Last updated: October 2026
Epiphy is a place to keep what you figure out. Some of it will be personal, so we built Epiphy to collect as little as possible. This policy explains what stays with you, what reaches us or the companies that help us, and the choices you have.
The short version
Epiphy is operated by Agile Minds Holdings LLC, a New York limited liability company ("Epiphy," "we," "us").
This policy covers the website epiphyapp.com (including the waitlist), the Epiphy app for iPhone (which also runs on Mac computers with Apple silicon), emails we send you, and messages you send us.
The app saves these on your iPhone (or Mac), and syncs them through your own iCloud account if iCloud is on:
Epiphy can't see your iCloud data. It's stored in your private iCloud database, which Apple keeps for you. Apple says only you can access it, and app makers can't view it. Apple encrypts it in transit and on its servers. If you turn on Apple's Advanced Data Protection, your reflections in iCloud are end-to-end encrypted, so Apple can't read them either.
If iCloud is off, everything stays only on that device. If you lose the device, we can't recover it for you, so we'll remind you to turn iCloud on or export a copy.
The first time Epiphy would use AI, it asks your permission and names the company that does the work. If you say yes, then for each job (filing a reflection, answering a question, tightening a long reflection, suggesting a step, and writing your monthly Aura once it arrives):
If you say no, or turn AI off later in Settings, you can still write, keep, browse and search everything. You'll pick tabs yourself, and search works by words instead of questions.
When you use an AI feature, your phone sends two things to our relay:
Our relay keeps a scrambled (hashed) code for your device's app check and a count of how many AI requests it made each day, so one device can't run up costs or abuse the service. We keep the daily counts for 35 days and delete the device code after 90 days without use. These records don't include your words.
To learn which parts of Epiphy people use, the app counts actions, for example "kept a reflection," "opened Memories," "changed a suggested tab," or a thumbs up or down on an answer. It sends them to PostHog with the app version, iOS version and a scrambled device code. They never include anything you write, not even without your name. We set PostHog to discard IP addresses, and we never record your screen. This data is pseudonymous, not anonymous: it isn't tied to your name, but it is tied to a scrambled code for your device. You can turn it off in Settings > Privacy > Share usage statistics. Turning it off changes nothing else in the app; no feature depends on these counts. Because the counts aren't tied to your name, we can't pick out yours to delete them. Turning usage statistics off stops new counts, and Delete all data gives your device a new code, so older counts can't be connected to it.
The only way anyone at Epiphy sees a reflection is if you send it to us. Tapping "Send this to the team" opens an email to us with that reflection, which you can edit or cancel before sending. We receive it like any other email (see "Messages you send us").
If you've chosen to share analytics with app developers in your iPhone's settings, Apple sends us crash reports and performance data. They don't include your reflections. We don't use any other crash-reporting company.
If you email support@epiphyapp.com or hello@epiphyapp.com, we get your email address and whatever you send. Please don't send reflections you want to keep private. We use Google Workspace for email.
Only to:
| Company | What it does for us | What it receives |
|---|---|---|
| Apple | App Store, payments, iCloud storage, app checks, crash reports | Payment and membership details (Apple's own); your iCloud data, which we can't see; crash reports if you share them |
| Our AI provider (named here before the app launches) | AI answers, only if you turn AI on | The words needed for each answer |
| Cloudflare | Hosts the website and our relay server, counts visits without cookies, runs the bot check, stores waitlist phone numbers | Technical data from your browser or app; AI requests pass through without being saved; waitlist phone numbers and consent records |
| PostHog | Usage statistics, if you leave them on | Usage events with a scrambled device code, never your words or IP address |
| Kit | Waitlist emails | Your email address, if you give one |
| A texting service, only if we send the launch text | Sends the one launch text | Numbers that ticked the box |
| Our work email | Messages you send us |
Each may use information only to provide its service to us. We'll update this list before adding a company that receives personal information.
We may also share information if the law requires it (see section 7), or if Epiphy becomes part of another company. In that case these promises go with it: the new owner must follow this policy and ask you before using information in a new way.
No one at Epiphy reads your reflections, and Epiphy's servers don't keep them. A person could see one only if:
We don't call Epiphy as a whole "end-to-end encrypted," because AI requests have to be readable to be answered. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.
| What | How long |
|---|---|
| Reflections and everything you keep | On your devices and in your iCloud until you delete them |
| Recently Deleted | 30 days, then deleted from your devices and iCloud. "Delete now" skips the wait |
| AI requests at Epiphy's relay | Not stored |
| AI requests at our AI provider | Stated here when we name the provider, before the app launches |
| Relay daily counts | 35 days |
| Relay device code | Deleted after 90 days without use |
| Usage statistics | At least 1 year at PostHog, which may keep them longer. They never include what you write and aren't tied to your name |
| Waitlist email or phone number | Until 90 days after we tell you Epiphy is available, or sooner if you unsubscribe or reply STOP |
| Proof you agreed to a text (number, wording, time, any STOP) | 5 years, only if we texted you |
| Emails you send us | 2 years after the conversation ends |
| Copies in your own device backups | Until those backups are replaced; they're controlled by you and Apple |
Wherever you live in the US, you can:
Because we don't keep your reflections, we can't export or delete them for you from our side. The app does it on your devices and in your iCloud.
State notes: We don't sell personal information, don't "share" it for cross-context behavioral advertising, don't use it for targeted advertising, and don't profile you for legal or similarly significant decisions. We treat a Global Privacy Control signal as a request not to sell or share. Washington and Nevada residents: see our Consumer Health Data Privacy Policy.
Epiphy is for people 18 and older. We don't knowingly collect information from anyone under 18. If you think someone under 18 joined the waitlist or contacted us, email privacy@epiphyapp.com and we'll delete it.
Epiphy is for people in the United States. Your iCloud data is stored by Apple under Apple's terms. Our relay runs on Cloudflare's network. We'll say where our AI provider processes requests when we name it. PostHog stores usage statistics in the United States.
Epiphy doesn't connect to your calendar, email, contacts, photos, location or Apple Health. If we add a connection like that, it will be off until you turn it on, and we'll update this policy before it ships.
We'll update the date at the top. For an important change, like a new use of your information or a new AI company, we'll tell you in the app before it takes effect and ask your permission where the law or our promises require it.
Agile Minds Holdings LLC 418 Broadway, Ste N, Albany, NY 12207 Privacy: privacy@epiphyapp.com · Everything else: hello@epiphyapp.com