Privacy Policy for Ample

Introduction

Ample ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our credit card benefits tracking mobile application.

Ample helps you track and manage credit card benefits, monitor usage, set reminders, and maximize the value of your cards. This policy covers both offline (device-only) and cloud-enabled modes of the app.

Information We Collect

Personal Information

We collect minimal information strictly necessary to provide core functionality:

Email Address (Temporary Use Only) — Cloud Mode Only

• Collected when you sign in to cloud sync to receive a 6-digit verification code
• Sent securely to our backend via encrypted HTTPS
• Never stored in plain text in any database
• Used only to send a one-time verification code through Amazon Simple Email Service (SES)
• Automatically deleted within minutes after verification or expiration

Hashed User ID — Cloud Mode Only

• A hashed version of your email (using a private salt and SHA-256) is used to identify your account data in our database
• This value is anonymized, non-reversible, and used to associate your card selections, benefit tracking data, and preferences with your account
• The hashing ensures your actual email is never stored alongside your data

Card Selections and Benefit Tracking Data

• Which credit cards you have added (card name and issuer only — no card numbers, account numbers, or financial credentials are ever collected)
• Benefit tracking records: usage amounts, dates, notes, and status
• Usage history: an immutable ledger of your benefit usage over time
• Reminders: notification preferences and schedules for benefit deadlines
• All data is stored securely on your device using Apple's SwiftData framework
• When in Cloud Mode, this data is also securely stored in our database, associated only with your hashed user ID

App Preferences

• Display settings (grouping preference, visible sections, card image display)
• Notification preferences
• Stored on device; synced to cloud if cloud mode is enabled

What We Do NOT Collect

• Credit card numbers, account numbers, CVVs, or any financial credentials
• Bank account information or transaction history
• Your name, phone number, or physical address
• Device identifiers or hardware IDs
• Location data
• Contacts, photos, or other device data

How We Use Your Information

Core App Functionality

• Benefit Tracking: To store and organize your credit card benefit records and usage history
• Reminders: To schedule local notifications reminding you of benefit resets, expirations, and deadlines
• Cloud Synchronization: To sync your data across devices and provide backup (when enabled)
• Data Export: To allow you to export your data as a portable JSON backup file

Product Improvement

• We may collect aggregated, anonymous usage data (such as which features are used and how frequently) to improve the app
• This data contains no personal information, account details, or device identifiers
• We do not use any third-party analytics SDKs (such as Firebase, Crashlytics, Amplitude, or similar services)

What We Do NOT Do

• We do not collect or store your full email address long-term
• We do not share your data with advertisers, data brokers, or third parties
• We do not serve advertisements of any kind
• We do not use cookies, tracking pixels, or third-party tracking services in the app
• We do not sell, rent, or trade your personal information

Data Analytics

Ample does not collect personal data for analytics purposes. We may collect aggregated, anonymous product usage data (such as feature usage frequency) to guide future improvements. This data cannot be used to identify individual users.

The app uses Apple's OSLog framework for local debugging purposes only. These logs remain on your device and are never transmitted to our servers.

The only additional data collection that may occur is through Apple's standard iOS analytics, which is controlled by your device settings and Apple's privacy policies. We have no access to or control over Apple's data collection practices.

Data Storage and Security

Local Storage

• Your data is stored locally on your device using Apple's SwiftData framework (SQLite)
• Authentication credentials are stored in the iOS Keychain, protected by the operating system's security mechanisms
• App preferences are stored in UserDefaults on your device
• Card logo images are cached locally on your device to minimize network requests

Cloud Storage

When cloud sync is enabled, we use industry-standard security measures, including:

• End-to-end encryption (HTTPS) for all network requests
• One-way SHA-256 hashing for identity management
• AWS DynamoDB: Your data is securely stored in Amazon Web Services cloud infrastructure
• AWS Cognito: Provides temporary, scoped credentials for each session — no long-lived passwords or tokens
• Encryption: Data is encrypted in transit and at rest using industry-standard encryption
• Access Control: Each user's data is isolated and accessible only with their unique, temporary credentials

Card Images

Ample displays credit card images and logos to help you visually identify your cards. These images are hosted on our own AWS infrastructure and cached locally on your device after the first load.

