Skip to main content
← Back to inEden

Consumer Health Data Privacy Policy

Last updated: 2026-07-03

inEden — Consumer Health Data Privacy Policy

Version: 2026-08-06 Effective Date: May 17, 2026 Last Updated: August 6, 2026

This Consumer Health Data Privacy Policy is a separate, dedicated policy that explains how Rose Global LLC d/b/a In Eden ("inEden," "we," "us") collects, uses, and protects consumer health data — including cycle and hormone-health information. We provide it separately to comply with Washington's My Health My Data Act (MHMDA), Nevada SB370, and equivalent laws, and it supplements our general Privacy Policy. For users in the EEA/UK, this data is "special category" health data under Article 9 GDPR and we process it only with your explicit consent.

1. What consumer health data we collect

Only what you choose to log, and only what's needed to show your phase guidance:

  • Cycle logs — the first day of each cycle you log (a single date).
  • Derived phase information — your current phase, day count, and cycle length, computed on demand from your logs (not separately stored).
  • The in-app cycle-phase tool runs entirely on your device; we never receive the values you enter into it.

inEden does not offer pregnancy, fertility, or conception tools, and we do not collect clinical records, lab results, diagnoses, or data from connected health devices. This build does not read or write Apple Health / HealthKit (see Section 3).

2. How we use it

Solely to display your personalized cycle phase and related wellness guidance inside the app. That's it. These features are informational only and are not medical advice.

3. Workouts and Apple Health (HealthKit)

This build does not use HealthKit. Move workouts on iOS use an in-app timer only. There is no “Save workouts to Apple Health” Settings toggle, and the app does not request HealthKit permissions or include HealthKit usage strings.

  • We do not write workouts to Apple Health.
  • We do not read heart rate, energy, distance, or any other HealthKit data.
  • If a future version adds optional HealthKit support, we will update this policy, request permission at the moment of use, and keep HealthKit data on-device unless you later consent otherwise.

4. Consent

We collect cycle data only after you give explicit, affirmative consent — the first time you log a cycle, we ask you to opt in, link this policy, and we record your consent timestamp. Optional Nourish calculator targets require separate consent. You can decline and still use the rest of inEden. You may withdraw consent and delete this data at any time (Section 8). We will obtain separate, additional consent before ever sharing consumer health data, and before introducing any future AI hormone-health feature (which will be opt-in and clearly disclosed).

5. We never sell or share it

  • We do not sell, lease, trade, or rent your consumer health data — to anyone, ever.
  • We do not share it with advertisers, ad networks, data brokers, or marketing partners.
  • We do not use it to target advertising. inEden may run general onboarding or app-download advertisements in the future, but we will never use your consumer health data or other personal information to target ads to you.
  • We do not feed it into any AI training set.
  • There is no partner-sync or shared-cycle feature — no one else inside inEden can see your cycle.
  • We disclose it only to the infrastructure providers strictly necessary to operate the Service (our database host), under contract, in encrypted form, and only in response to a valid, narrowly-scoped legal process — which we will challenge where overbroad and lawful to do so.

6. How we protect it

  • Encrypted in transit (TLS 1.2+) and at rest (AES-256) on managed Postgres hosted in the European Union.
  • Row-Level Security at the database — even our own engineers cannot read your cycle data without a support workflow you initiate.
  • We are not a HIPAA-covered entity and do not hold ourselves out as a healthcare provider.

7. How long we keep it

Cycle logs are kept while your account is active so we can render your guidance. On deletion (account or cycle-only), they are deleted within 30 days with no derivative analytics, no aggregated retention, and no copy in any AI training set. Encrypted backups roll off within 60 days.

8. Your rights and controls

  • Delete cycle data only (keep your account): Settings → Privacy & Safety → Cycle data, or email support@ineden.app with subject "Delete cycle data only."
  • Delete everything: Settings → Account → Delete My Data.
  • Access/export: request a copy via support@ineden.app.
  • Withdraw consent at any time.
  • Washington, Nevada, EEA, and UK residents have specific statutory rights regarding consumer/special-category health data, which we honor. To appeal a decision or complain, contact support@ineden.app; you may also contact your local regulator.

9. Contact

Rose Global LLC d/b/a In Eden — support@ineden.app Postal: Rose Global LLC, 4195 S Pack Saddle, Flagstaff, AZ 86005, United States, Attn: Privacy

Your cycle is yours. We built inEden so the most personal data we hold is also the most protected.