Ready to focus differently?
Download Ebbi for iPhone or Android. Or join the focus-tips list.
Focus tips & feature news
The short version: Everything you create in Ebbi lives on your device. When you are signed in to iCloud on an Apple device, three things also sync privately across your Apple devices through Apple's iCloud service: your focus sessions, the telemetry recorded during those sessions, and snapshots of the plans you ran or scheduled. Ebbi does not sync your task and reset banks, saved plans, reminders or settings, and does not send them to us. If you have your device's own backup switched on (iCloud Backup on Apple devices, or Android's backup to your Google account), that backup can include Ebbi's data, in your own account, where we cannot see it. If you schedule a session for later, Ebbi can also add it as an event in your own calendar; we never receive that event, and deleting the app does not remove it (Section 2.1 explains). Ebbi has no servers that hold your content, with one narrow exception: if you use Live Activities, the label of your current and next task is briefly passed through our delivery service so it can show on your Lock Screen, and it is deleted as soon as that update is sent (Section 2.2.1 explains this in full). We collect only your email address if you joined the email list or optionally provided one when sending feedback, the text of any feedback you choose to send us from within the app, your subscription status through the App Store, and anonymized crash and usage diagnostics to keep the app stable. We do not sell or share your personal information, and we do not use your data for advertising. We may evolve Ebbi over time to add features such as expanded sync, sharing, or new platforms; if any change affects how your content is stored or transmitted, we will update this policy and notify you in-app before the change takes effect. Platform note: the specifics above describe Apple devices. On Android, Ebbi collects less: there is no iCloud sync (Ebbi itself does not copy your content off the device, though Android's own backup can, and so can your calendar account's sync for any session Ebbi adds to your calendar; Section 2.1 explains both) and no analytics or crash-reporting service of ours (Google Play's billing library does send Google its own diagnostics, never your content; Section 2.2 explains), and subscription status is verified through Google Play using RevenueCat. Where a data practice differs by platform, the sections below say so.
Ebbi is a focus companion built for people with ADHD, developed and published by The Forge Hut, LLC, a limited liability company organized under the laws of the State of Kansas, United States.
Ebbi is offered worldwide in Apple App Store and Google Play territories, with two exceptions: we do not offer Ebbi in China or Russia. Residents of those two jurisdictions will not find Ebbi available in their app store.
Ebbi is available on Apple devices (iPhone and iPad) through the Apple App Store and on Android devices through Google Play, offered in the same territories with the same exclusions listed above. Where our data practices differ between the two platforms, this policy notes the difference inline using the labels "On Apple devices" and "On Android devices."
For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (FADP), the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA/CPRA"), Canadian privacy law (including PIPEDA and Quebec Law 25), and the privacy laws of other jurisdictions where Ebbi is offered, The Forge Hut, LLC acts as the data controller (or, for CCPA/CPRA, the "business") for any personal data we process. If you are in the EU, the EEA, the UK, or Switzerland, see Section 10 for the disclosures and rights that apply specifically to you.
You can reach us at any time at support@ebbi.app.
Ebbi runs on both Apple devices and Android devices, and the two builds do not collect the same data. This subsection summarizes the differences; the detailed subsections below note them inline as well.
All content you create inside Ebbi (every task, list, project, note, focus session, and any setting or preference) is stored on your device. When you are signed in to iCloud on an Apple device, a defined subset of that content also syncs privately across your other Apple devices through Apple's iCloud service. That subset is: your focus sessions, the per-session telemetry described below, and snapshots of the plans you ran or scheduled, including the tasks and resets recorded inside those snapshots. Nothing else syncs. Your task bank and reset bank, your saved plans and templates, the plan you are currently working on, your custom reminders, your achievements, and every setting and preference are not synced by Ebbi and stay on the device where you created them, except that iCloud Backup, if you have it switched on, includes Ebbi's app data in your device's backup in your own iCloud account. Ebbi does not run servers that hold this content; we do not collect it, view it, store it on our infrastructure, or keep it on any server of ours. There is one narrow exception, and it exists only to deliver a feature you turn on: if you run a focus session with Live Activities on an Apple device, the label of your current and next task is passed to our delivery service so it can appear on your Lock Screen, and it is deleted as soon as that update is sent. Beyond that label, the iCloud sync described above, any backup of your own device, and the calendar events described below, nothing else you create leaves your device, and we never receive your lists, notes, or session history. Section 2.2.1 sets out exactly what the Live Activity feature involves. Your content belongs entirely to you.
