as installation IDs assigned by our iOS app) on our iOS and web apps.
• Profile Data: Information you lodge or store within the app, including hunting, shooting, and fishing records. This may include photos or videos you attach to your entries. When you attach a photo to an entry, we read the photo's EXIF metadata (the date and GPS coordinates it was taken at, if available) to help auto-fill the entry's date and country. EXIF metadata stays attached to the photo on your account; it is never shared with other users, used for advertising, or transferred to third parties beyond our cloud storage provider (Google Firebase).
• Usage & Performance Data: In-app feature interactions, session data, and performance metrics collected via analytics tools to help us understand how the Services are used and improve the experience.
• Diagnostics: Crash reports and error logs collected automatically via crash reporting tools to maintain app stability. This data is not linked to your identity.
• Security Data: Passwords and sensitive credentials. These are cryptographically hashed and stored securely, meaning they are not visible to Ambulo Group Ltd staff in plain text.

Weather data

Ambulo uses Apple's WeatherKit service to display weather conditions for your Home Ground. To do this, we send the coordinates of your Home Ground (derived from the postcode you provided) to Apple. Apple's privacy policy governs how they handle this request: https://www.apple.com/legal/privacy/.

Apple has confirmed that WeatherKit requests are not used for advertising and are not linked to your Apple ID for tracking purposes.

How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

• Waitlists: To notify you when our services become available or to provide updates you have requested.
• App Functionality: To allow you to store, lodge, and retrieve your information within the web and iOS environments.
• Account Security: To manage your secure login and protect your account.
• App Performance & Stability: To monitor crash reports and usage patterns in order to improve app reliability and the overall user experience.
• Website Optimisation: We use Cookies to enhance your experience, remember your preferences, and monitor the performance of our website.

Disclosures of Your Personal Data

Third-party services

We rely on the following named third-party services to operate Ambulo. None of them are used for advertising or selling your data:

• Google Firebase (Authentication, Firestore database, Cloud Storage, Cloud Functions): hosts your account, your entries, and your uploaded photos. Subject to Google's Privacy Policy.
• Google Analytics for Firebase / GA4: anonymised app-usage analytics. Helps us understand which features are used and where users encounter problems. Does not include your name, email, or precise location.
• Apple WeatherKit: weather conditions for your entries and Home Ground (see "Weather data" above).
• Klaviyo (if you opted in to marketing): email communications, used only when you actively consented during sign-up. You can opt out from any email or through your account settings.
• what3words (when populated): the what3words service receives your coordinates only if you choose to display a what3words address on an entry. Subject to what3words' Privacy Policy.

We do not sell your personal information to any third party. We do not share it with advertisers. The only data shared with the above services is what is functionally necessary for Ambulo to work.

Beyond the named third-party services listed above (which provide functional services only), we share aggregated, anonymised data only with research partners you have opted in to via the Research contribution toggle.

Research contribution

Ambulo includes a Settings toggle called "Contribute anonymised data to wildlife research." This is off by default. When (and only when) you switch it on, you give us permission to include your data in anonymised aggregate statistics that we may share with conservation research partners, such as wildlife population studies or game-management bodies.

Your identity, your exact location, and your individual entries are never shared as part of this contribution, only aggregated regional and seasonal totals across many users.

You can revoke this permission at any time. If you do, your data is removed from any future aggregate. Already-published reports cannot be retroactively edited.

No anonymised aggregates have been shared with any partner at the time of writing. We will update this Privacy Policy and surface the partner list in-app before any sharing begins.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

Secure Storage: All sensitive information, including passwords, is encrypted using industry-standard protocols. We ensure that "lodged" information is protected by strict access controls and server-side encryption.

Your Legal Rights

Under the GDPR, you have rights including:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to fix inaccurate info.
• Erasure: Ask us to delete your data ("the right to be forgotten").
• Object/Restrict: Object to us processing your data.
• Data Portability: Request the transfer of your data to you or a third party.

To exercise any of these rights, please contact us at dataprotection@ambulo.co.

Cookies

Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse and allows us to improve our site. You can set your browser to refuse all or some browser cookies, but some parts of our Services may become inaccessible or not function properly.

International Transfers

If we transfer your data outside the UK or EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the legally approved safeguards is implemented (such as Standard Contractual Clauses).