Who this policy covers
This policy applies to the Ebb Android application (“Ebb”, “the app”, “we”). It does not cover any other app or website.
What we collect
Ebb has no account, no sign-up, and no analytics. We do not collect,
receive, see, or store any of your information — not your cycle data, symptoms,
moods, notes, identifiers, location, contacts, or device information. There is no
server to send it to. The app requests the INTERNET permission for one
reason only: to process optional purchases through Google Play Billing. That
permission is never used to send your cycle data or logs anywhere — everything you
enter stays local whether or not you ever make a purchase.
What you store, and where it lives
Everything you enter — periods, symptoms, moods, intimacy, basal body temperature, notes, reminders, and settings — is stored only on your device, inside an encrypted database. It never leaves your device unless you take a deliberate action to export or share it (see below).
How it's protected on your device:
- The database is encrypted at rest with SQLCipher (AES-256).
- The database key is protected by the Android Keystore (hardware-backed where supported).
- The app can be locked with a PIN and/or biometrics, with a separate decoy PIN that opens an empty version of the app under duress.
- Screenshots and the recent-apps preview are blocked (
FLAG_SECURE).
Permissions, and why each is used
Ebb requests only the permissions its on-device features need. None are used to collect or transmit data.
| Permission | Why |
|---|---|
| Biometric | Unlock the app with your fingerprint or face. |
| Notifications | Show cycle and medication reminders you set. |
| Exact alarms, full-screen intent, vibrate | Fire medication and cycle reminders at the time you choose. |
| Run after restart | Re-arm your reminders after the phone reboots. |
| Read menstruation data (Health Connect) | Optional. Only if you choose to import your period history. Read-only — Ebb never writes back to Health Connect. |
| Internet | Only for Google Play Billing, to process an optional purchase. Never used to transmit your cycle data, logs, or anything else you enter. |
Ebb does not request location, contacts, camera, microphone, or storage permissions.
Things you choose to do
These only happen when you initiate them, and the data goes only where you direct it:
- Encrypted backup (.ebb file): export an encrypted backup to a location you pick, protected by a passphrase only you know (Argon2id + AES-256-GCM). If you store it in a cloud location, that provider's privacy policy then applies to that file.
- CSV export: export your logs as plain text. This file is not encrypted — anyone who obtains it can read it. Use the encrypted backup for safekeeping.
- Share (e.g. a doctor-visit summary): share a text summary through Android's share sheet to an app you choose. Ebb does not control what that app does with it.
- Health Connect import: with your permission, Ebb reads your period history from Health Connect into its encrypted database. Read-only and stays on your device; you can revoke the permission any time in Health Connect's settings.
Third parties
- No advertising, no analytics, no trackers, no SDKs that phone home.
- Google Play Billing: Ebb offers optional monthly, yearly, or one-time lifetime purchases that unlock a set of extra tools (like the BMI, due-date, and kick-counter calculators). Cycle predictions, daily logging, the calendar, reminders, encrypted backup, and the app lock — including the decoy PIN — are free and stay free regardless of purchase. Purchases are processed entirely by Google Play Billing, the only feature that uses the network. It sees what it needs to process a purchase (handled by Google, not by us) and never receives your cycle data or any other health information — that data lives only in the app's local encrypted database.
Children
Ebb is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect information from anyone — because we do not collect information at all.
Your control over your data
- View / edit / delete any entry in the app at any time.
- Export your data (encrypted .ebb or CSV) whenever you want.
- Delete everything with “Start fresh” in the app, or by uninstalling Ebb — uninstalling removes the app's local database from your device.
We cannot access, recover, reset, or delete your data for you, because we never have it. If you forget your unlock PIN, your recovery passphrase (or a backup) is the only way back in — by design.
Data retention
We retain nothing, because we receive nothing. Your data is retained on your device for as long as you keep it there.
Changes to this policy
If this policy changes, we will update the “Last updated” date above and post the revised policy at the same location. Material changes will be noted in the app's release notes.
Contact
Questions about this policy or your privacy in Ebb:
contact@syntay.com