On Android devices: your content is stored on your device. Android builds do not use iCloud, so the iCloud statements in this section do not apply on Android, and Ebbi operates no sync service of its own on either platform. As on Apple devices, Ebbi runs no servers that hold your content, and we do not transmit it to any third party. There is one thing to know that happens outside Ebbi: if you have Android's system backup switched on, Android itself copies the app's data, including your task and plan text, into your own Google Drive. That copy is made by the operating system to your account, is encrypted with your device credential, and we have no access to it and no ability to read or delete it. You can turn that backup off in Android's own system settings, and you can clear your Ebbi content on the device through Settings.
This includes the detailed per-session telemetry Ebbi captures to enable on-device intelligence (the kind of feedback that helps you spot patterns in your own focus over time): each task's interaction timeline (pauses, time-extension taps, skip vs done early), pause events with trigger and duration, settings snapshots taken at session start, and aggregate session counters. All of this lives in the Ebbi app's databases on your device. When you are signed in to iCloud, a record of each session you run or schedule syncs to your private iCloud database, including its name, times and time zone, its totals and counters, a summary of each task (including its name, planned and actual minutes, how it ended, its tap, restart and pause counts, and timings such as how long you paused and when you first and last used its controls), the resets you took or skipped (including their names and planned and actual minutes), the soundscape you started with, and a snapshot of the tasks and resets you planned; the detailed event timelines and the settings snapshots are not synced, though like the rest of the app's data they can be included in an iCloud Backup if you have it on. None of it is shared with third parties. You can delete it via Settings → Delete All My Data, which clears your focus sessions, with their telemetry and plan snapshots, from that device, along with your banks, saved plans and custom reminders, and resets most settings. It may not remove the copy in your iCloud account. That copy sits in your private iCloud database, which only you can access, so we cannot see, reach, or delete it. To be sure no copy stays in iCloud, delete Ebbi's data in Apple's settings, as Section 11 explains. If you would like help with those steps, email support@ebbi.app.
Calendar events. Ebbi can add sessions you schedule for later to your own calendar. On iPhone and iPad, when you schedule a session for later, the "Also add to Calendar" switch starts on unless calendar access for Ebbi is turned off; if you allow calendar access, Ebbi adds the session as an event to a calendar named "Ebbi" that it creates among your calendars, which may be kept only on your device or in iCloud or another calendar account, depending on how your calendars are set up. On Android, Ebbi adds scheduled sessions to your calendar only if you turn on "Add scheduled sessions to your calendar" in Ebbi's settings and also allow Ebbi calendar access in your phone's settings; the event goes to the first visible calendar on your phone that Ebbi is allowed to write to, trying the main calendar of each account first, such as your Google account's calendar, and unless you have turned off Plan reminders it carries an alert at your reminder time. Each event's title starts with "Ebbi" and shows the session's name, or its first task's name if the session has none, and its notes hold only a link back to that session in Ebbi. Ebbi uses calendar access only to read your list of calendars (and, on iPhone and iPad, your calendar accounts) so it can find, or on iPhone and iPad create, the calendar it adds events to, to add, change, or remove its own events, and, in Ebbi 1.2.1 and later on iPhone and iPad when you use Delete All My Data, to look through the "Ebbi" calendar for its own events and to remove that calendar if Ebbi created it and nothing else is left in it; apart from its own events, it does not read events in your other calendars. Ebbi removes an event when you cancel its session in Ebbi, and, in Ebbi 1.2.1 and later on iPhone and iPad, when Ebbi cancels a scheduled session because a Pro plan or Pro trial ended, but some events can stay behind, such as those for sessions that have already passed, those cancelled that way by earlier iPhone versions, or, on iPhone and iPad, if Ebbi no longer has full calendar access. Deleting the app does not remove events Ebbi has already added. In Ebbi 1.2.1 and later on iPhone and iPad, Delete All My Data also removes the events Ebbi added and the "Ebbi" calendar, if Ebbi created it and nothing else is left in it, when Ebbi has full calendar access; without that access, in earlier versions, and on Android, it leaves them, so delete any you do not want in your calendar app (on iPhone and iPad, deleting the "Ebbi" calendar removes them all). These events live in the calendar Ebbi added them to and in any calendar account it syncs with, where anyone who can see that calendar can see their titles. We never receive them.
