Amblee · Legal

Privacy Policy

Effective July 16, 2026

Amblee, operated by Tarzan Technologies LLC, helps you block gambling and prediction-market apps and sites until you meet a savings or investing goal you set for yourself. Doing that requires some personal data, most notably a read-only view of activity in the bank accounts you choose to connect. This policy explains exactly what we collect, why, who touches it, and how to get it deleted. It applies to the Amblee iOS app, the web dashboard at amblee.co, and the Amblee browser extension.

One thing to understand up front: Amblee is non-custodial. We never hold, move, or invest your money, we never see your bank password, and we never initiate transactions. Our bank connection is read-only and exists for one purpose, verifying that your own deposits happened so your locks can open.

What we collect

Information you give us

Account details. Your email address and password, or your Sign in with Apple or Google identity.
Your timezone. Used so monthly goals reset on your local calendar.
Goal settings. Your monthly minimum amount, goal type (savings or investing), and the accounts you designate for it.
Habit selection. The gambling and prediction-market blocking you have turned on.
Custom blocklist entries. Any domains you add to the browser extension's blocklist beyond our seed lists.
Guardrail PIN. The 4-digit PIN that gates sensitive changes such as lowering your goal, removing blocklist entries, or unlinking a bank account.
Hardship reflections. The short private note you write when requesting a hardship unlock. These are visible only to you. We do not read them, analyze them, or use them for anything other than showing them back to you.

Information from your bank, via Plaid

When you connect a bank or brokerage account, you do so through Plaid, a regulated financial data network. Through Plaid we receive:

Account metadata. Account names, masked numbers (the last few digits only), account types, and balances.
Sanitized transactions. Amount, date, transaction type, and counterparty name. We use these to count net confirmed deposits toward your goal, including subtracting withdrawals and reversed deposits.

The access tokens that authorize this connection are encrypted at rest with AES-256-GCM.

Information generated by the app

Lock states. Whether your blocks are currently active, and why (goal not yet met, hardship unlock in effect, and so on).
Device names. So you can see which of your devices are enrolled.
Audit events. A log of sensitive actions such as goal changes, blocklist removals, hardship unlocks, and account unlinking, so you can review what changed and when.

What we deliberately do not collect

Your bank credentials. You enter them with Plaid, not with us. We never see your bank username or password.
Full account numbers. We receive masked numbers only.
Your Screen Time app picks. On iPhone, you choose which apps to block in Apple's own picker. Those selections stay on your device. Amblee records only that a selection exists, not which apps are in it.
Advertising identifiers. The app and site contain no ad-tracking SDKs and no third-party advertising or analytics pixels.

How we use your data

Running the product. Matching deposits in your designated accounts against your monthly minimum, and computing whether your blocks should be locked or open. This is the core of Amblee and the reason the bank connection exists.
Enforcing your own guardrails. Verifying your PIN before sensitive changes, applying the hardship unlock delay and monthly limit, and keeping the audit log accurate.
Support. Answering your emails and troubleshooting your account when you ask us to.
Legal obligations. Complying with applicable law and responding to valid legal process.

We do not use your data to build advertising profiles, and we do not use your hardship reflections or transaction history for marketing.

Who touches your data

We use the following service providers, each with a narrow role:

Plaid connects your bank and brokerage accounts and transmits the account data described above. See plaid.com/legal for Plaid's own privacy practices.
Apple processes your subscription payment through In-App Purchase and, if you use it, Sign in with Apple. We never see your payment card details.
Railway hosts our servers and database.
Google Workspace powers our email, including support conversations at support@amblee.co.
Vercel hosts and serves this website.
Postmark delivers transactional email such as password-reset links.
Stripe processes any subscription you purchase on the web (rather than through Apple).
PostHog receives privacy-preserving product analytics (which screens you reach), without selling or advertising use, when enabled.

We never sell your personal data, and we never share it with advertisers or data brokers. Ever. The parties that touch your data are the service providers above, acting only on our instructions to run the product. We update this list as our providers change.

We may also disclose data if required by law, or as part of a merger or acquisition, in which case this policy would continue to apply to data collected under it.

Plaid's role

Plaid is the bridge between Amblee and your financial institution. When you link an account, you authenticate directly with Plaid, and Plaid provides Amblee a read-only feed of the account metadata and sanitized transactions described above. Plaid has its own end-user privacy policy governing how it handles your data, available at plaid.com/legal. Unlinking an account in Amblee severs our access.

Security

Encryption at rest. Bank access tokens are encrypted with AES-256-GCM.
Encryption in transit. All traffic between your devices, our servers, and our processors uses TLS.
Ask twice. Sensitive operations, including lowering your goal, removing blocklist entries, and unlinking accounts, require your 4-digit guardrail PIN or your account password before they take effect.

No system is perfectly secure. If we learn of a breach affecting your personal data, we will notify you as required by law.

Retention and deletion

We keep your data while your account is active. When you delete your account, your bank and brokerage connections are severed immediately, and all of your personal data is hard deleted from our systems within 30 days. During that 30-day window the data is retained only so you can recover from an accidental deletion; after it, the data is gone.

Your rights

You can access, correct, or delete your personal data at any time. Most of it is visible and editable directly in the app and dashboard. For anything else, email support@amblee.co and we will handle your request.

California residents: Amblee does not sell personal information and does not share personal information for cross-context behavioral advertising, as those terms are defined by the California Consumer Privacy Act. You have the right to know what personal information we hold about you, to request its deletion, and to not be discriminated against for exercising those rights. Contact support@amblee.co to exercise them.

Children

Amblee is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18, and we will delete any such data we discover.

Changes to this policy

If we make material changes to this policy, we will update the effective date above and notify you by email or in the app before the changes take effect. Continued use of Amblee after the effective date means the updated policy applies.

Contact

Questions about privacy? Email support@amblee.co.

If gambling is causing you harm right now, free confidential help is available at 1-800-GAMBLER and ncpgambling.org. Amblee is a commitment tool, not medical care or addiction treatment.