• No personal data, cookies, or tracking information is sent when loading card images
• You can disable card image display entirely in the app's Settings, which prevents these network requests

Anonymous Submissions

Ample allows you to optionally submit benefit suggestions or card requests to help improve the app's catalog. These submissions are entirely anonymous:

• Only the benefit or card details you are submitting are sent (title, description, card name, issuer, type, value, frequency, and category)
• No user IDs, email addresses, device identifiers, or account information are included
• Submissions are sent via encrypted HTTPS
• You are never required to make a submission — this feature is entirely optional

In-App Purchases

Ample offers an optional one-time in-app purchase ("Ample Pro") to unlock additional features such as unlimited card tracking, cloud backup, and home screen widgets.

• All purchases are processed entirely by Apple through the App Store. Ample never collects, processes, or stores your payment information, credit card details, or Apple ID credentials
• Purchase status is verified locally on your device using Apple's StoreKit framework
• A boolean flag indicating whether the upgrade has been purchased is stored in a shared app group container on your device so that widgets can check access. This flag contains no personal or financial information
• We do not use any third-party payment processors, receipt validation servers, or purchase analytics services
• For questions about billing, refunds, or payment issues, please contact Apple Support directly, as all transactions are managed by Apple

Data Retention

Offline Mode

Your data is stored locally on your device and is retained only while you keep the app installed. When you delete the app, all local data is permanently deleted by the operating system.

Cloud Mode

• Active Use: Your data is retained as long as you use cloud sync within a 1-year period. If you do not use cloud sync for 1 year, your cloud data will be automatically and permanently deleted
• Account Deletion: When you turn off cloud backup or delete your account, all your cloud data (cards, benefits, usage history, reminders, and settings) is permanently deleted immediately. A minimal account record may be retained for administrative purposes but contains none of your personal data

Data Sharing and Disclosure

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties under any circumstances.

Limited Sharing

We may share your information only in the following circumstances:

• Service Providers: With Amazon Web Services (AWS) for cloud storage and authentication infrastructure. AWS processes data on our behalf under strict contractual obligations
• Legal Requirements: When required by law, regulation, or valid legal process, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with appropriate privacy protections maintained)

Third-Party Services

We do not use any third-party analytics, advertising, or tracking services. The only external service we use is Amazon Web Services (AWS) for secure cloud storage, authentication, and image hosting.

Aggregated Data

We may use aggregated, anonymized data for product improvement purposes. This data cannot be used to identify individual users.

Your Rights and Choices

Access and Control

• View Your Data: You can view all your card selections, benefit tracking data, and usage history within the app
• Edit Your Data: You can modify, add, or delete cards, benefits, usage records, and reminders at any time
• Export Data: You can export all your data as a JSON backup file, which can be saved, shared, or used to restore your data
• Delete Account: You can delete your cloud account and all associated data from within the app's Cloud Backup settings

Privacy Settings

• Offline Mode: You can use the app entirely offline without any cloud synchronization or network activity (aside from optional card image loading)
• Cloud Sync: You can enable or disable cloud sync at any time
• Card Images: You can disable card image display in Settings to prevent image-related network requests entirely
• Notifications: All notifications are local to your device. You can enable or disable reminders in Settings

Data Portability

• JSON Export: You can export your complete data (cards, benefits, usage history, reminders, and settings) as a portable JSON file
• Import/Restore: You can import a previously exported backup to restore your data

Third-Party Trademarks and Intellectual Property

Credit Card Issuer Trademarks

Ample displays credit card names, logos, and benefit descriptions to help you identify and track your cards. The following credit card issuer names and associated trademarks are the property of their respective owners:

• American Express, Amex, and related card names (e.g., Platinum Card, Gold Card) are trademarks of American Express Company
• Chase, Sapphire, and related card names are trademarks of JPMorgan Chase & Co.
• Capital One, Venture, and related card names are trademarks of Capital One Financial Corporation
• Citi, Strata, and related card names are trademarks of Citigroup Inc.
• Discover and related card names are trademarks of Discover Financial Services
• Bank of America and related card names are trademarks of Bank of America Corporation
• Wells Fargo and related card names are trademarks of Wells Fargo & Company
• U.S. Bank and related card names are trademarks of U.S. Bancorp
• Barclays and related card names are trademarks of Barclays PLC
• Bilt and related card names are trademarks of Bilt Technologies, Inc.

All other trademarks, service marks, and logos displayed in the app belong to their respective owners.

Non-Affiliation Disclaimer

Ample is an independent application and is not affiliated with, endorsed by, sponsored by, or in any way officially connected with any credit card issuer, bank, or financial institution. The use of issuer names, logos, and card benefit descriptions within the app is solely for the purpose of helping users identify their credit cards and track associated benefits. This constitutes nominative fair use under applicable trademark law.