Future features. We may, in the future, introduce new capabilities such as expanded cross-device sync, optional sharing of plans or sessions, additional platforms beyond iOS, or aggregate analytics. Some of these features may involve transmitting content to or storing content on infrastructure operated by us or our service providers. If we introduce any feature that changes the way your content is stored or transmitted as described above, we will update this policy and notify you in-app before the change takes effect. Where the law requires your consent for the new processing, we will obtain it before the change applies to you.
We also do not collect:
Ebbi uses two third-party services for anonymized diagnostics and stability reporting. We disclose both here so you know exactly what reaches third parties. Neither receives your tasks, lists, notes, schedules, or email address.
You can disable product usage signals to TelemetryDeck at any time in the app's Settings (the "Share usage data" toggle). Crash reports continue to be collected so the app can be repaired. Neither service includes behavioral advertising or any cross-app tracking.
Consent in the EU, EEA, and UK. If your device region is in the European Union, the European Economic Area, or the United Kingdom, the Ebbi iOS app asks for your consent before either of these two tools (TelemetryDeck analytics and Firebase Crashlytics crash reporting) starts. Until you agree, neither tool initializes and neither sends anything. This is because EU, EEA, and UK ePrivacy law (Article 5(3) of the ePrivacy Directive 2002/58/EC and the national laws that implement it, such as the UK Privacy and Electronic Communications Regulations and Germany's TDDDG) requires your prior consent before an app stores or reads information on your device for purposes that are not strictly necessary, and a "legitimate interest" basis cannot replace that consent. You can change your choice at any time in the app's Settings. The Android app contains neither tool, so this consent screen does not appear on Android; the next paragraph describes the diagnostics that Google Play's billing library sends from the Android app.
On Android devices: Ebbi does not use TelemetryDeck, Firebase Crashlytics, or any analytics or crash-reporting service of its own, so the diagnostics described above apply to Apple devices only. Google Play's billing library, which the Android app needs to handle purchases, does send its own diagnostics to Google: how its requests to Google Play went (such as whether they succeeded or failed) and any problems connecting to Google Play. Google's reporting library attaches basic device and connection details to these reports (such as the phone model, Android version and build, language and country settings, time zone, mobile network, and connection type) and Ebbi's version, and Google sees the IP address a report comes from. Google receives this data directly, encrypted in transit, and uses it under its own terms and the Google Privacy Policy to improve the billing library and support errors; Google keeps it under its own retention rules, and we do not receive it. It never includes your tasks, your lists, or anything you type. These reports do not depend on the choices described above for Apple devices, and the Android app has no switch for them.
Ebbi uses a Cloudflare Workers backend operated by The Forge Hut to deliver Live Activity updates (the rich Dynamic Island and Lock Screen indicators that show your current task and timer) and to receive anonymous aggregate counters about session lifecycle events. We disclose both flows here so you know exactly what reaches our infrastructure.
Live Activity push delivery. When you start a focus session and your iOS version supports Live Activities, your device generates a Live Activity push token (an opaque Apple Push Notification service token scoped to Ebbi and rotated by iOS) and registers it with our Cloudflare Worker along with the session's planned schedule boundaries, a randomly-generated session ID, your iOS version, and a random install identifier that stays the same across your sessions on that install. The Worker uses Apple's Push Notification service to deliver an update at each task and reset transition so the Live Activity stays accurate even when the app is suspended. The push token is not your Apple Account, not your email address, and cannot be used to identify you outside of routing Live Activity updates back to your device. The session ID and the install identifier are generated on your device, are not linked to any other user-identifying information, and are erased with the rest of the record, as described below.
