Privacy

Clear choices.
Better questions.

EDA Unlock is designed as a local-first utility. This page explains what the current iPhone and iPad app stores, when information can leave your device, and the controls available to you.

Feature guidance updated October 22, 2026 for TestFlight version 1.5 (build 60). Availability depends on your installed version. Builds 25 and earlier do not send question analytics. Question Data Sharing requires a separate opt-in; accepting the Terms does not turn it on.

At a glance

Your learning profile and Screen Time selections stay on this device. Optional Question Data Sharing is off until you agree and can be stopped in Profile. Apple handles payments and Family Sharing; EDA verifies Apple subscription entitlements. In current builds, messages use EDA’s private Cloudflare-hosted inbox and optional push alerts. Optional weekly email updates require email confirmation and can be managed in Profile → Notifications. No advertising or cross-app tracking is used.

Question data collected

Question analytics sends question ID and revision, bank and level, attempt number for the same question on this profile, the selected answer or structured puzzle move as a coded value, correctness, active response duration when measured, practice or unlock context, calendar day, and app version/build. Each answer has a random submission ID and a separate deletion receipt, not a persistent user or device identifier. EDA analyzes question performance rather than identifying users. Names, email addresses, PINs, passwords, Apple and Family identifiers, payment details, free-text input, guarded apps, domains, and Screen Time tokens are excluded. Question responses are not used to infer sensitive characteristics or joined to identity or membership records. Coded answers can be matched to the question choices; they are not encryption of the answers.

Your sharing choice

Before sharing, EDA presents a separate explanation and Agree and Share New Answers control. Onboarding may preselect Yes, share new answers; sharing starts only after you continue with that choice. Choose No to leave sharing off. Existing opt-outs remain off. Profile → Question Data Sharing lets you stop sharing without losing access to learning or Screen Time features. Terms acceptance alone is not analytics consent. Only new answers are collected; saved answer history is not uploaded. Turning sharing off clears unsent answers; a request already sent may finish.

Analytics hosting, retention, and deletion

Cloudflare Workers and D1 host and process question results for EDA. Authorized EDA administrators can view question-level aggregates in a protected dashboard. Records are used to improve wording, answer accuracy, explanations, difficulty, and progression, not sold, used for advertising, linked to Family accounts, or shared with an independent analytics or AI-training service. Question-response records and aggregate statistics may be retained for ongoing analysis without a fixed automatic deletion period, subject to applicable law. Cloudflare processes network metadata, including IP addresses, for delivery, security, and rate limiting; EDA does not store IP addresses in question-response records or log request bodies.

Use Profile → Question Data Sharing → Delete Submitted Answers to stop sharing and remove submissions covered by receipts on this installation. Deletion requires internet access and retries while EDA runs. Non-identifying submission IDs and proof hashes remain to prevent deleted answers from being uploaded again; Cloudflare recovery copies expire under its recovery schedule. Reset Profile stops sharing but retains deletion receipts and pending requests separately so deletion remains available. Removing the app loses those receipts and does not delete server records. Without receipts EDA may be unable to locate your submissions, because it does not maintain an analytics identity. Contact Eda.learning.hq@gmail.com for privacy requests; applicable rights are preserved and no fixed response or deletion deadline is promised.

Subscriptions and Apple Family Sharing

Apple handles payments and Family Sharing. EDA verifies Apple subscription entitlements to grant access and does not receive payment-card details or a list of your family members. Family Sharing does not share your learning history, PIN, or Screen Time selections with family members.

The updated app no longer creates or redeems EDA device codes. Records from the previous membership service may remain, including pseudonymous installation identifiers, purchase records, invitation codes, and legacy sign-in records. Contact eda.learning.hq@gmail.com to request deletion of legacy membership data. Deleting EDA data does not cancel Apple billing. Question analytics and optional email learning updates operate separately.

Optional email learning updates

Optional email learning updates use your confirmed email to send weekly summaries. Enter an address in Profile → Notifications and follow the confirmation link. You may unsubscribe in any email and re-subscribe by entering the address again. Daily answer and correct-answer totals, earned level and grade completions, course completions, and active learning time are linked to this installation and processed by Cloudflare for delivery, separately from optional question analytics. No email sale, advertising, or unrelated use is permitted. Reports reflect the last Wi-Fi sync from this EDA installation. They do not automatically combine activity across devices or children; a shared installation may include multiple people’s activity. Learning and progress recording work offline. Optional question-sharing data and email-summary totals are saved locally and uploaded over Wi-Fi while EDA is running; recent unsynced activity may be missing from reports. Removing the app removes unsent local data. Use Profile → Notifications or the unsubscribe link to stop emails and delete the stored email and summaries. Pending confirmation expires after 24 hours. Synced summaries cover up to 45 days; the registration is removed after 90 days without installation activity. Resetting learning history or deleting the server conversation also stops these emails. In-app updates continue without email.

Information stored on your device

The app stores the information needed for your chosen experience: an optional display name, local PIN verifier and login-throttle record, enabled courses, challenge settings, learning progress, answer and unlock history, optional bypass history, levels progressed, challenge-start counts, active question-screen time, and the versions and acceptance time of the Terms and Privacy Policy you acknowledged.

