1. Introduction

Epilog ("we," "our," or "the App") is a seizure, medication, and diary tracking application designed to help individuals with epilepsy organise and record their health information. This Privacy Policy explains how Leandro Barreto / LND Tech ("the Developer") handles your information when you use the App.

By using Epilog, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Data You Provide (Stored Locally)

When using Epilog, you may enter the following types of information, which is stored exclusively on your device using Apple's SwiftData framework:

• Seizure records (date, time, duration, type, severity, triggers, location context, recovery time)
• Medication information (names, dosages, frequencies, side effects, prescriber information, stock levels)
• Emergency protocol details (medications, triggers, doctor and hospital information)
• Diary entries (mood, stress levels, anxiety, energy, sleep quality, personal notes, weather, tags)
• Location context for seizures and diary entries (general location type such as "home" or "work" — not GPS coordinates)
• Patient profiles (names, relationships, notes, colour preferences) when using the multi-patient feature
• Seizure notification contacts (names and email addresses you add for Epilog Pro email alerts)

2.2 Data We Do NOT Automatically Collect

Epilog does not automatically collect or transmit:

• Your name, email, phone number, or postal address (unless you voluntarily provide them for a specific feature such as seizure email alerts)
• GPS location data or precise geolocation
• Device identifiers in anonymous research payloads (IDFA, IDFV, account IDs, etc.)
• Behavioural analytics beyond standard ad network practices when ads are shown (see Section 9)
• Your address book or contacts list (you manually enter notification contacts)
• Photos, camera, or microphone data

3. Data Storage

This means:

• Your data is protected by your device's security features (Face ID, Touch ID, passcode)
• We cannot remotely access, view, or retrieve your local health records
• There is no cloud synchronisation of your personal health database
• If you delete the App, local data stored by Epilog is removed from your device (subject to device backup settings)
• The App supports optional biometric lock (Face ID/Touch ID) for an additional layer of privacy
• Apple Watch data syncs between your iPhone and paired Watch over Apple's local Watch Connectivity — not through our servers

4. Anonymous Research Data Sharing

4.1 Purpose

When you enable this feature, Epilog sends anonymised snapshots of your medication and seizure records to a secure research database hosted on Google Firebase Firestore. Snapshots are sent at most once every seven days while the feature remains enabled. The data is aggregated for statistical and clinical research purposes only — not for advertising or marketing.

4.2 What Is Transmitted

When this feature is enabled, the App uploads a snapshot containing only the following anonymised fields:

Medications (per entry):

• Medication name (as you entered it in the App)
• Frequency
• Dose unit (if recorded)
• Total daily dose (if recorded)
• Reported side effects from predefined categories only (free-text or "Other" side effects are excluded)
• Approximate duration on medication in months (rounded; exact start dates are not sent)

Seizures (per entry):

• Month and year only (e.g. 2026-06) — exact date and time are never sent
• Time-of-day bucket derived locally (Early Morning, Afternoon, Evening, or Night) — not the exact clock time
• Seizure type (from predefined categories)
• Severity rating (1–5 scale)
• Duration in seconds
• Whether rescue medication was taken
• Whether the seizure was recorded via Apple Watch
• Predefined triggers only (free-text or "Other" triggers are excluded)
• General location category from predefined options (e.g. "Home", "Work") — custom location text is never sent
• Post-ictal recovery duration and rescue medication timing (if recorded)

Snapshot metadata:

• Submission month and year (submittedMonthYear) — no exact upload timestamp is included in the payload

4.3 What Is NEVER Transmitted

The anonymous research upload explicitly excludes:

• Your name, email address, phone number, or any contact information
• User IDs, patient profile names, or device identifiers (IDFV, IDFA, etc.)
• Free-text fields: notes, prescriber names, product descriptions, diary entries, custom locations, or custom triggers
• Exact dates, times, or timestamps of seizures or medication events
• Emergency protocol details, doctor or hospital names
• GPS or precise geolocation data

4.4 When Uploads Occur

While the feature is enabled, an anonymised upload is sent at most once per week (every seven days). The first upload happens when you turn the feature on in Settings → Research & Privacy; subsequent uploads occur when you open the App again after at least seven days have passed since the last successful upload. Disabling the toggle immediately stops any future uploads.

4.5 How Data Is Stored

Anonymous snapshots are stored in Google Firebase Firestore in a collection called anonymous_research_snapshots. Each upload receives a randomly generated document ID from Firebase that is not linked to your account or device in the App. Data is transmitted over HTTPS (encrypted in transit). Server-side rules restrict the App to creating new documents only — it cannot read, modify, or delete existing research records.

4.6 Legal Basis and Your Control

• Anonymous research sharing is disabled by default and requires your explicit opt-in in Settings → Research & Privacy (GDPR Art. 6(1)(a) — consent)
• You may opt out at any time by disabling "Share anonymous research data" in Settings → Research & Privacy
• Disabling the feature does not delete snapshots already submitted, as they cannot be linked to your identity. To request deletion of research data that may correspond to your contribution, contact support@lndtech.eu — we generally cannot identify which document belongs to you due to the anonymisation design

4.7 Data Recipients

Anonymous research data is processed and stored by Google Firebase (Firestore) on behalf of the Developer, in accordance with Google's Firebase Privacy Policy and Google Cloud Data Processing Terms. Aggregated datasets may be analysed by the Developer and shared with healthcare research partners in anonymised, non-identifiable form only.