The task label. So the Live Activity can show which task is running, each scheduled update carries the label of your current and next task, as you typed it. That label becomes the title of the notification, so it passes through Apple's Push Notification service the way the text of any notification does. The Worker holds each update only until that update is sent: the copy is deleted the moment its notification is delivered. If you pause, the labels still waiting to be sent are cleared right then. If you skip, extend, or edit the session, they are replaced with the updated ones. When you end a session with End or Discard, the app asks the Worker to erase the whole record right away, including the push token and anything not yet sent. Finishing a session early does the same, in the current version of the app, whenever your phone can reach our server at that moment. In every other case, including a session that finishes exactly on time, or the app being closed or crashing, the record erases itself automatically no later than 10 minutes after the session's last scheduled update, or, if the session was paused, no later than 8 hours after the app last updated it (iOS ends every Live Activity within 8 hours of starting it). Free sessions are never registered, so we keep no record of them; older versions of the app may still send their schedule changes, including those task labels, and we discard them without storing them. The Worker keeps no history of your tasks, builds no profile, and nothing from the session survives it. The anonymous counters described below are separate.
The Cloudflare Worker that handles both flows runs on Cloudflare's global edge network. Apart from the task label described above, which is used as the title of the notification and deleted as soon as that update is sent, the Worker holds no content from your tasks, lists, notes, or schedules. The only other session data it holds is the timestamp list for the upcoming Live Activity boundaries of an active session, discarded as described above.
On Android devices: Ebbi does not use Live Activities or the Cloudflare Workers backend described in this section. The Android home screen widget is rendered entirely on the device from local data; Ebbi sends no push tokens, schedule boundaries, session IDs, or session telemetry to any server. The flows described in this section apply to Apple devices only.
If you submitted your email address to join the Ebbi email list, contacted us for support, or sent feedback from within the app and optionally provided an email address so we could reply, we store your email address for those purposes only. Providing an email address with in-app feedback is optional; we will not add it to any marketing list without your separate consent. Email List submission is voluntary and consent-based. You can withdraw consent and request deletion at any time (see Section 11).
When you submit feedback through the Send Feedback screen in the Ebbi app, we receive:
Your feedback message is not stored in a searchable database or analytics system. It is relayed via email infrastructure to our support inbox, where it is retained until you or we delete it. You may request deletion of any feedback you have sent us at any time (see Section 11).
When you purchase an Ebbi subscription through the Apple App Store or Google Play Store, the payment transaction is handled entirely by Apple or Google. We receive only a transaction receipt and basic subscription status (active, expired, cancelled, in trial) sufficient to unlock app features. We do not receive or store your payment card details, billing address, or full purchase history. Apple's and Google's own privacy policies govern their handling of your payment data.
Subscription verification through RevenueCat. On both Apple and Android devices, Ebbi uses RevenueCat (operated by RevenueCat, Inc., United States) to verify your subscription status with the app store and determine whether Pro features should unlock. RevenueCat receives the app store purchase token, an anonymized RevenueCat app-user identifier generated on your device (not your Apple Account, Google account, or email address), device identifiers, and your IP address, used solely to validate the subscription. RevenueCat does not receive your tasks, lists, notes, schedules, or email address, and acts as our data processor. See the RevenueCat Privacy Policy.
Under the CPRA, "sensitive personal information" includes information concerning a consumer's health. Ebbi is positioned as a general-wellness productivity tool and is not a medical device. We do not knowingly collect sensitive personal information as that term is defined in Cal. Civ. Code § 1798.140(ae). The ADHD-related content you create inside Ebbi is stored on your device, and the subset described in Section 2.1 is synced through your own iCloud account when you are signed in; apart from the Live Activity task label described in Section 2.2.1, which our delivery service deletes as soon as that update is sent, none of it is transmitted to or stored by The Forge Hut. Because we do not collect sensitive personal information, there is no "Limit the Use of My Sensitive Personal Information" choice to offer; if that changes, we will update this policy and provide a mechanism. For the European Union, EEA, UK, and Switzerland, see Section 10.5 for our position on special-category data under Article 9 of the GDPR.
We use the data we collect for the following purposes only:
We do not use your data for profiling, automated decision-making producing legal or similarly significant effects, cross-context behavioral advertising, or any purpose not listed above.
