Privacy Policy

Effective: 2026-11-02

AMBE Discovery (the angididau.com website and the "AMBE Discovery" iOS/Android app) respects your privacy. This policy explains what data we collect, why, who we share it with and what your rights are.

1. Data we collect

Account: display name, email, password (stored only as a bcrypt hash), phone number if you enter it, preferred language.
Content you create: saved trips, favourite places, star ratings and comments, places you suggest, wrong-info reports.
Service requests: contact details, date/time, pick-up/drop-off, message — contact details are encrypted with AES-256 in our database.
Technical data: IP address and browser in security logs (abuse prevention); view statistics aggregated per day, not linked to your identity.

2. Location

Used only when you tap "Near me" or "Use my location" to find nearby places or mark a suggested place.
Location is used for that single request; we do not store location history or track you in the background.

3. Camera and photos

The app opens the camera or photo library only when you choose to upload a photo (for example for a suggested place).
EXIF metadata (including GPS coordinates) is removed before storage. Photos become public only after editor approval.

4. Microphone

Microphone permission is declared to prepare voice search. The microphone turns on only when you tap the mic button; audio is not recorded or stored on our servers.

5. Notifications

Email: sent through an SMTP server (Gmail) for events such as welcome, request status and suggestion review results.
Push: the mobile app sends a device push token to our server to receive notifications via Firebase Cloud Messaging (Google). Turn it off in Account → Notifications or in your phone settings.

6. Cookies

Only essential cookies: login session, anti-forgery (CSRF) token and selected language. No advertising or third-party tracking cookies.

7. Sharing

When you send a service request and consent, your contact details are shared with that partner only, to receive a quote.
Reviews are visible to members only, with a shortened name (e.g. "Lan N.").
Infrastructure providers: hosting server, Google (Gmail SMTP, Firebase), OpenFreeMap (map tiles — receives your IP like any website).
We do not sell personal data.

8. Storage and security

Data is stored on an HTTPS server with bcrypt-hashed passwords, encrypted contact details, role-based admin access and audit logs.
Contact details in expired requests are hidden; account data is kept until you delete your account.

9. Your rights and account deletion

View and edit your data on the Account page; turn email/push off at any time.
Delete your account in the app: Account → Delete account (or open angididau.com/delete-account). Your account, trips, favourites, reviews and push devices are deleted; contact details in past requests are wiped.

10. Children

The service is not directed to children under 13 and we do not knowingly collect their data.

11. Changes and contact

If this policy changes, the effective date at the top will be updated.
Privacy contact: marketing@79f.vn