5. Seizure Email Notifications (Epilog Pro, Optional)

If you are an Epilog Pro subscriber and enable seizure email notifications, the App may send email alerts through the Developer's secure backend at lndtech.eu when a qualifying seizure is recorded. This feature is disabled by default and only runs when you configure it.

When you use this feature, the following data is transmitted to our email service:

• Patient display name (as configured in the App)
• Recipient names and email addresses you added as notification contacts
• Seizure details: date and time, type, duration, severity, triggers, rescue medication usage, location context, post-ictal duration, and any notes you attached to that seizure record
• Your active Pro subscription product identifier (to verify eligibility)

This data is linked to the information you provide (names and emails) and is used solely to deliver the notification emails you requested. It is not used for advertising, sold to third parties, or added to anonymous research datasets. Emails are sent only when your configured notification rules are met.

6. App Feedback (Optional)

If you choose to send feedback through Settings, the App transmits the following to Firebase Firestore (user_feedbacks):

• Your star rating (1–5)
• One or more features you selected as most useful
• Any suggestions you type in the open feedback field (up to 2,000 characters)
• Your App language/locale setting
• A server timestamp of submission

Feedback is voluntary and is not linked to your account or device identifiers in the payload. Please do not include personal or medical identifying information in free-text suggestions.

7. Doctor Reports, Exports, and Daily Messages

7.1 Doctor Reports (Local Only)

Epilog Pro includes a Doctor Report feature that builds a clinical summary from your local data for neurologist visits. Report generation happens entirely on your device — no health data is sent to external AI services. You may export the report as PDF and share it yourself.

7.2 Exports

You can voluntarily export medication reports, emergency protocols, doctor reports, and diary entries (JSON/CSV) for backup or sharing with healthcare providers. These actions are entirely user-initiated.

7.3 Daily Messages

The App may download short educational or motivational messages from lndtech.eu (based on your selected language). This request does not include your health records. Standard web request metadata (such as IP address) may be processed by our hosting provider.

8. Data Sharing Summary

We do not sell or rent your data. Data may leave your device only in these circumstances:

• Anonymous Research: Only when you opt in under Settings → Research & Privacy; at most once per week while enabled (see Section 4)
• Seizure email alerts: When you enable Epilog Pro notifications (see Section 5)
• App feedback: When you voluntarily submit the feedback form (see Section 6)
• Exports and PDF sharing: When you explicitly export or share files
• Device backups: If you back up your device via iCloud or iTunes, App data may be included according to Apple's policies

9. Advertising

Some versions of Epilog display advertisements served by Google AdMob. When ads are shown, Google AdMob may collect certain device information and use advertising identifiers in accordance with Google's Privacy Policy.

You can remove advertisements by subscribing to Epilog Pro through the App Store. The Developer does not receive your health data through AdMob.

10. Third-Party Services

Epilog integrates with the following third-party services:

• Google Firebase Firestore: For anonymous research snapshots (opt-in in Settings; weekly when enabled) and voluntary app feedback, subject to Firebase Privacy Policy
• Google AdMob: For displaying advertisements in supported versions, subject to Google's privacy policies
• Apple StoreKit: For processing Epilog Pro subscriptions, subject to Apple's privacy policies
• lndtech.eu backend: For seizure email notifications (Pro) and serving daily messages, when those features are used

Firebase and our hosting provider may process standard request metadata (such as IP address) as part of network infrastructure. The Developer does not integrate separate behavioural analytics or crash-reporting SDKs beyond those listed above.

11. Children's Privacy

Epilog can be used by individuals of all ages, including children under parental supervision. The multi-patient feature allows parents and caregivers to track seizure data for dependants.

• Parents should supervise children's use of the App
• Anonymous research sharing is disabled by default; parents or guardians should review Settings → Research & Privacy before opting in on behalf of users under 18
• We comply with applicable children's privacy laws including COPPA where they apply

12. Data Security

Your data is protected by:

• Apple's iOS and watchOS security architecture and App sandboxing
• Device-level encryption
• Optional biometric authentication within the App (Face ID / Touch ID)
• HTTPS encryption when optional research, feedback, or notification data is transmitted

13. Your Rights

You have control over your data:

• Access and modification: All local records are visible and editable within the App
• Deletion: You can delete individual records, patient profiles, or uninstall the App to remove local data
• Export: You can export medication data as PDF and diary data as JSON/CSV
• Opt-out: You can disable anonymous research sharing at any time in Settings → Research & Privacy

If you are located in the European Economic Area (EEA), you may have additional rights under GDPR, including the right to object to processing and the right to lodge a complaint with a supervisory authority. For anonymous research data, the right to erasure may be limited because submitted snapshots cannot be linked to your identity — contact us if you have concerns.

14. App Store Privacy Labels

Apple's App Privacy nutrition labels for Epilog reflect the data types collected when optional features apply — including Health data in anonymised research snapshots when you opt in (not linked to you when no account or device identifiers are included), Contact Info and linked Health data when you use seizure email notifications, and Other User Content when you voluntarily submit feedback. Local health data that never leaves your device is not "collected" in the App Store sense. See Apple's App Privacy Details for definitions.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in the "Last Updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the revised policy where permitted by law.

16. Health Disclaimer