Privacy Policy
Last updated: October 23, 2026
Eden Key is a physical key you wear, plus an iPhone app that locks the apps you choose. This policy explains what we collect when you use the Eden Key app, the key itself, and our websites (edendetox.com and key.edendetox.com). It also covers how we use that information and the choices you have. “Eden,” “we,” and “us” mean [Legal entity name].
The short version
- We don’t sell your data, show you ads, or track you across other apps or websites.
- Apple never tells us which apps you lock. We only know how many you’ve chosen.
- Your account, your profile and a backup of your Eden history are stored securely, so a new phone doesn’t mean starting over.
- You can delete your account, and the data that goes with it, from inside the app at any time.
What we collect
Your account. Your email address. We use it to send the six-digit code you sign in with. There’s no password.
Your profile. The display name you choose and, if you add one, a profile photo.
Your key. When you pair a physical Eden Key, we link its serial number and tag identifier to your account. That’s how a key works only for its owner.
Your backup. While you’re signed in, the app keeps a copy of your Eden data on our servers, so it comes back if you get a new phone or reinstall. This includes:
- your lock history (when you locked and for how long)
- your rituals (their names and how many apps each holds, but not which apps)
- your sealed windows and routines
- your daily goal and stats
- the answers you give during setup
- your settings
Feedback and support. Anything you send through the in-app feedback form, and any emails you send us.
Orders. If you buy a key, we collect your name, email, shipping address and order details so we can deliver it. Payment is handled by [payment processor / store platform]. We never see or store your full card number.
What stays on your phone
Which apps you lock. Eden uses Apple’s Screen Time framework. When you pick apps, Apple gives Eden only private tokens. Eden can’t turn them back into app names, and they never leave your device. We use Screen Time data only to lock and unlock the apps you’ve chosen, and for nothing else.
Reminders. Notifications are scheduled on your phone. We don’t run a push notification server.
Voice guidance. It’s spoken by your iPhone’s built-in speech. Eden doesn’t use your microphone or record audio.
We do not collect your location, your contacts, your browsing history, health data from Apple Health, advertising identifiers, or anything inside the apps you lock.
Our websites
Our sites are hosted by Vercel. Like most web hosts, it keeps standard server logs, such as IP address, browser type and the page requested, to keep the sites secure and running. We don’t use analytics or advertising cookies.
How we use your information
We use it to:
- run Eden: signing in, pairing your key, and locking and unlocking apps
- back up and restore your data
- deliver orders
- answer support requests
- keep the service secure
- improve the app based on the feedback you send
We don’t use your information for advertising or profiling, and we don’t sell or rent it to anyone.
Who sees it
Other Eden users can’t see your information. We share it only with:
Service providers that process data on our behalf, only to run Eden:
- Supabase (database, sign-in and storage)
- an email delivery provider (sign-in codes)
- Vercel (website hosting)
- [payment processor / store platform] (orders)
- Apple (App Store distribution, under Apple’s own privacy policy)
The law. We’ll disclose information if the law requires it, or to protect someone’s safety or our rights.
A change of ownership. If Eden is merged or acquired, your information may move to the new owner, still covered by this policy.
How long we keep it
We keep your data for as long as your account exists.
When you delete your account (Settings → Delete account), we immediately delete your profile, key pairing and backup.
- Feedback you sent stays, without your name.
- Order records are kept as long as tax and accounting law requires.
Deleted data may stay in our provider’s routine backups for a short time before those are overwritten.
Your rights
You can ask us to show you, correct, export or delete your personal information, or to stop using it. Depending on where you live, laws such as the GDPR (EU and UK) or the CCPA (California) give you these rights. Email us and we’ll reply within 30 days.
If you’re in the EU or UK, these are our legal grounds for using your information:
- to provide the service you asked for: your account and backup
- our legitimate interests: security and improving Eden
- your consent: your optional profile photo
You can also complain to your local data protection authority.
We don’t “sell” or “share” personal information as California law defines those terms.
Where your data is stored
Our providers may store and process your information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for these transfers.
Security
All data is encrypted in transit. Access rules in our database mean only you can read your backup. Key codes are stored hashed, not in plain text. No system is perfectly secure, but we work to protect what you trust us with.
Children
Eden isn’t for children under 13, or under the minimum age for online services where you live, and we don’t knowingly collect their information. If you believe a child has given us information, email us and we’ll delete it.
Changes to this policy
If we make a meaningful change, we’ll update the date at the top and let you know in the app or by email.
Contact
edendetox@gmail.com
[Legal entity name], [mailing address]