Privacy Policy

Effective 19 October 2026

This Privacy Policy explains how Muse Wellness Collective LLC d/b/a AMBRA (“AMBRA”, “we”, “us”) collects, uses and shares information when you use the AMBRA mobile app, the website at theambra.com, and related services (together, the “Services”).

1. Information we collect

Information you provide

• Account information: your name, email address, password (stored by our authentication provider, never by us in plain text) and optional profile photo. If you sign in with Google, we receive your name, email and profile image from Google.
• Routine and training data: the activities you schedule, programs you join, sessions you start or complete, and the performance values you log (such as sets, repetitions, load, time, effort and notes).
• Social information: friend requests, accepted connections, your sharing preferences and cheers you send.
• Trainer content: if you are an AMBRA trainer, the exercises, workouts and demonstration videos you upload.
• Communications: your name and email when you join our waitlist, and any messages you send us.

Information collected automatically

• Basic technical data such as device type, operating system, app version, time zone, and log and diagnostic information needed to operate and secure the Services.
• Some preferences (for example, favorites) are stored locally on your device.

We do not collect precise location, we do not connect to Apple Health or wearables, and we do not sell your personal information or use it for third-party advertising.

2. How we use information

• To create and secure your account and provide the Services, including your Today screen, weekly routine, guided workouts and performance history.
• To deliver programs from the trainer you choose and let trainers assign sessions to their clients.
• To enable friend features according to your sharing settings.
• To respond to support requests and send service or waitlist communications.
• To maintain, troubleshoot and improve the Services and protect against fraud or abuse.
• To comply with legal obligations.

3. How information is shared

• With other members, at your direction: accepted friends can see activity you choose to share. Your trainer can see the sessions assigned to you and related completion information.
• Service providers: companies that host and operate the Services on our behalf, such as authentication (Clerk), cloud hosting, database and file storage providers, and our website platform (Webflow). They may only use information to provide services to us.
• Legal and safety: when required by law, or to protect the rights, safety and property of AMBRA, our members or others.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.

4. Data retention

We keep your information for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or de-identify your personal information within 30 days, except where we must retain it for legal, security or accounting purposes.

5. Your choices and rights

• You can access and update your profile information in the app.
• You can change friend sharing settings or remove connections at any time.
• Account deletion: you can request deletion of your account and associated data at any time by emailing andrew@theambra.com.
• Depending on where you live (for example, the EU/UK or California), you may have rights to access, correct, delete or port your data, or object to certain processing. Contact us to exercise these rights; we will not discriminate against you for doing so.
• You can unsubscribe from marketing emails using the link in any message.

6. Security

We use industry-standard measures, including encrypted connections and verified authentication, to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and limit access to those who need it.

7. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

8. International users

We are based in the United States, and your information may be processed in the United States and other countries where our service providers operate.

9. Changes

We may update this Policy from time to time. We will post the updated version here and, if changes are material, notify you in the app or by email.

10. Contact