Privacy Policy for EBI Space
Welcome to EBI Space ("we", "our", or "us"). EBI Space is an on-device, privacy-first screen time management and mindful digital wellbeing companion. We believe true focus requires absolute trust, which is why our product is engineered from the ground up on the principle of data minimization and local-first architecture.
This Privacy Policy outlines how data is handled across the EBI Space mobile application for Android and our official website (https://ebispace.app). This document strictly adheres to global data protection regulations, including the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), and the Google Play Developer Program Policies (including the Accessibility API Policy).
1. Core Privacy Foundation: Local-First & Zero Accounts
EBI Space differs fundamentally from conventional habit and time tracking tools:
- Zero Account Registration: We do not require you to sign up, log in, or provide personal credentials. We do not ask for your name, email address, phone number, or social media handles. There is no centralized user database.
- On-Device Storage: Your active timers, daily screen time metrics, custom focus pools, application limits, and intervention logs are stored strictly on your smartphone using a local SQLite (Room) database and private DataStore preferences.
- We Never Sell Your Data: We do not monetize your personal information, sell user data to data brokers, or license behavioral statistics to advertisers.
When external network communication is required (specifically for daily AI behavioral reflections, anonymous app health telemetry, or subscription billing), only minimized, non-identifying telemetry is transmitted over encrypted connections, as fully disclosed below.
2. Android Permissions & Prominent Accessibility API Disclosure
To calculate screen time accurately and provide real-time mindful friction when app limits are reached, EBI Space requests specific Android system permissions.
Prominent Disclosure: Android AccessibilityService API
EBI Space utilizes the Android AccessibilityService API (android.accessibilityservice.AccessibilityService) as its core mechanism to detect foreground application changes.
Specific Purpose:
- To detect in real time when an application configured in your "Social Focus Pool" enters the foreground.
- To track the active duration spent inside designated applications and calculate total daily usage against your self-imposed focus limit.
- To trigger the mindful pause overlay ("Focus Intervention Screen") when your designated time limit has expired.
Explicit Scope & Privacy Guarantees:
- No Screen Content Access: EBI Space does NOT read, inspect, parse, or capture any text, messages, feeds, or images displayed on your screen.
- No Keystroke Logging: EBI Space does NOT record, monitor, or intercept keystrokes, passwords, or typed input (zero keylogging).
- No Personal Communications or Financial Data: EBI Space never accesses your chats, emails, banking information, payment details, or personal files.
- No Automated Interaction: EBI Space does not perform automated taps, gestures, or screen actions on your behalf.
- 100% On-Device & Ephemeral: The AccessibilityService inspects only the foreground package name in active memory. This data is processed exclusively on-device in real time and is never recorded on remote servers or shared with any third party.
Summary of All Android Permissions Requested
| Permission | Purpose | Data Handling |
|---|---|---|
Accessibility ServiceBIND_ACCESSIBILITY_SERVICE |
Detects when designated tracked applications are brought to the foreground to calculate usage and enforce limits. | Processes package names ephemerally on-device. Zero screen reading, zero keystroke logging, zero server transmission. |
Display Over Other AppsSYSTEM_ALERT_WINDOW |
Draws the mindful pause screen and time limit intervention overlay when a focus budget is reached. | Pure visual overlay. Does not capture screen pixels or monitor interactions within other applications. |
Foreground ServiceFOREGROUND_SERVICE &SPECIAL_USE |
Maintains active timer calculations and monitoring reliability without being interrupted by battery optimizations. | Executes locally on-device. Does not transmit continuous background streams to any server. |
Query All PackagesQUERY_ALL_PACKAGES |
Displays installed applications within the app settings so you can customize which apps are added to your focus pool. | Processed strictly locally on-device. The full list of your installed apps is never uploaded to any server. |
Post NotificationsPOST_NOTIFICATIONS |
Delivers mindful warnings (e.g. 80% and 100% limit alerts) and daily behavioral reflection reminders. | Outbound local notifications only. EBI Space does not read or intercept notifications from other applications. |
Receive Boot CompletedRECEIVE_BOOT_COMPLETED |
Restarts the local monitoring service automatically when your phone reboots so your focus goals stay active. | Local broadcast event. No data is collected or transmitted during device restart. |
VibrateVIBRATE |
Provides subtle haptic feedback when interacting with timer controls and focus screens. | Physical device interaction only. No data involved. |
Internet AccessINTERNET |
Enables the Daily Behavioral Insight (Google Gemini API), anonymous app health metrics (TelemetryDeck), and subscription verification. | All network transmissions are encrypted (HTTPS/TLS) and strictly limited to the disclosures in Sections 3, 4, and 5. |
Note: Prior legacy releases utilized PACKAGE_USAGE_STATS. This permission has been completely deprecated and removed in current versions in favor of the battery-friendly, real-time AccessibilityService architecture.
