In Eden — Consumer Health Data Privacy Policy

Version: 2026-05-22 Effective Date: May 17, 2026 Last Updated: May 22, 2026

This Consumer Health Data Privacy Policy is a separate, dedicated policy that explains how Rose Global LLC d/b/a In Eden ("In Eden," "we," "us") collects, uses, and protects consumer health data — including cycle and hormone-health information. We provide it separately to comply with Washington's My Health My Data Act (MHMDA), Nevada SB370, and equivalent laws, and it supplements our general Privacy Policy. For users in the EEA/UK, this data is "special category" health data under Article 9 GDPR and we process it only with your explicit consent.

1. What consumer health data we collect

Only what you choose to log, and only what's needed to show your phase guidance:

Cycle logs — the first day of each cycle you log (a single date).
Derived phase information — your current phase, day count, and cycle length, computed on demand from your logs (not separately stored).
The in-app cycle-phase tool runs entirely on your device; we never receive the values you enter into it.

In Eden does not offer pregnancy, fertility, or conception tools, and we do not collect clinical records, lab results, diagnoses, or data from connected health devices.

2. How we use it

Solely to display your personalized cycle phase and related wellness guidance inside the app. That's it. These features are informational only and are not medical advice.

3. Consent

We collect cycle data only after you give explicit, affirmative consent — the first time you log a cycle, we ask you to opt in and link this policy. You can decline and still use the rest of In Eden. You may withdraw consent and delete this data at any time (Section 7). We will obtain separate, additional consent before ever sharing consumer health data, and before introducing any future AI hormone-health feature (which will be opt-in and clearly disclosed).

4. We never sell or share it

We do not sell, lease, trade, or rent your consumer health data — to anyone, ever.
We do not share it with advertisers, ad networks, data brokers, or marketing partners.
We do not use it to target advertising (we don't run ads).
We do not feed it into any AI training set.
There is no partner-sync or shared-cycle feature — no one else inside In Eden can see your cycle.
We disclose it only to the infrastructure providers strictly necessary to operate the Service (our database host), under contract, in encrypted form, and only in response to a valid, narrowly-scoped legal process — which we will challenge where overbroad and lawful to do so.

5. How we protect it

Encrypted in transit (TLS 1.2+) and at rest (AES-256) on managed Postgres hosted in the European Union.
Row-Level Security at the database — even our own engineers cannot read your cycle data without a support workflow you initiate.
We are not a HIPAA-covered entity and do not hold ourselves out as a healthcare provider.

6. How long we keep it

Cycle logs are kept while your account is active so we can render your guidance. On deletion (account or cycle-only), they are deleted within 30 days with no derivative analytics, no aggregated retention, and no copy in any AI training set. Encrypted backups roll off within 60 days.

7. Your rights and controls

Delete cycle data only (keep your account): Settings → Account & Security → Clear all cycle data, or email privacy@ineden.app with subject "Delete cycle data only."
Delete everything: Settings → Account → Delete My Data.
Access/export: request a copy via privacy@ineden.app.
Withdraw consent at any time.
Washington, Nevada, EEA, and UK residents have specific statutory rights regarding consumer/special-category health data, which we honor. To appeal a decision or complain, contact privacy@ineden.app; you may also contact your local regulator.

8. Contact

Rose Global LLC d/b/a In Eden — privacy@ineden.app Postal: Rose Global LLC, [Arizona address on file], Attn: Privacy

Your cycle is yours. We built In Eden so the most personal data we hold is also the most protected.