The local learning-profile records are excluded from backup and cross-device restore. When you agree, question analytics sends only the limited records described above; it does not provide cloud backup or restore. EDA Unlock has no learning-history recovery or migration service. Purchases and Family membership can be restored separately. A replacement, restored, or newly installed device therefore starts with a new profile.

Screen Time and protected selections

If you activate protection, EDA Unlock uses Apple’s Family Controls, Device Activity, and Managed Settings frameworks. Apple gives the app opaque selection tokens for the apps, categories, and websites you choose. EDA Unlock uses those tokens only to operate your selected shields; it does not turn them into browsing history or read the contents of other apps.

The app and its Screen Time extensions share the minimum local operational state needed to apply a shield, run a challenge, and relock. When a shield is shown, the app may temporarily store the blocked app’s display name or a web domain so it can offer a return link. That origin record stays local, is not a bundle identifier or browsing history, expires within 15 minutes, and is removed on expiry, completion, bypass, or profile reset.

Learning and focus statistics

Stats stores local counts of levels advanced through answers and guarded-app challenges started, plus active time on practice and unlock questions, including explanations. “Time of scrolling displaced” is an estimate from time in EDA; it does not measure scrolling in other apps. “Screen interruptions” does not count every shield appearance. These local metrics are separate from optional question-data uploads.

PIN and device authentication

EDA Unlock stores a salted PIN-derived verifier—not the plaintext PIN—in Apple’s Keychain. Login throttling is also stored in device-only protected storage. When Face ID, Touch ID, or the device passcode is offered for an authorized reset, iOS performs the check; EDA Unlock receives only the result and does not receive or store biometric data.

Feedback and question reports

Messages and question reports are sent to the EDA team through an in-app inbox hosted by Cloudflare Workers and D1. Sending requires an internet connection. The service uses an installation identifier and authentication secret to associate your conversation and team replies with this installation; no email address or account sign-in is required.

Nothing is sent until you choose Send. Support messages include the text you choose to send. Question reports may include the question, answer choices, explanation, question identifier, course, and app diagnostic details shown in the draft. They do not automatically include your PIN or protected-app selections. Authorized EDA team members can read and respond through the protected support dashboard. Do not include your home address, school, contact details, or unnecessary sensitive information. Minors should ask a parent or guardian for help when needed. The inbox is for support, not emergencies or conversations with other learners.

Retention and deletion

Local records remain until you reset them or remove the app under iOS behavior. In current builds, Messages → Delete conversation removes the server conversation and push registration, along with any associated email-update registration. Inactive support installations and their conversations are removed after 90 days without installation activity; provider recovery copies expire separately. Reset Profile does not delete the separate support conversation.

Use Profile → Question Data Sharing → Delete Submitted Answers to remove analytics covered by this installation’s receipts. Use Delete Online Device Data in the EDA Code section for membership records. Removing the app does not automatically delete server records or cancel Apple billing.

If you contact the support email directly, or use email feedback in version 1.0, your email provider and Google as the receiving mailbox provider process the message and sender address. Such email is retained while the request is handled and for no more than 90 days after closure, unless a legal obligation, security investigation, or dispute requires longer. Send privacy or deletion requests to Eda.learning.hq@gmail.com; verified email-deletion requests are handled within 30 days where legally permitted.

Announcements

EDA provides local learning milestones and an in-app team inbox. With notification permission, the app can register an Apple push delivery token with the support service for reply alerts. Reply alerts contain generic text rather than the message body. Push delivery is not guaranteed; open the inbox to check replies. Notification tokens are used for delivery, not advertising or tracking. You can control notifications in iOS Settings and delete the server conversation in EDA.

Public support-site requests

These Support, Privacy, and Terms pages use no account, advertising, analytics, or tracking cookies. Like ordinary web hosting, the hosting infrastructure necessarily processes the requested path, IP address, timestamp, and browser/network headers and may retain limited request and security logs for delivery, abuse prevention, and reliability. Those web requests are not linked to your local EDA Unlock profile.

Apple and other providers

Apple processes App Store purchases, device authentication, and optional push delivery under its policies. Cloudflare Workers and D1 host EDA’s analytics, membership, and private support inbox. The public website is hosted by Cloudflare. Direct support email is separate and uses Google’s mailbox service. In-app messages are not automatically forwarded to that mailbox. EDA does not sell personal information or use it for advertising.

Intended audience

EDA Unlock is recommended for learners ages 13 and up and is not designed for children under 13. We encourage teens to review privacy choices with a parent or guardian. Your installed app’s Terms and current App Store requirements continue to apply. Optional analytics, messages, device membership, and email updates have separate data practices described above; parent permission does not automatically enable them. If you believe an under-13 child has sent personal information to EDA, contact Eda.learning.hq@gmail.com so we can investigate and handle deletion as required.

Changes and contact

A material change to app data practices will require updated in-app notice and, where appropriate, renewed acknowledgement before that version is used. Questions, privacy requests, and content-rights concerns can be sent to Eda.learning.hq@gmail.com.