Privacy Policy

Effective: May 1, 2026

1. Introduction

Webb Labs Ltd. ("we", "us", "our") operates the Eve mobile application and the website at helloeve.org (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

2. Information We Collect

Account Data: When you create an account, we collect your email address and authentication credentials. If you sign in via Google or Apple, we receive your name and email from the provider.

Usage Data: We collect anonymous analytics events (e.g., screens viewed, features used) to improve the Service. Analytics are processed by our first-party analytics system and are not shared with third-party ad networks.

Health & Cycle Data: Period dates, symptoms, moods, fertility indicators, and other wellness data you log in the app. See the dedicated Health Data section below for full details.

Device Data: Device type, OS version, app version, and locale for crash reporting and compatibility.

Payment Data: Payments are processed by Stripe, Apple, or Google. We do not store credit card numbers. We receive subscription status and transaction identifiers only.

3. Health Data Collection & Usage

Sensitive Data

Eve accesses and collects sensitive health-related data to provide its core cycle-tracking and wellness features. We treat all Health Data with the highest level of care and transparency.

Health Data We Access & Collect

  • Menstrual Cycle Data: Period start and end dates, cycle length, flow intensity, and historical cycle patterns that you log within the app.
  • Symptoms & Moods: Physical symptoms (e.g., cramps, headaches, bloating), emotional states, energy levels, and other wellness indicators you record.
  • Apple Health (HealthKit) Data: When you explicitly grant permission, Eve may read and/or write: menstrual flow, basal body temperature, cervical mucus quality, ovulation test results, sexual activity, sleep analysis, and heart rate. Eve only accesses HealthKit data categories you individually authorize.
  • Reproductive Health Indicators: Fertility window estimates, ovulation predictions, and related reproductive health markers derived from your logged data.

How We Use Health Data

Your Health Data is used exclusively for the following purposes:

  • Cycle Predictions & Insights: To generate personalized cycle predictions, fertility window estimates, and wellness insights based on your logged data.
  • Symptom Tracking & Patterns: To identify trends in your symptoms and moods across cycles and present them in reports and charts.
  • Apple Health Sync: To read data from and write data to Apple Health so your health information stays consistent across apps, only when you have granted explicit permission.
  • Personalized Notifications: To send timely reminders about upcoming periods, fertile windows, or symptom-logging prompts (only if you opt in).
  • Service Improvement: Aggregated and de-identified Health Data may be used to improve prediction algorithms. Individual Health Data is never used for this purpose without de-identification.

Health Data Protections

  • Health Data is never sold to third parties.
  • Health Data is never used for advertising or marketing purposes.
  • Health Data is never shared with third parties for their own purposes, except as required by law.
  • Health Data is encrypted in transit (TLS) and at rest (AES-256).
  • Access to Health Data on our servers is restricted to essential service operations only.
  • When you use Anonymous Mode, Health Data is stored locally on your device and is never transmitted to our servers.
  • You may revoke Apple Health permissions at any time through Settings > Health > Data Access & Devices.

4. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process subscriptions and payments
  • Send transactional emails (e.g., receipts, password resets)
  • Send push notifications (only if you opt in)
  • Detect and prevent fraud and abuse
  • Comply with legal obligations

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Supabase — database hosting and authentication
  • Stripe — payment processing
  • Firebase — push notifications and crash reporting

Each provider processes data under their own privacy policies and our data processing agreements.

6. Provider Data & Patient Interactions

For Eve provider accounts, we process additional business and professional profile data, including provider verification details, specialties, availability, booking metadata, service configuration, and operational analytics.

When users interact with providers, we may process consultation-related metadata, secure messaging metadata, appointment records, and limited interaction logs needed to operate, secure, and improve provider services.

Providers act as independent data controllers for the clinical or professional services they deliver. Webb Labs Ltd. acts as the platform operator and processes data to provide infrastructure, account management, billing, fraud prevention, and service reliability.

7. Data Retention

Account data is retained while your account is active. Cycle and health data is retained for up to 2 years after last use. You may delete your account and all associated data at any time from the app.

8. Account Deletion

You have the right to delete your account and all associated data at any time. To delete your account:

  1. Open the Eve app
  2. Go to Settings
  3. Tap on Privacy
  4. Select "Delete Account"
  5. Follow the confirmation steps

When you delete your account:

  • All your personal data will be permanently deleted from our servers
  • All health data and cycle tracking information will be removed
  • Your account will be immediately deactivated
  • This action is permanent and cannot be undone

Alternative: If you're concerned about privacy but want to keep your data, consider using Anonymous Mode. This allows you to continue using the app while keeping your data local to your device.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You can exercise these rights from the app (Settings → Privacy) or by emailing privacy@helloeve.org.

EU/EEA (GDPR): You have rights including data portability, restriction of processing, and the right to lodge a complaint with a supervisory authority.

California (CCPA): You have the right to know, delete, and opt out of sale of your personal information. We do not sell personal data.

10. Security

We use industry-standard measures including TLS encryption in transit, AES-256 encryption at rest for sensitive data, row-level security in our database, and regular security audits.

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 13, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use of the Service after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: privacy@helloeve.org

Webb Labs Ltd., United States