1. Introduction

Epilog ("we," "our," or "the App") is a seizure, medication, and diary tracking application designed to help individuals with epilepsy organise and record their health information. This Privacy Policy explains how we handle your information when you use the App.

By using Epilog, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Data You Provide (Stored Locally)

When using Epilog, you may enter the following types of information, which is stored exclusively on your device:

• Seizure records (date, time, duration, type, severity, triggers, location context, recovery time)
• Medication information (names, dosages, frequencies, side effects, prescriber information, stock levels)
• Emergency protocol details (medications, triggers, doctor and hospital information)
• Diary entries (mood, stress levels, anxiety, energy, sleep quality, personal notes, weather, tags)
• Location context for seizures and diary entries (general location type such as "home" or "work" — not GPS coordinates)
• Patient profiles (names, relationships, notes, colour preferences) when using the multi-patient feature

2.2 Data We Do NOT Collect

Epilog does not collect:

• Personal identification information (name, email, phone number, address)
• GPS location data or precise geolocation
• Device identifiers (IDFA, IDFV, or similar)
• Usage analytics or behavioural tracking
• Contact information or address book data
• Photos, camera, or microphone data

3. Data Storage

This means:

• Your data is protected by your device's security features (Face ID, Touch ID, passcode)
• We cannot access, view, or retrieve your data
• No cloud synchronisation — your data stays on your device
• If you delete the App, all data is permanently and irreversibly removed
• The App supports optional biometric lock (Face ID/Touch ID) for an additional layer of privacy

4. AI Insights Feature and Data Processing

4.1 What Happens When You Enable AI Insights

When you enable AI Insights, the App sends a summary of your recent health data (last 90 days) to Google's Gemini AI service to generate personalised wellness observations. Specifically, the following data may be transmitted:

• Diary entry summaries: dates, mood ratings, stress/anxiety/energy/sleep levels, and brief excerpts of notes (limited to 150 characters per entry)
• Seizure record summaries: dates, seizure types, durations, severity ratings, recorded triggers, rescue medication usage, and location context
• Medication information: names, dosages, frequencies, categories, reported side effects, start/end dates, and stock status

4.1.1 AI Doctor Report Feature

Epilog Pro also includes an AI Doctor Report feature that generates a comprehensive clinical summary for neurologist visits. When you use this feature, the following additional data may be transmitted:

• All seizure records within the selected period (up to 1 year), including full details such as post-ictal duration, location, and all recorded triggers
• All diary entries within the selected period (up to 50 entries), including longer note excerpts (up to 200 characters)
• Complete medication list including dosage breakdowns, prescriber names, and duration of use
• A patient name, if you choose to provide one (optional)

Generated reports are stored locally on your device and can be exported as PDF at your discretion.

4.1.2 Language Processing

AI responses are generated in the language selected in the App (English, Portuguese, Spanish, or Dutch). The language preference is included in the request to Google Gemini.

The following data is NOT transmitted:

• Your name, email, or any personal identification (unless you voluntarily enter a patient name for a Doctor Report)
• Patient relationship details
• Full diary entry text (only brief excerpts)
• Emergency protocol information
• Device identifiers or account information

4.2 How Google Processes This Data

Data sent to Google Gemini is processed according to Google's Gemini API Terms of Service. According to Google's policies for API usage:

• Data sent via the Gemini API is processed to generate a response and is not used to train Google's models
• The Developer has no control over Google's infrastructure or data handling beyond what is described in their policies

4.3 Frequency and Minimisation

To minimise data exposure:

• Daily AI Insights are generated at most once per day
• No API call is made if your data has not changed since the last generation
• Only data from the last 90 days is considered for daily insights
• Doctor Reports are generated only when you explicitly request them
• Data summaries are kept as brief as possible

4.4 Your Control

• AI Insights is entirely optional — it is disabled by default
• You must explicitly accept a consent prompt to enable it
• You can disable AI Insights at any time from the Settings view or from the Insights section
• When you disable AI Insights, all stored generation data (hashes and timestamps) is reset. No further data is transmitted until you re-enable the feature

5. Data Sharing

We do not sell, rent, or share your data with anyone. The only circumstances under which your data may leave your device are:

• PDF Export: You can voluntarily export medication reports, emergency protocols, and AI-generated Doctor Reports as PDF files to share with healthcare providers. This action is entirely user-initiated.
• Diary Export: You can voluntarily export your diary entries as JSON or CSV files for personal analysis or backup. This action is entirely user-initiated and the files stay on your device until you choose to share them.
• AI Insights and Doctor Reports: If you explicitly opt in, data summaries are sent to Google Gemini for processing (see Section 4). This includes daily insight generation and on-demand Doctor Report generation.
• Device Backups: If you back up your device via iCloud or iTunes, App data may be included in your backup according to Apple's policies.

6. Advertising

The free version of Epilog displays advertisements served by Google AdMob. Google AdMob may collect certain device information and use advertising identifiers in accordance with Google's Privacy Policy. This is standard for ad-supported apps on the App Store.

You can remove all advertisements by subscribing to Epilog Pro through the App Store.

The Developer does not have access to any data collected by Google AdMob.

7. Third-Party Services

Epilog integrates with the following third-party services:

• Google AdMob: For displaying advertisements in the free version (subject to Google's privacy policies)
• Google Gemini AI: For generating AI Insights when explicitly enabled by the user (subject to Google's API terms)
• Apple StoreKit: For processing in-app purchases (subject to Apple's privacy policies)

The Developer does not integrate with any analytics, crash reporting, or behavioural tracking services.

8. Children's Privacy

Epilog can be used by individuals of all ages, including children under parental supervision. The multi-patient feature allows parents and caregivers to track seizure data for dependants.

Since health data is stored locally on the device and we do not collect personal information, there is minimal risk to children's privacy. However:

• Parents should supervise children's use of the App
• The AI Insights feature should only be enabled by a parent or guardian for users under 18
• We comply with applicable children's privacy laws including COPPA

9. Data Security

Your data is protected by:

• Apple's iOS security architecture and App sandboxing
• Device-level encryption
• Optional biometric authentication within the App (Face ID / Touch ID)
• Your device passcode

When data is transmitted for AI Insights, it is sent over HTTPS (encrypted in transit).

10. Your Rights

You have complete control over your data:

• Access: All your data is visible within the App at all times
• Modification: You can edit any record at any time
• Deletion: You can delete individual records, patient profiles, or uninstall the App to remove all data
• Export: You can export medication data as PDF, and diary data as JSON/CSV
• Consent withdrawal: You can disable AI Insights at any time, immediately stopping any data transmission to Google

If you are located in the European Economic Area (EEA), you may have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the revised policy.

12. Health Disclaimer