Privacy
What we collect, and what we don't.
Eject has technical access to more of your iPhone than most apps. That's the nature of how enforcement works. We take the responsibility seriously and the policy below is how.
What we actually collect.
Account information
Your email address. Your payment method (processed by our payment provider, never stored on our servers).
Enforcement settings
Which apps you've chosen to block. What mode (Eject, Timer, Schedule). How long. Nothing about whether you tried to open them.
Basic operational logs
When your Mac connected to the service, when an enforcement state changed. No app names in logs beyond what you explicitly set.
That's the entire list.
What we don't collect, under any circumstances.
- Screen-time metrics.
- App-open events.
- Which apps you use when Eject isn't active.
- Your location.
- Your contacts.
- Your messages, emails, photos, or any content on your devices.
- Any advertising or analytics identifiers we'd sell or share.
Who sees your data.
No advertisers. Ever.
Not "we don't sell your data to advertisers." We don't have advertiser contracts. Period.
No analytics partners on your phone.
No Mixpanel, no Amplitude, no Facebook SDK, nothing.
Infrastructure vendors
Payment processor (Stripe — to be confirmed before public launch). Server host (Cloudflare). Email sender (Beehiiv for waitlist). These companies see only what they need to do their specific job.
Security
How we handle the responsibility.
Principle of least access
The team accesses production systems only through a gated CI/CD pipeline. No one SSHes into the server.
Secrets are isolated
Access tokens and enforcement credentials are never in source control, never in chat, never in email.
If we're compromised, we tell you
We will notify affected users within 72 hours of a confirmed breach, with details of what was accessed and what was not.
If you leave.
- Cancel any time from your account.
- Enforcement stops immediately. Your iPhone returns to an unmanaged state on its own schedule (typically within minutes).
- We delete your account and enforcement data within 30 days of cancellation. You can request immediate deletion by emailing dan@ejectnow.com.
Questions about any of this?
Email dan@ejectnow.com. A real person will write back.
Policy last updated: April 22, 2026
Jurisdiction: Delaware, United States (pending incorporation finalization)
