Overview
Epoc Labs (“Epoc,” “we,” “us,” or “our”) builds a macro and energy-expenditure tracker for iOS and Android. This Privacy Policy explains what information we collect when you use the Epoc app or visit getepoc.app, how we use it, and the choices you have.
Information we collect
Depending on how you use Epoc, we may collect:
- Account information — such as your email address, Clerk user identifier, and identifiers provided through Sign in with Apple, Google sign-in, or email verification.
- Profile and health/fitness data — such as date of birth, inferred age, sex, weight, height, optional body-fat percentage, goal, and related metabolic inputs.
- Logging data — foods you search and log, workout duration, perceived effort (RPE), muscle groups, sets, reps, weights, body check-ins, and derived energy calculations.
- Apple Health and Health Connect data — only if you connect them: active calories and workouts, read-only. See Apple Health and Health Connect.
- Camera and barcode data — barcode values from products you choose to scan. Epoc uses the camera only to scan food barcodes and does not store photos or video.
- Voice input — optional, only when you tap the microphone in the log box. Your phone’s speech recognition (Apple on iOS, Google on Android) turns what you say into text, on the device or on Apple’s or Google’s servers. Epoc does not record or store the audio; only the resulting text is used, the same as a log you type.
- Usage and diagnostics data — basic request metadata, device and operating-system information, crash reports, and general diagnostics needed to keep the service reliable. We do not use advertising SDKs or App Tracking Transparency tracking in the app.
How we use information
We use the information we collect to:
- Provide, maintain, and improve the Epoc app and related services.
- Calculate daily calorie and macro targets, workout burn, and EPOC-based energy adjustments.
- Sync your progress across sessions and devices tied to your account.
- Authenticate your account and protect the service from abuse.
- Respond to support requests and communicate important service updates.
- Detect abuse, troubleshoot errors, and protect the security of our systems.
We do not use health or fitness data for advertising, marketing, or unrelated data mining. What Epoc reads from Apple Health and Health Connect, and how it is used, is described inApple Health and Health Connect.
Apple Health and Health Connect
Connecting Apple Health (iOS) or Health Connect (Android) is optional; you can do it from Settings in the app. When you connect, Epoc asks for read-only access to two kinds of data:
- Active calories — the active energy your phone, watch, or other fitness apps recorded. Epoc does not read resting energy.
- Workouts — each session’s type, time, duration, calories, and the app that recorded it.
Active-calorie totals are read and used on your device to adjust your daily calorie target. They are not sent to our servers. When you choose to import a workout, Epoc stores it with your account like a workout you logged yourself, so it appears in your history across sessions. Imported workouts travel to our servers over encrypted (HTTPS) connections and are stored by the infrastructure providers listed in “How we share information,” which process them only on our behalf. Deleting an imported workout, or your account, removes it.
Epoc never writes to Apple Health or Health Connect. We do not sell health data, share it with third parties for their own use, or use it for advertising, marketing, or profiling.
You can disconnect at any time in Settings in the app. You can also change Epoc’s access in the Health app’s data access settings on iOS, or in Health Connect on Android.
The use of information received from Health Connect will adhere to theHealth Connect Permissions policy, including the Limited Use requirements.
How we share information
We do not sell your personal information. We may share limited information with service providers that help us operate Epoc, including Clerk for authentication, Cloudflare for Worker hosting and edge infrastructure, Turso (libSQL) for database storage, Together AI for chat parsing and nutrition estimates, Expo, Apple, and Google for app distribution and platform services, and email/support providers when you contact us. These providers are permitted to process data only to perform services on our behalf and must protect it appropriately.
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of Epoc, our users, or others.
Data retention
We retain account and logging data for as long as your account is active or as needed to provide the service. You can delete your account inside the Epoc app from account settings. Account deletion removes your Epoc profile, food logs, workouts, body check-ins, and associated account record from our active systems. We may retain limited records when required for security, fraud prevention, legal compliance, or backup integrity, and we delete or de-identify those records when they are no longer needed.
Your choices
You can review and update profile information inside the app. You can delete individual logs in the app where supported, delete your account from account settings, or request access, correction, export, or backup help by emailing support@getepoc.app. Deleting your account also withdraws consent for Epoc to process account-based health and fitness data going forward.
Shared matching (crowd memory). With “Share my logs to improve matching” enabled (Settings › Sharing, on by default), Epoc stores anonymous patterns from logs you confirm — such as the shape of a phrase (“{N} eggs”) and the food or exercise it resolved to — to help everyone log faster. These patterns carry no account identifier; votes are stored under a one-way hash. Turning sharing off stops new contributions and deleting your account removes your votes. Reading from the shared pool works either way.
Children
Epoc is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice within the app or on this site before the changes take effect.
Contact
Questions about this Privacy Policy can be sent to support@getepoc.app.