We process personal data on the following bases, which align with the core concepts used by the privacy laws of the jurisdictions where Ebbi is offered:
If you are in the EU, the EEA, the UK, or Switzerland, Section 10.2 maps each processing purpose to its specific lawful basis under Article 6(1) of the GDPR and UK GDPR, including the point that in these regions the analytics and crash-reporting tools run on the basis of your consent.
The following categories of recipients may process personal data on our behalf, each as a service provider or data processor under applicable law (including the CCPA/CPRA, the GDPR, and the privacy laws of the other jurisdictions where Ebbi is offered). We have the contractual agreements required by applicable law with each. The one exception is the diagnostics that Google Play's billing library sends from the Android app (Section 2.2): Google receives those directly and uses them under its own terms.
Platform note: TelemetryDeck (Section 5.3), Firebase Crashlytics (operated by Google, Section 5.2), and the Live Activity and aggregate-telemetry Cloudflare Workers backend (Section 5.4) currently apply to Apple devices only. On Android devices, Ebbi does not use an analytics or crash-reporting SDK of its own, or that Cloudflare app backend; the recipients that apply on Android are Google (Google Play billing, and the diagnostics its billing library sends, Section 2.2), Cloudflare (website hosting and the in-app feedback endpoint), RevenueCat (subscription verification, Section 5.7), and our email delivery provider.
App distribution and subscription billing for iOS users is handled by Apple, Inc. Apple's data practices are governed by the Apple Privacy Policy. For personal data of individuals in the EEA, the UK, and Switzerland, Apple states that it acts through Apple Distribution International Limited in Ireland and governs its international transfers by Standard Contractual Clauses, which Apple publishes on its legal site; Apple does not rely on the EU-U.S. Data Privacy Framework.
App distribution and subscription billing for Android users is handled by Google, LLC, whose data practices are governed by the Google Privacy Policy. Google also operates Firebase Crashlytics (see Section 2.2). On Android, Google also receives the diagnostics that Google Play's billing library sends from the app (see Section 2.2). Google is certified under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework.
See Section 2.2. TelemetryDeck is based in Germany and processes data on servers in the European Union. See the TelemetryDeck Privacy Policy.
The ebbi.app website is served by Cloudflare Pages. The Ebbi iOS app's Live Activity push delivery and anonymous aggregate telemetry are handled by a Cloudflare Workers backend operated by The Forge Hut on Cloudflare's global edge network (see Section 2.2.1 for what each flow transmits). Cloudflare processes server logs, caches static content, and provides the edge runtime for our Workers. Cloudflare is certified under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework. See the Cloudflare Privacy Policy.
Outbound email from Ebbi, including email list confirmations, in-app feedback relays, and support replies, is delivered through a third-party email delivery service that acts as a data processor on our behalf. That provider is located in the United States and is certified under the EU-U.S. Data Privacy Framework and the UK Extension; for transfers from Switzerland, it relies on Standard Contractual Clauses. The provider processes message content and recipient addresses solely to deliver messages on our behalf and does not use that data for its own purposes. Your email address is not shared with any third-party email marketing service or advertiser.
The categories of third parties that may receive personal information: analytics service providers (TelemetryDeck), crash reporting service providers (Firebase / Google), platform providers (Apple, Google Play, and Google for the diagnostics its billing library sends from the Android app), infrastructure providers (Cloudflare), and email delivery service providers. We do not disclose personal information to third parties for their own advertising or marketing purposes, and we do not engage in cross-context behavioral advertising.
On both Apple and Android devices, your subscription status is verified through RevenueCat, Inc. (United States). See Section 2.5 for the specific data RevenueCat receives and does not receive. RevenueCat acts as our data processor and processes data in the United States under Standard Contractual Clauses (with the UK International Data Transfer Addendum and the Swiss amendments); it is not a Data Privacy Framework participant. See the RevenueCat Privacy Policy.
We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law.
If you are a resident of a U.S. state with a comprehensive consumer privacy law (including but not limited to California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Kentucky, Rhode Island, New Hampshire, New Jersey, Delaware, Maryland, Minnesota, Nebraska, and Florida), you may have one or more of the following rights, depending on your state of residence.
