Last Updated: June 5, 2026
Bedroomlabs SRL ("we", "us", "our") operates the esc. mobile application, our custom e-commerce storefront, and the physical esc. hardware node (collectively, the "Ecosystem"). We are committed to protecting your privacy and ensuring that your personal data is handled securely, transparently, and in strict compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains exactly how we collect, use, disclose, and secure your information across our digital and physical product boundaries.
For the purposes of European data protection legislation, the Data Controller responsible for processing your personal information is Bedroomlabs SRL, a legal entity registered and operating under the laws of Romania.
This Privacy Policy applies to all individuals who purchase our physical hardware, download or interact with our mobile application layer, or visit our custom web storefront. By interacting with the Ecosystem, you acknowledge the data collection and processing methodologies described in this policy. If you do not agree with these processing terms, you should immediately cease all interaction with our software and hardware components.
Under the European General Data Protection Regulation (GDPR), we process your personal data using the following strict legal frameworks:
When you visit our custom web storefront, our hosting servers and local code layers automatically capture standard network telemetry. This information includes your Internet Protocol (IP) address, browser configuration headers, device type, operating system version, and basic timestamp paths.
This telemetry is gathered to maintain operational stability and secure our frontend checkout against malicious activity. Any tracking of your specific navigation paths, referral URLs, or purchase behaviors for marketing purposes is strictly deferred and managed according to your active selection within our centralized cookie gatekeeper architecture.
We collect personal information that you actively and voluntarily provide to us across two distinct environments:
To protect system integrity, prevent cloning, and minimize persistent cloud data trails, our database infrastructure and physical device configurations operate under a decoupled single-pairing security framework:
To enforce focus states and deactivate alarms via the physical hardware puck, the esc. mobile application requires access to highly restricted system-level frameworks. We process all telemetry gathered through these endpoints strictly on-device, ensuring zero structural transmission to our backend infrastructure:
UsageStatsManager engine and the AccessibilityService API to immediately detect when a restricted application enters the foreground thread. This permission is used solely to construct a full-screen, local focus-mode lock overlay over the target interface. The app does not read your screen contents, log key entries, or transmit app interactions back to our database.The physical esc. puck is an entirely passive electronic hardware node containing an integrated NTAG213 silicon circuit.
Our custom web storefront interacts with selected third-party telemetry tools to optimize ad distribution and calculate our return-on-ad-spend. To maximize performance and keep codebase bundles minimal, we employ direct script injection inside our custom layout instead of relying on heavy tag management containers:
We never sell your personal data. To maintain a functional, multi-platform commerce and account infrastructure, we transmit encrypted data tokens to trusted third-party service providers who operate under strict data processing agreements:
In compliance with Romanian national tax legislation and European commercial code validation requirements, the corporate identity and physical headquarters of the Data Controller are explicitly declared as follows:
As an organization utilizing a modern decoupled cloud architecture, data tokens stored within our backend systems may be processed and stored on virtual server nodes located outside of the European Economic Area (EEA).
Whenever we utilize processing infrastructure managed by our hosted cloud providers, we ensure that your personal records are protected under robust legal mechanisms. This includes verifying that our providers utilize strict Standard Contractual Clauses (SCCs) approved by the European Commission, maintaining end-to-end data transport encryption, and ensuring that any external server facilities maintain equivalent data security certifications to comply fully with European GDPR standards.
We strictly regulate our data retention timelines to minimize the volume of personal information stored on our platforms:
If you are a resident of the European Union, you maintain comprehensive, legally enforceable rights regarding your personal information under the General Data Protection Regulation (GDPR). These rights include the right to access the exact data attributes we store, the right to rectify inaccurate records, the right to restrict processing, and the right to data portability.
You also possess the absolute right to request the permanent and immediate erasure of your personal data ("Right to be Forgotten"). To initiate a data erasure request, or to ask any technical questions regarding your data privacy, you can contact us directly at our operational support email: hello@escyourphone.com. Upon receiving your request and verifying your identity, we will permanently purge your customer records from our active database infrastructures within thirty (30) calendar days, unless statutory tax retention laws mandate a continued log.
Our Ecosystem is not designed or intended for independent use by individuals under the age of 13. We do not knowingly collect or solicit personal information from minors.
As outlined in our Terms of Service, users between the ages of 13 and 18 require explicit parental or legal guardian consent to interact with our mobile application and custom store. If we discover that personal data from a child under the age of 13 has been automatically written to our database without verifiable guardian permission, we will take immediate engineering steps to wipe those specific data blocks from our servers and terminate the associated profile configuration.
Bedroomlabs SRL reserves the right to modify or update this Privacy Policy at any time to reflect changes in our custom layout code, physical hardware deployment models, or evolving mobile operating system frameworks.
When structural changes are committed, we will update the "Last Updated" timestamp at the top of this document. If a change significantly alters how your personal data is processed, we will deploy an active notification layout update—such as a custom in-app banner component or a direct email notification to your account address. Your continued use of the mobile application or web storefront after an updated policy is posted implies automatic acceptance of the revised data methodologies.
If you believe that Bedroomlabs SRL has processed your personal information in a manner that violates European data protection directives or Romanian national privacy laws, you maintain the absolute legal right to file an official complaint with the competent supervisory authority.
In Romania, the primary regulatory body is the National Supervisory Authority for Personal Data Processing:
Your cart is empty.