Ebb holds something personal: how your body feels, day after day. That only works if privacy is the default rather than a setting you have to find. Your logs are encrypted, readable only by your account, and visible to another person only through a private link that you create and can take back.
Every request between your device and Ebb travels over HTTPS with TLS encryption. Your logs are then stored in a managed database where the underlying storage and backups are encrypted at rest by the hosting provider.
Each row of your data carries your user ID, and the database enforces row level security: a request can only ever read or change rows belonging to the signed in account making it. Signed out visitors have no access path to these tables at all.
The free text note you can add to a check in is never included in anything you share. It is only ever returned to you, on your own signed in pages.
Nothing is shared by default. When you create a share link, Ebb generates a long random token that is impossible to guess. Anyone with that link sees a read only view: your scores, whether today feels indoors or outdoors, ways to support you, and up to 3 months of trends.
Revoke any share link at any moment and it stops working immediately, for everyone who has it. You can also delete any past log, from any day, from your Insights page.
Your check ins are not used to target advertising, and are not sold. They exist to be shown back to you and to the people you deliberately share a link with.
It helps to know precisely what a partner, friend, family member or clinician sees when they open your link.
They can see
They cannot see
We cannot browse your daily logs, read your private notes, or open your shared links to see how you or any other person is feeling today. The database is built so that row level security checks your user ID on every request, and we do not have a backdoor or override that lets a human at Ebb look at an individual account's data. We can only access the underlying tables through the same protected APIs as the app itself.
When you share a link with someone, only that person can see it, and only until you revoke it. No one at Ebb can see what a shared view contains, and we have no way to tell that a specific partner, friend, family member or clinician has opened your link.
In practice, this means we may see aggregated or anonymous usage information such as how many logs are created in total, or broad error patterns that help keep the app running. We do not see who those logs belong to.
You can delete individual logs yourself at any time from Insights, and revoke sharing from the Sharing page. If you would like your account and everything in it removed, or you have a question this page does not answer, send a message from the Feedback page inside the app and we will come back to you.
This page is maintained by the team behind Ebb and describes how the app works today. It is a plain English explanation rather than a legal contract or an independent security certification, and it will be updated as the app changes.