California residents have each of the rights above, plus the right to limit the use and disclosure of sensitive personal information (not applicable here because we do not collect sensitive personal information; see Section 2.6). We do not sell or share personal information as those terms are defined in Cal. Civ. Code § 1798.140. We have not sold personal information in the preceding 12 months.
The Texas Data Privacy and Security Act applies to any business targeting Texas residents, without a revenue threshold. Texas residents have the access, delete, correct, portability, and opt-out rights listed above.
Several states (including Virginia, Colorado, Connecticut, Oregon, and New Jersey) require affirmative opt-in consent before processing sensitive personal data, which some laws define to include information about physical or mental health. Ebbi's focus and task data is stored on your device, and the subset described in Section 2.1 is synced through your own iCloud account when you are signed in; The Forge Hut does not collect, transmit, or process this content on its own infrastructure, apart from the Live Activity task label described in Section 2.2.1, which our delivery service deletes as soon as that update is sent. Beyond that label, we do not process sensitive personal data of this kind. If a future feature changes how this content is processed, we will update this policy and obtain any required consents before the change applies to you.
To exercise any state privacy right, email support@ebbi.app with "State Privacy Request" in the subject line and identify your state of residence. We respond to verified requests within 45 days (or the shorter period required by your state). We may need to verify your identity before fulfilling the request. An authorized agent may submit a request on your behalf with written authorization.
If you are a resident of Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you reside in Quebec, the Act to modernize legislative provisions as regards the protection of personal information ("Law 25"), may apply to our processing of your personal data.
You may also file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Quebec residents, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).
Ebbi is offered in Apple App Store and Google Play territories worldwide except China and Russia (see Section 1). If you are in the European Union, the EEA, the United Kingdom, or Switzerland, please see Section 10, which is written specifically for you. Many other territories have their own consumer privacy laws. We honor the following core rights for residents of those jurisdictions, to the extent those rights are granted by applicable local law:
Specific notes for certain jurisdictions:
For any other jurisdiction where Ebbi is offered and local law grants privacy rights, we will honor those rights on request. To exercise any of these rights, email support@ebbi.app with your country of residence in the subject line. We will respond within 30 days or within the shorter period required by your local law.
If you are located in the European Union, the European Economic Area (EEA), the United Kingdom, or Switzerland, this section applies to you. Because The Forge Hut, LLC offers Ebbi and its website to people in these regions, we act as the data controller and are subject to the EU General Data Protection Regulation (GDPR) and the UK GDPR under Article 3(2), and to the Swiss Federal Act on Data Protection (FADP), even though we are established in the United States. The rights and disclosures below are in addition to the general disclosures in Sections 2 through 6.
The data controller is The Forge Hut, LLC, Auburn, Kansas, United States, support@ebbi.app. Because we are not established in the EU, the EEA, the UK, or Switzerland, we have appointed a representative under Article 27 of the GDPR, Article 27 of the UK GDPR, and Article 14 of the Swiss FADP. Our representative is DataRep. You may contact DataRep on any matter relating to our processing of your personal data, and DataRep can be addressed in the official language of your country or in English.
Our Data Protection Representative: DataRep
EU and UK (registered): Data Protection Representative Limited (trading as DataRep), 77 Camden Street Lower, Dublin, D02 XE80, Ireland.
United Kingdom: DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom.
Switzerland: DataRep, Leutschenbachstrasse 95, 8050 Zurich, Switzerland.
To raise a question or exercise your rights, you may email DataRep at datarequest@datarep.com quoting "Ebbi" in the subject line, or use the webform at www.datarep.com/data-request. DataRep also maintains a postal address in every EU member state, the EEA, the UK, and Switzerland. If you write by post, it is essential that you mark your letter for "DataRep" and not "Ebbi", or it may not reach them.
We process your personal data on the following lawful bases under Article 6(1) of the GDPR and UK GDPR (and the corresponding provisions of the Swiss FADP):
Under the GDPR, the UK GDPR, and the Swiss FADP you have the right to:
To exercise any of these rights, email support@ebbi.app or contact our representative DataRep (see Section 10.1). We respond within one month, and will tell you if we need to extend that period because the request is complex.
