Epiphy

Consumer Health Data Privacy Policy

For residents of Washington and Nevada Last updated: October 2026

This policy is from Agile Minds Holdings LLC, which operates Epiphy ("Epiphy," "we"), and covers consumer health data as defined in Washington's My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (NRS 603A).

1. Consumer health data we collect, why, and how we use it

Categories: - Information about your physical or mental health, body, sleep, food, mood or wellbeing that you choose to write in a reflection, its Context, a question you ask, or a "How did it feel?" answer. - Information Epiphy derives from what you write: the tab and #tag it files a reflection under (for example Body, Mind, Food or Sleep), steps it suggests, a private marker on a reflection that seems heavy, your monthly Aura once it arrives in an app update, and whether a reflection may suggest self-harm (used only to show a 988 card at that moment, and not saved).

Where it's kept: on your devices and in your own iCloud account. Epiphy doesn't store it on its servers.

Purpose and use: we process it only if you turn on AI features, and only to provide the features you asked for: filing and finding your reflections, answering your questions and suggesting steps. We do not use consumer health data for advertising, do not sell it, and do not use it to train AI.

2. Sources

Directly from you, and derived by Epiphy from what you write. Epiphy doesn't connect to Apple Health or any other source.

3. Consumer health data we share

The categories in Section 1, shared only with the service providers (processors) in Section 4, only when you've turned on AI features, and only the parts needed for each request.

4. Categories of third parties we share with

We have no affiliates that receive consumer health data.

5. Your rights and how to use them

You have the right to: - confirm whether we collect, share or sell your consumer health data, and see it, including a list of the third parties we've shared it with and their contact information (we don't sell it) - withdraw your consent to our collecting and sharing it - have it deleted

How: - See or export it: Settings > Export. Your data is on your devices, so the app shows and exports all of it. - Withdraw consent: Settings > AI > turn off. Nothing more is sent. - Delete it: delete any reflection, or use Settings > Delete all data to erase everything on your device and in your iCloud. Copies sent to our AI provider are deleted within 30 days; content its safety systems flagged may be kept up to 2 years. - Anything else: email privacy@epiphyapp.com. We'll respond within 45 days. If we decline, reply with "Appeal" in the subject and we'll answer within 60 days. If you're not satisfied, you can contact the Washington State Attorney General at atg.wa.gov or the Nevada Attorney General at ag.nv.gov.