3. Daily Behavioral Insights (Google Gemini AI)
EBI Space includes a scientific coaching feature called the Daily Behavioral Insight. Once per day (or upon your explicit manual refresh), the app synthesizes proven principles from behavioral neuroscience (such as habit loops, dopamine regulation, and cognitive friction) to generate a tailored, compassionate reflection card.
3.1 What Data Is Sent to Google Gemini?
To craft a relevant reflection without compromising your identity, EBI Space sends only a high-level numerical summary of your digital wellbeing telemetry:
- Focus Budget Telemetry: Configured daily budget (minutes), minutes used in social apps today, and percentage of budget consumed (e.g. "within limit" or "over limit").
- Aggregated App Minutes: The names of the monitored apps and the total minutes spent in each today (e.g., "Instagram: 40m, YouTube: 25m").
- Behavioral Friction Signals: Consecutive focus streak count (in days), and the number of times a locked app was opened while over limit ("resisted impulse attempts").
- Historical Momentum: Multi-day adherence rate percentage and weekly trend direction (improving, stable, or worsening).
- Language Context: Your selected app language (to return the insight in your preferred tongue).
3.2 What Data Is NEVER Sent to the AI?
- NO Personal Identity: No name, email, phone number, username, age, gender, occupation, or user profile.
- NO Text, Chats, or Browsing Data: Zero personal messages, emails, notes, search queries, or web history.
- NO Device Hardware Identifiers: Zero IMEI, MAC address, serial numbers, or advertising IDs.
- NO Location or Sensor Data: Zero GPS, IP geolocation, camera, or microphone feeds.
3.3 Request Authentication & API Security
EBI Space connects to Gemini via Firebase Vertex AI secured by Firebase App Check (Google Play Integrity). No static Gemini API key is bundled into the APK or distributed over the air; requests are cryptographically verified to ensure they originate solely from genuine, untampered EBI Space app installations.
4. Privacy-First Analytics: TelemetryDeck
To maintain app quality, understand feature adoption, and resolve performance bottlenecks without compromising user privacy, EBI Space uses TelemetryDeck, an independent European analytics provider designed specifically for maximum privacy.
4.1 Why TelemetryDeck Is Different:
- 100% Cookieless: TelemetryDeck operates entirely without cookies or persistent tracking tokens.
- No Advertising Identifiers: TelemetryDeck does NOT read or collect Google Advertising ID (GAID), IDFA, or device hardware IDs.
- Daily Salted Hashing: User identifiers are anonymized on-device using a cryptographic SHA-256 hash combined with a salt that is rotated daily. This mathematically prevents cross-session tracking or long-term behavioral profiling.
- European Union Data Sovereignty: All TelemetryDeck servers and data storage facilities are located in Frankfurt, Germany (EU), operating under strict GDPR compliance.
- Aggregated Functional Signals Only: We track high-level lifecycle events such as app launches, onboarding progress, permission grant status, focus tier selection, and app limit triggers. We do not track personal content or private usage habits.
4.2 In-App Analytics Opt-Out
We respect your choice. You have full control over analytics directly within the app:
Open Settings & Support → Toggle "Anonymous Analytics" Off.
When toggled off, the TelemetryDeck SDK is instantly silenced and no further telemetry signals will be transmitted from your device.
5. Supporting Firebase Services (Google)
EBI Space integrates select supporting cloud infrastructure from Google Firebase:
- Firebase Remote Config: Used to deliver general operational configuration values (such as minimum supported app version or default preset thresholds). Remote Config transfers standard technical headers (app version, OS version) and contains no personal user data.
- Firebase Crashlytics: If the application encounters an unexpected crash, Crashlytics collects an anonymized technical stack trace (device model, OS version, thread state, and error line) to help our engineering team fix software defects. Crashlytics does not collect your screen time logs, tasks, or personal files.
- Play Install Referrer: Used solely to measure aggregate campaign attribution upon initial installation from the Google Play Store.
Note: Traditional Google Analytics for Firebase (Firebase Analytics) has been completely removed from the EBI Space mobile application.
