Privacy Policy

Last updated: 3 September 2026

Eden is an app about paying less attention to your phone. It would be strange to build that on top of a surveillance business, so we don't. This policy describes exactly what we hold, and it's short because there isn't much.

Eden is operated by LEGAL ENTITY NAME, REGISTERED ADDRESS, which is the data controller. Contact: privacy@edendetox.com.

The short version

• We collect your email address, a display name, and your key code.
• Your cohort messages and the days you closed your ring are on our servers,

because other people need to see them.

• Everything else stays on your phone — your lock history, your goal, your

age, your meditation progress, your rituals, your profile photo. We never receive it.

• We don't sell anything, we don't advertise, and we don't use third-party

analytics or tracking.

What we store on our servers

Your email address. Needed to sign you in. We send a numeric code to it; there is no password.

Your key code. The code printed on your Key card, which links the key to your account and identifies you to buddies.

Your display name. Whatever you type. It doesn't have to be your real name.

Cohort membership. Which room you're in, and when you joined.

Cohort messages. What you write in a room, visible to the people in that room. Stored until you or the room's captain deletes them, or you delete your account.

Ring closures. The date you closed your ring, so your cohort can see it. Not how long you held, not what you locked — just the day.

That's the entire list.

What stays on your phone and never reaches us

This data is written to storage on your device only. It is not synced, not backed up to us, and we have no way to read it:

• Your lock and unlock history, including every time the key opened your phone
• Your daily goal and your streak
• Your age, if you entered one, and everything on the memento mori screen
• Your screen-time baseline
• Which meditations and journey steps you've finished
• Your rituals, the apps in them, and your routines
• Your profile photo, which is stored as a reference to the file on your device

If you delete the app, this data goes with it. We cannot restore it, because we never had it.

App blocking and Screen Time

When Eden blocks apps it uses Apple's Screen Time framework. Apple deliberately designs this so that apps like ours cannot see which apps you chose. The selection is made inside a picker that Apple draws, and we receive opaque tokens with no names or icons attached. That information never leaves your device and is not readable by us even in principle.

Who else touches your data

Two companies, both processing on our instructions:

Apple processes your subscription payment. We never see your card details.

We don't use Google Analytics, Firebase, Meta pixels, advertising SDKs, or any third-party tracking. There are no cookies in the app.

Why we're allowed to hold it

Under UK and EU data protection law, our lawful bases are:

• Contract — your email, key code and name, because we can't run your account

without them.

• Legitimate interests — cohort messages and ring closures, so the group

feature works. You choose whether to join a cohort at all.

• Legal obligation — records we're required to keep, such as purchase records

for tax.

How long we keep it

Your account data is kept while your account exists. When you delete your account it's removed immediately, along with your key pairing, cohort memberships, buddies and ring closures.

Two deliberate exceptions:

• Messages you wrote in a cohort stay in that room, with your name removed.

Deleting yourself shouldn't punch holes in other people's conversations.

• Purchase records are kept as long as tax law requires.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. Email privacy@edendetox.com and we'll answer within one month.

You can delete your account yourself at any time, without asking us: Settings → Danger Zone → Delete my account.

If you think we've handled your data badly, you can complain to your data protection authority. In the UK that's the Information Commissioner's Office at ico.org.uk.

Children

Eden isn't for children under 13. We don't knowingly collect data from them. If you believe a child has given us data, email us and we'll delete it.

Security

Data in transit is encrypted with TLS. Our database enforces row-level security, so one person's rows cannot be read by another even if the app were modified. Sign-in is by one-time code, so there is no password of yours for anyone to steal from us.

No system is perfectly secure. If a breach affects you, we'll tell you and the regulator as the law requires.

International transfers

Our processors may store data outside the UK and EEA. Where they do, transfers are covered by the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

Changes

If we change this policy materially, we'll tell you in the app or by email before it takes effect. The date at the top always reflects the current version.

Questions: privacy@edendetox.com