Card Images and Logos

Card images and issuer logos displayed in the app are hosted on our own infrastructure. They are used solely for identification purposes to help users recognize their credit cards within the app. We do not claim ownership of any third-party logos or images.

Benefit Information

Credit card benefit descriptions, values, and terms displayed in the app are compiled from publicly available information, including official card terms and conditions, marketing materials, and public documentation provided by the card issuers. This information is provided for user convenience and identification purposes only.

Data Accuracy and Financial Disclaimer

• Ample is a tracking tool designed to help you monitor your credit card benefits. It is not a financial advisor and does not provide financial advice
• Credit card benefits, terms, conditions, and values are subject to change by the issuing financial institution at any time without notice
• We do not guarantee the accuracy, completeness, or timeliness of any benefit information displayed in the app
• Users are responsible for verifying all benefit details, terms, and conditions directly with their card issuer
• Do not rely solely on Ample for financial decisions — consult with qualified financial professionals for important financial matters

Data Security

Security Measures

• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest (AWS server-side encryption)
• Authentication: Secure OTP-based authentication with no long-lived passwords
• Credential Management: Temporary, scoped AWS credentials that auto-refresh and expire within minutes
• Keychain Storage: Authentication credentials stored in iOS Keychain, protected by the device's hardware security
• Privacy by Design: We do not store personally identifiable information on our servers — only a non-reversible hash of your email for authentication

Data Breach Notification

Due to our privacy-first approach, we do not store personally identifiable information on our servers. The only data stored is a non-reversible hash of your email address for authentication, which cannot be used to identify you personally. In the unlikely event of a data breach affecting your benefit tracking data, we will notify affected users through the app and take immediate steps to secure the system.

Your Responsibilities

• Device Security: Keep your device secure with a passcode, Face ID, or Touch ID
• App Updates: Keep the app updated to benefit from security improvements
• Email Security: Protect the email address you use for cloud authentication, as it is used for OTP verification

Children's Privacy

Ample is not intended for children under 13 years of age (or 16 in the European Union). We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will take steps to delete such information.

International Data Transfers

Your data may be processed and stored in countries other than your own, as our cloud infrastructure is hosted on Amazon Web Services which operates data centers globally. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

Disclaimer and Limitation of Liability

Disclaimer of Warranties

The Ample app is provided "as is" and "as available" without any warranties of any kind, express or implied. To the fullest extent permitted by applicable law, we disclaim all warranties, including but not limited to:

• Warranties of merchantability, fitness for a particular purpose, and non-infringement
• Warranties that the app will be uninterrupted, error-free, or secure
• Warranties that defects will be corrected or that the app or server are free of viruses or other harmful components
• Warranties regarding the accuracy, reliability, or completeness of any credit card benefit information provided through the app

Limitation of Liability

To the fullest extent permitted by applicable law, in no event shall Ample, its developer, officers, directors, employees, agents, or affiliates be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to:

• Loss of profits, data, use, goodwill, or other intangible losses
• Damages resulting from the use or inability to use the app
• Damages resulting from any changes to the app or temporary or permanent cessation of the app
• Damages resulting from unauthorized access to or alteration of your data
• Damages resulting from reliance on credit card benefit information displayed in the app
• Damages resulting from any missed, expired, or incorrectly tracked credit card benefits

In no event shall our total liability to you for all claims exceed the amount paid by you, if any, for accessing the app during the twelve (12) months preceding the event giving rise to the liability.

Credit Card Benefit Information Accuracy

• The app is designed to help you track credit card benefits but should not be used as the sole basis for financial decisions
• Benefit values, terms, and availability are determined by card issuers and may change at any time
• We are not responsible for any loss or missed opportunity resulting from inaccurate, outdated, or incomplete benefit information
• Users are responsible for verifying benefit details directly with their card issuer before making decisions based on information in the app

Indemnification

You agree to indemnify, defend, and hold harmless the developer and any associated parties from and against any claims, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising from your use of the application or violation of these terms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app and on our website
• Updating the "Last Updated" date at the top of this policy

Your continued use of the app after changes are posted constitutes your acceptance of the updated Privacy Policy.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (note: we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

GDPR Compliance (EU Users)

If you are in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent

To exercise these rights, please contact us using the information provided above.

Compliance

This Privacy Policy is designed to comply with applicable privacy laws, including:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable local privacy regulations

This privacy policy is specific to the Ample credit card benefits tracking app. Thank you for trusting Ample with your data. Your privacy and security are our highest priorities.

← Back to Ample Details