Skip to main content
← Back to inEden

Consumer Health Data Privacy Policy

Last updated: 2026-07-03

inEden — Consumer Health Data Privacy Policy

Version: 2026-07-03 Effective Date: May 17, 2026 Last Updated: July 3, 2026

This Consumer Health Data Privacy Policy is a separate, dedicated policy that explains how Rose Global LLC d/b/a In Eden ("inEden," "we," "us") collects, uses, and protects consumer health data — including cycle and hormone-health information. We provide it separately to comply with Washington's My Health My Data Act (MHMDA), Nevada SB370, and equivalent laws, and it supplements our general Privacy Policy. For users in the EEA/UK, this data is "special category" health data under Article 9 GDPR and we process it only with your explicit consent.

1. What consumer health data we collect

Only what you choose to log, and only what's needed to show your phase guidance:

  • Cycle logs — the first day of each cycle you log (a single date).
  • Derived phase information — your current phase, day count, and cycle length, computed on demand from your logs (not separately stored).
  • The in-app cycle-phase tool runs entirely on your device; we never receive the values you enter into it.

inEden does not offer pregnancy, fertility, or conception tools, and we do not collect clinical records, lab results, diagnoses, or data from connected health devices. If you turn on workout tracking, inEden writes workouts to Apple Health and reads basic in-session metrics (like heart rate) only to display them to you live — it does not send this data to us (see Section 3).

2. How we use it

Solely to display your personalized cycle phase and related wellness guidance inside the app. That's it. These features are informational only and are not medical advice.

3. Workouts and Apple Health (HealthKit)

If you turn on Save workouts to Apple Health (Settings → Privacy; off by default), inEden can record the workouts you track on the Move tab as workout sessions written to Apple Health on your device.

  • Write-only, to your device. We write completed workouts and, during a live session, read basic metrics such as heart rate, active energy, and distance solely to display them to you in the moment — through Apple's HealthKit. This data is stored by Apple Health on your device and governed by Apple's privacy terms.
  • We never receive it. inEden does not transmit, collect, or store your HealthKit workout or heart-rate data on our servers. It does not leave your device through us, and is never used for analytics, advertising, or AI training.
  • You control it two ways. Turn the inEden setting off at any time, and manage inEden's HealthKit permission directly in Apple's Settings → Health → Data Access & Devices. Revoking either stops new writes immediately.
  • Deleting inEden data does not delete Apple Health data. Workouts already written to Apple Health live in Apple Health; remove them there if you wish.

4. Consent

We collect cycle data only after you give explicit, affirmative consent — the first time you log a cycle, we ask you to opt in, link this policy, and we record your consent timestamp. Optional Nourish calculator targets require separate consent. You can decline and still use the rest of inEden. You may withdraw consent and delete this data at any time (Section 8). We will obtain separate, additional consent before ever sharing consumer health data, and before introducing any future AI hormone-health feature (which will be opt-in and clearly disclosed).

5. We never sell or share it

  • We do not sell, lease, trade, or rent your consumer health data — to anyone, ever.
  • We do not share it with advertisers, ad networks, data brokers, or marketing partners.
  • We do not use it to target advertising. inEden may run general onboarding or app-download advertisements in the future, but we will never use your consumer health data or other personal information to target ads to you.
  • We do not feed it into any AI training set.
  • There is no partner-sync or shared-cycle feature — no one else inside inEden can see your cycle.
  • We disclose it only to the infrastructure providers strictly necessary to operate the Service (our database host), under contract, in encrypted form, and only in response to a valid, narrowly-scoped legal process — which we will challenge where overbroad and lawful to do so.

6. How we protect it

  • Encrypted in transit (TLS 1.2+) and at rest (AES-256) on managed Postgres hosted in the European Union.
  • Row-Level Security at the database — even our own engineers cannot read your cycle data without a support workflow you initiate.
  • We are not a HIPAA-covered entity and do not hold ourselves out as a healthcare provider.

7. How long we keep it

Cycle logs are kept while your account is active so we can render your guidance. On deletion (account or cycle-only), they are deleted within 30 days with no derivative analytics, no aggregated retention, and no copy in any AI training set. Encrypted backups roll off within 60 days.

8. Your rights and controls

  • Delete cycle data only (keep your account): Settings → Privacy & Safety → Cycle data, or email support@ineden.app with subject "Delete cycle data only."
  • Delete everything: Settings → Account → Delete My Data.
  • Access/export: request a copy via support@ineden.app.
  • Withdraw consent at any time.
  • Washington, Nevada, EEA, and UK residents have specific statutory rights regarding consumer/special-category health data, which we honor. To appeal a decision or complain, contact support@ineden.app; you may also contact your local regulator.

9. Contact

Rose Global LLC d/b/a In Eden — support@ineden.app Postal: Rose Global LLC, 4195 S Pack Saddle, Flagstaff, AZ 86005, United States, Attn: Privacy

Your cycle is yours. We built inEden so the most personal data we hold is also the most protected.