Ampersand Privacy Policy

The short version

• Ampersand does not require an account.
• Your specimen text, searches, preferences, and font collections are not sent to us. Information you choose to save is stored locally on your device.
• Ampersand uses Aptabase to collect limited, privacy-focused usage analytics so we can understand how the app is used and improve it.
• We do not sell personal information, show targeted advertising, or track you across other companies' apps or websites.

Information stored on your device

Ampersand stores the following information locally on your device:

• specimen text and display preferences;
• font collection names, optional descriptions, and the fonts included in each collection; and
• downloaded font files kept in a temporary cache to make previews load faster.

Search queries are used to show results and are not saved after they are no longer needed. Local app data is not sent to us, Aptabase, or RevenueCat. You can remove it by editing or deleting saved content in the app, where that option is available, or by deleting the app. Your device's operating system may also manage or remove cached files. Device backups are controlled by you and your platform provider.

Purchases and Ampersand Deluxe

If you purchase Ampersand Deluxe, the purchase is completed by Apple through the App Store. We do not receive or store your payment-card details.

Ampersand uses RevenueCat to validate purchases, determine whether Deluxe access is active, and support purchase restoration. Because Ampersand does not require an account, RevenueCat assigns an anonymous, app-specific identifier to the installation. RevenueCat processes that identifier, purchase and entitlement status, and transaction or receipt-related information needed to provide these functions. We do not provide RevenueCat with your name, email address, specimen text, searches, or saved collections.

Deleting the app removes its locally stored data, but does not necessarily delete purchase records held by Apple or RevenueCat. You may contact us using the details below to request deletion of RevenueCat data where applicable.

Anonymous usage analytics

Ampersand uses Aptabase to collect limited usage analytics. This helps us learn which parts of the app are useful, identify broad usage patterns, and improve reliability and design.

Analytics may include limited information about how Ampersand is used, along with general technical information such as the app version, operating system, device locale, approximate country or region, and event or session timing. We do not include personal information, user-entered content, or data intended to identify you in analytics events. Aptabase does not collect advertising identifiers, device identifiers, hostnames, or hardware identifiers for this analytics.

When Aptabase receives an event, it briefly processes the request's IP address and user-agent information to estimate a coarse country or region and create a per-app daily identifier. Aptabase does not store the IP address or user agent with the analytics data. The identifier is created using a per-app salt that changes every 24 hours and is then deleted, so activity cannot be connected across different days or different apps. Aptabase does not use cookies or advertising identifiers for this analytics.

We use this information only for aggregate analytics and app improvement, not for advertising, profiling, or tracking you across apps or websites. Aptabase processes this information on our behalf. More information is available in the Aptabase Privacy Policy.

Analytics data is hosted in the United States (Virginia). Aptabase may retain analytics event data for up to five years, or until we delete the relevant Ampersand project or our Aptabase account, whichever happens first. IP addresses and user-agent strings are processed only transiently and are not retained as part of the analytics data.

Font downloads and external links

Ampersand includes a local catalog of Google Fonts. When a font preview is needed, the app may download the font file fromfonts.gstatic.com (Google) or raw.githubusercontent.com (GitHub). Like any internet request, these providers receive technical information needed to deliver the file, such as your IP address, request time, and basic request information. Their handling of that information is governed by their own policies:

• Google Privacy Policy
• GitHub General Privacy Statement

Ampersand also contains links to font, license, or other third-party pages. If you open one, the destination website and your browser handle that visit under their own privacy terms.

How we use information

We use the limited information described above to:

• provide font previews and other app features;
• remember choices you make on your device;
• understand aggregate feature usage;
• diagnose broad reliability issues; and
• maintain and improve Ampersand.

Where privacy law requires a legal basis, we process this information as necessary to provide features you request and based on our legitimate interests in operating, securing, and improving Ampersand. Where consent is required by law, we will ask for it.

Sharing and disclosure

We do not sell or rent your information. We do not share information for cross-context behavioral advertising or targeted advertising.

We disclose limited information only:

• to Aptabase, RevenueCat, Apple, Google, and GitHub for the purposes described in this policy;
• when required by law or a valid legal process; or
• when reasonably necessary to protect the rights, safety, and security of users, the public, Ampersand, or our services.

If Ampersand or its assets are transferred to another operator, information covered by this policy may be transferred as part of that transaction, subject to applicable law and this policy.

International data transfers

The providers named above may process information in countries other than the one where you live. Where required, we and our providers use appropriate safeguards for international transfers. Aptabase stores Ampersand analytics in the region identified in the analytics section above. More information about RevenueCat's handling of personal data is available in the RevenueCat Privacy Policy.

Data security

Ampersand uses platform protections for locally stored app data and encrypted HTTPS connections for font downloads, analytics, and purchase-related communications. Aptabase also states that it encrypts analytics data in transit and at rest. No method of storage or transmission is completely secure, but we take reasonable steps appropriate to the limited nature of the information involved.

Your choices and privacy rights

You can change or delete saved collections in Ampersand and can remove locally stored app data by deleting the app. You can stop future analytics events by discontinuing use of Ampersand.

Depending on where you live, you may have rights concerning personal information, such as rights to access, correct, delete, restrict, or object to certain processing. You may also have the right to complain to your local data protection authority. To make a request, contact us using the details below.

Aptabase analytics are deliberately not tied to your identity. As a result, we generally cannot identify which analytics events relate to you and may be unable to retrieve or delete individual event records in response to a request.

Children's privacy

Ampersand is a general-audience font browser and is not directed to children below the minimum age at which parental consent is required under applicable law. We do not knowingly collect information that directly identifies children. If you believe a child has provided personal information through Ampersand, please contact us.

Changes to this policy

We may update this policy to reflect changes to Ampersand, our providers, or applicable law. We will update the date at the top of this page and provide any additional notice required by law.