Right to complain. You also have the right to lodge a complaint with your own supervisory authority. In the EU or EEA, this is the data protection authority of the country where you live or work, or where the issue arose; you can find your authority through the European Data Protection Board. In the United Kingdom, it is the Information Commissioner's Office (ICO). In Switzerland, it is the Federal Data Protection and Information Commissioner (FDPIC).
We do not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
Ebbi is a general-wellness focus and planning tool designed with ADHD-informed principles; it is not a medical device. We do not intentionally process special-category data concerning health under Article 9 of the GDPR. The ADHD-related content you create in Ebbi stays on your device and in your own accounts (on Apple devices, your iCloud account, including any iCloud Backup; on Android, any backup Android makes to your Google account; and on either platform, your calendar account, for any session Ebbi adds to your calendar); apart from the Live Activity task label described in Section 2.2.1, which our delivery service deletes as soon as that update is sent, it is never transmitted to, seen by, or accessible to us, so we do not process it. The limited account data we do hold (your email address and, where applicable, your subscription status and anonymized diagnostics) is not used to reveal or infer any health condition. We are aware that the Court of Justice of the European Union has read "data concerning health" broadly, to include data from which a health condition could be inferred (Case C-184/20). Consistent with that, we minimize the data we hold, do not use it to infer or record a health condition, and rely on the on-device architecture and precautionary safeguards described in this policy. If we ever introduce a feature that links health-related content to an account on our own systems, we will obtain your explicit consent under Article 9(2)(a) before that change applies to you.
See Section 13 for how we protect personal data connected with the EU, the EEA, the UK, or Switzerland. In short, data we collect directly from you in these regions is processed by us under Article 3(2) of the GDPR rather than exported by a separate exporter, and any onward disclosure to a United States service provider is protected by that provider's Data Privacy Framework certification or by Standard Contractual Clauses, as detailed in Section 13.
Deleting the Ebbi app from your device removes what Ebbi stores in the app on that device. It does not remove events Ebbi added to your calendar (see Section 2.1), which stay in your calendar until you delete them there; on iPhone and iPad, deleting the "Ebbi" calendar removes them all. On iPhone and iPad, a small trial record also stays in your device's keychain after you delete the app, marking that device's Pro trial as used so reinstalling does not restart it; it holds none of your content. The app's Settings screen also includes a "Delete All My Data" option that, without uninstalling, clears your focus sessions (with their telemetry and plan snapshots), your banks, saved plans and custom reminders from that device, and resets most settings. In Ebbi 1.2.1 and later on iPhone and iPad, it also removes the events Ebbi added to your calendar, and the "Ebbi" calendar if Ebbi created it and it is otherwise empty, when Ebbi has full calendar access (see Section 2.1); in earlier versions, on Android, or without that access, it leaves them. When you are signed in to iCloud, your focus sessions, their telemetry and snapshots of the plans you ran or scheduled also sync to your private iCloud database, and if you use iCloud Backup, your device's backup can include Ebbi's other app data. Delete All My Data may not remove the synced copy in iCloud, and only you can access your private iCloud database: we cannot see, reach, or delete it. To be sure no copy stays in iCloud, open Settings → [your name] → iCloud, then tap Storage or Manage Account Storage. There Apple shows each app's iCloud storage and lets you delete many apps' data; for the backup copy, tap Backups, choose your device, and turn Ebbi off, which Apple says removes that app's backup information from iCloud. If you would like help with those steps, email support@ebbi.app. Apple's iCloud retention is governed by Apple's privacy policy. Because The Forge Hut does not store this content on its own infrastructure, there is nothing on our end to delete, apart from the record of a running Live Activity session (Section 2.2.1), which Delete All My Data erases in Ebbi 1.2.1 and later and which otherwise erases itself on the schedule described there.
To have your email address removed from our email list, you can:
We will process your request and permanently delete your email address within 30 days. We will confirm deletion by email before removing your address.
Subscription records retained for tax and accounting purposes (see Section 6) will be deleted at the end of the applicable retention period. Earlier deletion is subject to legal recordkeeping obligations.
Ebbi is not directed to and is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information as soon as reasonably practicable.
If you believe that a child under 13 has provided us with personal information, please contact support@ebbi.app.
