Privacy policy

Last updated 26 October 2026

Ebb tracks periods, symptoms, moods, sleep and notes. That is health data, and in parts of the world it carries legal weight. So Ebb keeps it on your phone and nowhere else.

What Ebb stores on your device

• Your logged periods, with start and end dates.
• Daily entries: flow, symptoms, moods, sleep hours and notes.
• Your own symptoms, if you add any.
• Settings: assumed cycle length, reminders, app lock, discreet mode.

All of it lives in the app's sandbox directory. Android's cloud backup and device transfer are switched off for Ebb, so this data does not travel to a new phone on its own.

What leaves your phone

Only what you send yourself:

• Exports. CSV, ICS and the PDF report are written on an explicit tap and handed to the system share sheet. Where they go from there is your choice.
• Support chat. If you write to us under Profile, Help and feedback, your messages go to our support backend. Details in the section below. Your cycle data is never attached.
• Invites. If you open the invite page, or install Ebb through someone's invite link, the anonymous RevenueCat app user id, your invite code and a one-way hash of your device identifier go to our referral server, so the extra Pro days land on the right installation. Your cycle data is never part of it.

Support chat, only if you open it

Until you open Profile, Help and feedback, nothing in this section happens. Ebb does not connect to the support backend on a normal start.

When you open it, Ebb signs in to our Supabase backend with an anonymous identifier. There is no email, no name and no password. When you send a message, we store:

• The anonymous identifier
• The messages you write, and our replies
• The app version, the Android version and the device model, so we can reproduce a problem
• The language of the app, and whether Pro is active

Messages are translated automatically on our server (Google Gemini) so we can read your message and answer in your language. The text of a new message is also forwarded once, together with the app version and the device model, through a small Cloudflare service to a private notification channel, so we see it in time. Nobody else can read your messages.

After your first message, Ebb opens this connection on each start so that new replies show up. If you allow notifications, Ebb registers a push token with Google Firebase Cloud Messaging and stores it with the anonymous identifier, so a reply can reach you while the app is closed. The notification shows the reply text and is hidden on the lock screen. While discreet mode is on, no token is registered, and turning discreet mode on removes it.

Purchases

Ebb Pro is sold through Google Play. The purchase itself is handled by Google, and the purchase status is managed through RevenueCat, which assigns an anonymous app user id to the installation. Neither receives your cycle data. We never see your payment details.

Data retention

How long each kind of data is kept, and what ends the retention:

• Periods, daily entries, symptoms, settings and the PIN on your phone: kept until you tap "Delete all data" in the app or uninstall Ebb. They are never copied to a server.
• Support messages, with app version, Android version, device model and language: kept while the conversation is open. Closed conversations are deleted no later than 12 months after the last message, or earlier on request.
• Anonymous support identifier and push token: kept while there are conversations, and deleted together with them. The push token is also removed when you turn on discreet mode. On the phone both are discarded when you uninstall Ebb or clear its data.
• Referral records (your invite code, the RevenueCat app user id, the hash of your device identifier): kept until you ask us to delete them.
• Purchase state: RevenueCat keeps the anonymous app user id and entitlement status for as long as the lifetime purchase exists, according to its own policy. Google Play keeps the transaction under your Google account.
• Server backups: backups of the support and referral databases exist for disaster recovery only and are overwritten within 30 days, so deleted records disappear from them within that window.

To have support or referral records deleted, write to clearpointstudios@proton.me. We delete them within 30 days.

What Ebb does not do

• No analytics, no tracking pixels, no advertising ids, no fingerprinting.
• No ads, ever.
• No selling or sharing of data, because there is nothing on our side to sell.
• No AI service is asked about your entries. Every prediction is computed on the device from your own data.

Notifications

Reminders are scheduled locally by your phone. They never contain symptom details, and in discreet mode they carry no content at all. The only notification that comes from outside is a reply in the support chat, described above.

Deleting your data

Profile has a "Delete all data" action. It removes the stored entries, the settings and the PIN from the device. Uninstalling Ebb removes everything too. Your cycle data is never on a server, so there is nothing more to delete for it. Support conversations can be deleted by email, see Data retention.

Children

Ebb is not directed at children under 13 and is not designed for them.

Not medical advice

Ebb shows estimates based on the entries you make. It is not a medical device, not a diagnosis, and not a method of contraception.

Changes

If this policy changes, the date at the top changes with it.

Contact

Clearpoint Studios, clearpointstudios@proton.me