Privacy Policy

Ebb is operated by the maker of Nurrow (“Ebb,” “we,” “us”). You can reach a human at aw2104094@gmail.com. For privacy-specific questions, use the same address with the subject line “Privacy.”

Ebb is a wellness reflection app. It lets you log a short daily check-in (energy, stress, mood, optional symptom tags) and shows you patterns over time. It is not a medical product, it does not diagnose anything, and it should not be used in place of professional advice. See our Terms of Service for the long version of this.

Ebb is local-first. Until you sign in, nothing leaves your device. After you sign in by email magic link, the following is transmitted to our backend so we can sync your check-ins across devices:

• Your email address, used only to send sign-in links and important account notices.
• A user ID generated by our authentication provider.
• Your check-in entries: the values you enter (energy, stress, mood, symptom tags) along with a timestamp and your local time zone.
• Minimal request metadata kept by our backend provider for security and abuse prevention — request times, IP address, and user-agent string. Retained for a short window (≤ 90 days) and then erased.

We do not collect contacts, location, device identifiers outside of what your browser provides automatically, or any third-party advertising identifiers. We do not use analytics SDKs.

Some of what you enter — mood, stress, energy, symptom tags — is sensitive personal information under laws like the EU GDPR and UK GDPR. We treat it as such:

• It is never sold and never shared with advertisers.
• It is encrypted in transit (TLS) and at rest in our database.
• It is only accessed by the maker of Ebb, for operating the service and responding to support requests you send us.
• Our legal basis for processing it is your explicit consent, given when you sign in and sync your check-ins.

Your local data lives in your browser's IndexedDB on the device you used. Synced data is stored at our backend provider, Supabase (Supabase Inc.), which acts as our data processor under a standard processing agreement. Supabase hosts data in regions it operates.

Nobody, with three narrow exceptions:

• Supabase, as described above, because it stores and serves your synced data on our behalf.
• The maker of Ebb, only when needed to maintain the service or respond to a request you send us.
• A government or law enforcement agency, only if compelled by a lawful, valid request we cannot refuse.

Synced check-ins are kept as long as your account exists. Once you delete your account, they are removed from active storage immediately and purged from backups within 30 days. Security and abuse-prevention logs are retained for up to 90 days and then erased.

Wherever you live, you can:

• Ask for a copy of the data we hold about you.
• Ask us to correct anything that's wrong.
• Delete your account and associated data at any time.
• Withdraw consent by signing out and removing the app.
• Complain to a data-protection authority in your country if you think we've handled your data badly.

If you're in California, the CCPA also gives you the right to know what we've collected, to delete it, and to be free from retaliation for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

To exercise any of these rights, email aw2104094@gmail.com.

In the app: open Settings → Delete account and confirm. By email: write to aw2104094@gmail.com with the subject “Delete my Ebb account.” See our account deletion page for the full process.

Ebb is intended for users 18 and over. We don't knowingly collect data from anyone under that age. If you believe a child has used Ebb and provided personal information, please contact us and we'll remove it.

If we change this policy, we'll update the date at the top. For meaningful changes, we'll also send a note to the email address you signed in with. Continuing to use Ebb after a change means you accept the updated policy.

Email aw2104094@gmail.com. Replies come from a real person and may take a few days.