Consumer health data notice · Montgomery Appworks LLC

Last updated: October 26, 2026.

Ebenwell offers educational and spiritual support, not medical advice or treatment.

If you are in crisis, call or text 988 in the US, or contact your local emergency services.

This notice is only about the Ebenwell waitlist. It is separate from the Ebenwell app privacy policy. Montgomery Appworks LLC runs the waitlist.

What we collect and why

The Ebenwell waitlist is for a Christian, grace-centered companion for people who want to leave pornography behind. When you check the box, we store four things in a Cloudflare D1 database named appworks-waitlist:

Your email address, saved in lowercase
The waitlist name ebenwell
The number 1, which means you checked the consent box
The UTC time you joined, in the created_at column. That time is the time of your consent. We do not store a second clock time.

We save an Ebenwell signup only when you check the box on our form.

We store them so we can tell you when Ebenwell is available, and so we can find or delete the row if you ask. The Worker does not send email. No mail company, including Resend, is wired to this Worker. Until a mail sender exists, the row sits in the database and is not turned into a message.

We do not ask you to describe your health. We do not store a journal, a history, or anything you did in the app. The health-related part is the link between your email and this waitlist.

The form sends a notice id. We refuse the signup if that id is not the current one (waitlist-2026-10-26). We do not store the notice id in the database.

A second signup with the same email does not create a second row and does not change the original time.

We refuse a request that declares a body larger than 4096 bytes, and we do not store that body. A request that does not declare a size is not refused for size. If the hidden honeypot field named website is filled in, we show a success page and store nothing.

Where it comes from

It comes from you, if you submit the Ebenwell waitlist form. We do not buy email lists. We do not take this from the app, from ads, or from any other source. The waitlist does not ask your age or your date of birth. Ebenwell is for people 17 and older. If you are under 17, please do not join.

The consent box is unchecked when the form loads. We do not check it for you. If you leave it empty, the form will not submit, and the Worker will not save your email. The box says: I consent to Montgomery Appworks LLC storing my email to tell me when Ebenwell, a Christian app for leaving pornography behind, is available. Cloudflare stores it for us. I can withdraw at any time at /delete.

We accept the word yes for this waitlist, together with the current notice id. We do not accept true or on.

We do not collect your location and do not use geofencing.

What we share, and the fact that we do not sell it

We do not sell your consumer health data. We do not sell your email. We do not rent it, and we do not trade it for money or other value. We do not share it for advertising or with a data broker.

We have no affiliates that receive this data. We share it only with Cloudflare, which stores it for us, and Google, our email provider, when you write to us. We will ask for your separate consent before sharing it with anyone else.

Cloudflare hosts the Worker and stores the D1 database. That is a service we use to keep the list. It is not a sale.

If you email support@montgomeryappworks.com, the message is stored by Google (Google Workspace). The mail servers for montgomeryappworks.com are smtp.google.com. The Worker does not send the reply itself.

People at Montgomery Appworks who can open that database can see a row in order to answer an access or deletion email. A count request, which needs the admin token, returns totals by waitlist name. It does not return email addresses.

We read the IP address only to apply a rate limit. The limit is 6 tries in each 60-second window, for each action, for each IP address. Cloudflare applies that limit approximately, and separately in each of its locations. We do not write the IP address into the waitlist database. Cloudflare keeps the rate-limit counter. This Worker does not turn on Workers Logs, traces, or Logpush, and the script does not write a console log. We do not control how long Cloudflare keeps its own records of a request.

The Worker does not set a cookie. It does not read a cookie. It does not load an analytics script. It does not read your browser user agent into the database.

How long we keep it

We keep an Ebenwell row for 548 days from the time you joined, or until you delete it, whichever comes first. The Worker deletes expired Ebenwell rows when any signup is saved on this Worker, when someone uses the delete page with a valid email, when an admin count or lookup runs, and once a day. Rows for other Montgomery Appworks waitlists are not deleted by this 548-day limit.

Access, deletion, and consent

You can withdraw consent at any time by deleting your signup at /delete or by email.

To delete your email, open https://appworks-waitlist.everusefullapps.workers.dev/delete and submit it, or email support@montgomeryappworks.com with the subject Delete my waitlist signup. Deletion removes that email from every Montgomery Appworks waitlist, not only Ebenwell. The page shows the same result whether or not the email was on a list, so the page cannot be used to look up who joined. We delete the row from this database.

Cloudflare's database restore history can hold a deleted row for up to 30 days, after which it is gone. If you email us, your email stays in our support mailbox.

To get a copy of what we store, email support@montgomeryappworks.com from the address you used, with the subject Access my waitlist data. We look the email up in the waitlist database and reply with the email, the waitlist name, the time you joined, that you consented, and the companies that process this data: Cloudflare, and Google (Google Workspace). If we have no Ebenwell row for that address, the reply says so. We aim to reply within 24 hours. The binding deadline is 45 days.

We respond to access, deletion and consent-withdrawal requests within 45 days. If we deny a request, you can appeal by replying to our answer. We decide appeals within 45 days. If we deny your appeal, you can contact the Washington Attorney General at https://www.atg.wa.gov/file-complaint.

There is no waitlist message to unsubscribe from, because this Worker sends no email. The delete page is how you get off the list. If Montgomery Appworks later emails you about Ebenwell, that message will include our mailing address, a subject line that says what it is, and a way to opt out that we honor. Those are the CAN-SPAM rules for that future message.

If the list is exposed

If we learn that this waitlist was read or shared without authorization, we will follow the FTC Health Breach Notification Rule where it applies. That includes notice to the people affected and to the FTC, as that rule requires. This waitlist is not a HIPAA record, and we do not describe it as one.

Contact

Montgomery Appworks LLC

9905 S Pennsylvania Ave Ste A

Oklahoma City, OK 73159

support@montgomeryappworks.com

We aim to reply within 24 hours. There is no support phone number.