The Children's Online Privacy Protection Act (COPPA) applies to operators of commercial websites and online services directed to children under 13. It does not require parental consent for users aged 13 and older. We do not impose an age gate for users 13 and older; the product does not collect personal information that would make such a gate legally required. U.S. state-level laws protecting minors aged 13 through 17 may apply in some states; where applicable, we will honor the rights and protections those laws provide.
EU, EEA, and UK. Where the GDPR or UK GDPR applies, the age at which a child can consent on their own to online services (the "digital age of consent") is set by each country at somewhere between 13 and 16 under Article 8 of the GDPR. Ebbi is intended for users at or above the applicable age in their country. Where a user is below that age, any consent must be given or authorized by a holder of parental responsibility, and we do not knowingly process the personal data of children below the applicable age without it.
The Forge Hut, LLC is based in the United States. Personal data we process may be transferred to, stored, or processed in the United States, the European Union (where TelemetryDeck's servers are located), or other jurisdictions where our service providers operate. Apple, Google, and Cloudflare operate globally and may process data in any of their data-center regions.
By submitting your email address or using Ebbi, you acknowledge that your data may be transferred to and processed in the United States and other jurisdictions as described above. Where applicable law in your country of residence requires specific transfer mechanisms, we rely on lawful mechanisms such as our service providers' certifications or contractual commitments.
EU, EEA, UK, and Switzerland. The Forge Hut, LLC is established in the United States and is subject to the GDPR and UK GDPR under Article 3(2). Personal data we collect directly from you in the EU, the EEA, the UK, or Switzerland is processed by us on that basis; because there is no separate EU, UK, or Swiss exporter distinct from us, this direct collection is not a "restricted transfer" under Chapter V of the GDPR (consistent with European Data Protection Board Guidelines 05/2021). Where we use United States service providers to process this data on our behalf, each onward disclosure is protected by an appropriate safeguard:
You can request more information about these safeguards, or a copy of the relevant Standard Contractual Clauses, by emailing support@ebbi.app or contacting our representative (see Section 10.1).
Global Privacy Control (GPC) is a browser-level signal that allows consumers to opt out of the sale and sharing of their personal information. Our website at ebbi.app is designed not to sell or share personal information for cross-context behavioral advertising in the first place, so there is nothing for a GPC signal to opt you out of. If that ever changes, we will honor GPC signals as required by California law and by any other state that adopts an equivalent requirement.
We take the security of your data seriously. Our email infrastructure is maintained with industry-standard security practices, including:
App content (tasks, lists, settings) is stored on your device. Your focus sessions, their telemetry, and snapshots of plans you ran or scheduled also sync through Apple's iCloud service when you are signed in. Your focus data is therefore protected by the security features of your operating system and, for the synced subset, Apple's iCloud security architecture. We encourage you to use a strong device passcode or biometric lock and to enable two-factor authentication on your Apple Account.
No method of transmission or storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately at support@ebbi.app.
We may update this Privacy Policy from time to time as our practices evolve or as required by law. When we make changes, we will update the "Last updated" date at the top of this page.
For material changes (changes that significantly affect your rights or how we handle your data), we will notify email list subscribers by email before the changes take effect. We encourage you to review this page periodically.
Your continued use of Ebbi after a policy update constitutes your acceptance of the revised policy, except where additional consent is required by law.
This Privacy Policy is available in several languages. If the versions differ, the reading that is more favorable to you applies.
If you have questions, concerns, or requests related to this Privacy Policy or how we handle your personal data, please reach out:
The Forge Hut, LLC
Auburn, Kansas, United States
Email: support@ebbi.app
Website: ebbi.app
If you are in the EU, the EEA, the UK, or Switzerland, you may also contact our data protection representative, DataRep, on any matter relating to our processing of your personal data. Their contact details are in Section 10.1. When writing to DataRep by post, please mark your letter for "DataRep", not "Ebbi".
We aim to respond to all privacy-related inquiries within 5 business days, and to fulfill verified data-rights requests within 30 days (or 45 days for California residents, with an extension where permitted by statute).
Download Ebbi for iPhone or Android. Or join the focus-tips list.
Focus tips & feature news