Privacy Policy
Last updated: November 4, 2026
In short
What you log in Ebb stays on your iPhone. You don’t need an account. We don’t have a server that receives your entries, and we don’t sell, share or look at your health information.
Who we are
Ebb is made by OnRecord Limited (NZBN 9429054001206), with its registered office at 650 Pukehina Parade, RD 9, Pukehina 3189, New Zealand (“we”, “us”). We are responsible for this policy and for any personal information we hold about you.
Privacy contact: James Rangihika, privacy officer, support@ebbhealth.app
Your health information
Everything you log in Ebb, including symptoms, your Cycle, HRT, medicines, supplements, blood test results, notes and reports, is stored only on your iPhone. We don’t receive it.
This is health information, which data protection law treats as specially protected. In the EU and UK it is “special category data” under the GDPR and UK GDPR. Because it stays on your device and never reaches us, we don’t process it, and it stays under your control.
Blood test results: you can add results from a photo, screenshot, PDF or image. Ebb reads it on your iPhone with Apple’s Vision framework. The original isn’t saved; only the rows you confirm (name, value, unit, range and date) are stored, and you can edit them.
What we collect
Nothing, through the app. Ebb has no analytics, advertising or tracking, and no third-party code: it’s built only with Apple’s own frameworks, it makes no network connections of its own, and subscriptions use Apple’s StoreKit with no third-party subscription service. This matches Ebb’s “Data Not Collected” label on the App Store and its privacy manifest, which declares no tracking and no data collected. We don’t use your information for advertising or data mining, and we don’t sell it.
The only link in the app goes to the source of Ebb’s symptom list on PubMed. Tapping it opens the PubMed website, where its own privacy policy applies.
Crash reports
If you’ve turned on Share with App Developers in your iPhone settings, Apple may send us crash and diagnostic reports. Apple controls this, and the reports aren’t linked to your identity. To turn it off: Settings > Privacy & Security > Analytics & Improvements. Ebb keeps health data out of its logs, so these reports don’t include what you log.
Payments
Subscriptions are bought and managed through Apple. We don’t receive your name, card details or Apple ID. Apple’s privacy policy applies to the purchase. Ebb uses Apple’s StoreKit for subscriptions and doesn’t use any third-party subscription service. If you don’t have an active subscription, your data stays on your iPhone: you can still view your logs and delete them, and we never delete or hold back your data.
Sharing your report
Your doctor report is made on your iPhone. It leaves your phone only when you share it through the iOS share sheet, using the method you pick, such as AirDrop, Mail, Files or print. The PDF is made in a temporary protected folder on your iPhone, which is cleared the next time you make a report. Once you send it, the recipient’s and the service’s own privacy terms apply.
Backups
Ebb doesn’t store your data in iCloud or sync it with CloudKit, and there’s no Ebb server. Ebb’s data file may be included in your iPhone’s or computer’s backup, which is controlled by you and Apple.
Support emails
If you email us, we keep your email address and message so we can reply, for 10 days. Please don’t send health details we don’t need. Email is hosted by Google.
Our website is hosted by Squarespace, which may process standard web data such as your IP address when you visit. The site uses necessary cookies so it works, and, only if you accept them in the cookie banner, Squarespace Analytics cookies that count unique visitors and visits. We don’t use cookies for advertising. See the Cookies notice
Deleting your data
In Ebb, go to Settings > Delete all my data, then confirm. This removes all of Ebb’s data from your iPhone. Deleting the app does the same, and you can also delete individual lab reports. A device backup made earlier may still contain Ebb’s data file until that backup is deleted. To have your support emails deleted, email support@ebbhealth.app.
Your rights
Depending on where you live, you can ask us for a copy of personal information we hold about you, ask us to correct or delete it, object to or limit how we use it, or ask for it in a portable format. Email support@ebbhealth.app. We’ll reply within the time the law where you live requires.
We hold very little: usually only support emails. Your health data isn’t with us, so you manage it yourself in the app.
You can also complain to your local regulator, such as a data protection authority in the EU, the Information Commissioner’s Office in the UK, the Office of the Australian Information Commissioner, or the Office of the Privacy Commissioner in New Zealand.
EU and UK
Where we do handle personal information, such as support emails, we rely on legitimate interests (answering you) under the GDPR and UK GDPR. We don’t process your health data, because it stays on your iPhone. If we ever wanted to, we’d ask for your explicit consent first.
United States
Consumer health data laws: Washington’s My Health My Data Act and similar laws in other states, such as Nevada and Connecticut, protect consumer health data. Ebb doesn’t collect, share or sell your consumer health data: it stays on your device. If that ever changes, we’ll publish a Consumer Health Data Privacy Policy and ask for your consent first.
California: if you live in California, you have rights under the California Consumer Privacy Act, including to know, delete and correct personal information and to opt out of its sale or sharing. We don’t sell or share personal information, and we don’t use sensitive personal information to infer anything about you.
Australia
We handle personal information in line with the Privacy Act 1988 and the Australian Privacy Principles. Complaints can go to us first, then to the Office of the Australian Information Commissioner (oaic.gov.au).
New Zealand
We handle personal information in line with the Privacy Act 2020 and its information privacy principles. If a privacy breach is likely to cause serious harm, we’ll tell you and the Privacy Commissioner. Complaints can go to us first, then to the Office of the Privacy Commissioner (privacy.org.nz).
Children
Ebb is for people aged 18 and over. We don’t knowingly collect information from anyone younger.
Changes
If this policy changes, we’ll update it here and in the app’s Privacy policy screen, and change the date at the top. If a change affects how your information is handled, we’ll explain it clearly here and in the app before it takes effect.
Contact
James Rangihika, privacy officer, OnRecord Limited, PO Box 559, Shortland Street, Auckland 1140, New Zealand. Email: support@ebbhealth.app