6. In-App Purchases & Subscriptions
EBI Space offers optional Pro subscriptions and lifetime sponsorship options:
- Google Play Billing: All financial transactions and subscription renewals are managed directly by Google Play.
- Zero Financial Data Access: EBI Space never accesses, processes, or stores your credit card details, bank account numbers, or billing addresses. Payment transactions are governed by the Google Privacy Policy.
- In-App Review & Updates: The app integrates official Google Play APIs to provide seamless updates and in-app review prompts in accordance with Google Play standards.
7. Website Visitors, Cookies & Google Consent Mode v2
This section applies to visitors browsing our public website at https://ebispace.app.
7.1 Google Analytics 4 & Google Consent Mode v2
To monitor website traffic, guide content creation, and identify geographic readership, our website utilizes Google Analytics 4 (Measurement ID: G-YEL5BCK9XG) configured with Google Consent Mode v2.
- Default State: By default, upon your arrival on the site, all analytics storage (
analytics_storage), advertising storage (ad_storage), and ad personalization parameters are strictly denied. - Cookie Consent Banner: When you first visit our website, you are presented with an explicit Cookie Consent Banner offering you the choice to Accept or Decline analytical cookies.
- Remembering Your Choice: Your decision is saved locally in your browser's
localStorage(key:cookieConsent). If you choose "Decline", analytics cookies remain permanently disabled during your visit. - No Advertising or Cross-Site Tracking: We do not run third-party display advertisements, cross-site remarketing pixels, or data broker tags on our website.
8. Data Sovereignty, User Rights & Permanent Erasure
Under international privacy frameworks including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you retain complete sovereignty over your information:
- Right to Complete Erasure (The "Kill Switch"): You can permanently and immediately delete all your usage history, Room database records, daily reflection cards, and settings directly within the app by tapping "Delete All Data" in Settings, or by clearing app data in your Android OS settings.
- Right to Access & Portability: All usage data tracked by EBI Space is visible to you at all times on the dashboard and weekly reports. Because we do not maintain accounts on our own servers, your data is inherently in your exclusive possession on your physical device.
- Right to Object / Opt-Out: You may disable anonymous analytics at any time via the in-app settings toggle.
- No Automated Profiling for Legal Effects: EBI Space does not perform automated decision-making or profiling that produces legal or similarly significant effects.
9. Children's Privacy (COPPA & Global Standards)
EBI Space is designed for general audiences seeking mindful productivity and does not knowingly collect or solicit personal information from children under the age of 13 (or under 16 within the European Economic Area). Because our app requires no account registration, no child identity data is harvested. If you believe a minor has submitted personal information, please contact us immediately so we can assist in its prompt removal.
10. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect evolving legal requirements, Android operating system updates, or product enhancements. Any changes will be posted on this page with an updated "Effective Date". We encourage you to review this policy periodically. Continued use of the app or website constitutes acceptance of the updated terms.
11. Contact Us
For any privacy inquiries, legal questions, or feedback regarding our data handling practices, please contact our data protection team directly:
EBI Space
Email: support@ebispace.app
Website: https://ebispace.app
Frequently Asked Questions (FAQ)
Does EBI Space collect my personal data or require an account?
No. EBI Space requires zero registration. We do not ask for your email, phone number, or credentials. Your core app usage records, daily timers, and focus rules are stored 100% locally on your smartphone in a local database.
Why does EBI Space require the Android AccessibilityService API?
The AccessibilityService API is used strictly to detect in real time when a monitored social media app enters the foreground. This allows the app to calculate your screen time against your daily limit and trigger the mindful pause screen. The service operates exclusively on-device, does NOT read screen content or keystrokes, and never transmits accessibility data externally.
What data is shared with Google Gemini AI?
EBI Space generates a single daily psychological reflection. Only aggregated, anonymized numerical summaries (total focus minutes per app, streak count, limit status, and resisted impulses) are transmitted via secure Firebase App Check. No personal identity, chats, contacts, or screen content are ever transmitted or used for advertising.
What analytics does EBI Space use and can I turn it off?
We use TelemetryDeck, a privacy-first, cookieless platform hosted in Frankfurt, Germany (EU) that does not track Advertising IDs (GAID/IDFA) and rotates daily cryptographic salts. You can completely opt out of analytics at any time directly in the app's Settings.
How do website cookies work on ebispace.app?
Our website uses Google Analytics with Google Consent Mode v2. By default, all analytical cookies are denied. You can accept or decline cookies via the consent banner, and your preference is saved locally in your browser's localStorage.