Privacy Policy

Last updated: July 24, 2026

Epifany respects your privacy and is committed to processing personal data transparently, securely, and only where necessary.

This Privacy Policy explains what information we collect, why we process it, how long we keep it, who may receive it, and what rights you have when using Epifany.

At a glance

• You can currently use Epifany without creating an account.
• We process the prompts you submit to generate perspectives and reflections.
• Your prompts are transmitted to OpenAI through its API.
• We store prompts, generated responses, and related service data for a limited period.
• Saved perspectives are associated with an anonymous functional identifier stored in your browser.
• Optional first-party analytics are used only after you have provided consent.
• We do not sell your personal data.
• You can refuse or withdraw analytics consent without losing access to Epifany’s core features.

1. Who is responsible for your data?

Epifany is operated by:

For the purposes of applicable data protection law, Keyan Villat is the controller responsible for the processing of personal data through Epifany.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• the Epifany website;
• the Epifany web application;
• the submission and processing of prompts;
• the generation and saving of perspectives;
• optional product analytics;
• support, privacy, and legal communications.

It does not apply to third-party websites or services that you may access independently through external links. Those third parties process data under their own privacy policies.

3. Personal data we process

The information processed depends on how you use Epifany and whether you consent to optional analytics.

3.1 Prompts and generated content

When you submit a prompt, Epifany may process:

• the question, situation, problem, or other text you provide;
• the selected response language;
• the generated perspective or reflection;
• the visual stimulus associated with the generation;
• information required to analyse that visual stimulus;
• generation status, duration, and technical version information;
• information required to display, save, or retrieve the result.

Your prompt may contain personal data if you choose to include it.

Please do not submit:

• passwords or authentication credentials;
• payment-card information;
• government identification numbers;
• highly sensitive medical, financial, or legal information unless strictly necessary;
• confidential business information that you are not authorised to disclose;
• personal data concerning another person unless you have a lawful reason to provide it.

You remain responsible for the information you choose to include in a prompt.

3.2 Saved perspectives

Epifany allows you to save generated perspectives without creating an account.

When you save a perspective for the first time, Epifany may create a random anonymous functional identifier in your browser.

This identifier is used to:

• associate saved perspectives with your browser;
• retrieve those perspectives when you return;
• save or remove a perspective at your request.

The functional identifier does not directly contain your name, email address, or other conventional identity information.

If you clear your browser storage, change browsers, use another device, or use private browsing, Epifany may no longer be able to retrieve your saved perspectives.

3.3 Consent and interface preferences

Epifany uses browser storage to remember choices and provide requested features.

This may include:

• your light or dark theme preference;
• whether you accepted or refused analytics;
• the date and version of your consent choice;
• your anonymous functional identifier, where required for saved perspectives.

These technologies are used to remember choices you explicitly make and to provide functionality you request. More information is available in our Cookie Policy.

3.4 Optional analytics data

Epifany uses first-party product analytics only after you have given your consent.

If you accept analytics, we may process:

• a randomly generated analytics identifier;
• a session identifier;
• session start and activity times;
• whether you are a new or returning visitor;
• device category;
• browser category;
• screen dimensions;
• language and time-zone information;
• approximate country;
• referral source;
• campaign parameters such as UTM parameters;
• generation, viewing, expansion, saving, rating, and engagement events;
• feature usage;
• interaction timing;
• errors and performance information.

The analytics identifier is separate from the functional identifier used for saved perspectives.

If you refuse analytics:

• no optional analytics identifier should be created;
• no optional analytics session should be created;
• optional analytics events should not be recorded;
• optional device, referral, country, and audience information should not be collected for product analytics.

You can change or withdraw your choice at any time through the Cookie Settings link in the website footer.

3.5 Technical, hosting, and security data

When you access Epifany, our hosting and infrastructure providers necessarily process certain technical information required to deliver and secure the service.

This may include:

• IP address;
• date and time of requests;
• requested pages and endpoints;
• browser and device information;
• network information;
• error data;
• security and abuse-prevention information;
• server and infrastructure logs.

Epifany does not intentionally store your complete IP address in its application database.

Our hosting and infrastructure providers may nevertheless process IP addresses and request information as part of hosting, security, reliability, fraud prevention, and incident investigation.

3.6 Communications

If you contact us, we may process:

• your name;
• your email address;
• the content of your message;
• attachments or screenshots you provide;
• information necessary to investigate and respond to your request.

Please do not send passwords, payment details, or unnecessary sensitive personal data by email.

4. Why we process personal data

We process personal data for the following purposes:

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Artificial intelligence processing

Epifany uses artificial intelligence to analyse prompts and generate perspectives.

When you submit a prompt, the following information may be transmitted to OpenAI through its API:

• your prompt;
• the selected language;
• the visual stimulus or information required to analyse it;
• instructions and contextual information required to generate the result;
• generated output;
• technical metadata associated with the API request.

OpenAI processes this information as a service provider supporting the operation of Epifany.

Data submitted through the OpenAI API is not used to train or improve OpenAI’s models by default unless the API customer explicitly opts in to data sharing.

Epifany does not opt in to sharing user prompts or generated responses for model training.

OpenAI may retain prompts, responses, and related metadata in abuse-monitoring logs for up to 30 days by default. Different retention periods may apply depending on the API endpoint, features, account configuration, legal obligations, or security requirements.

AI-generated content may be:

• inaccurate;
• incomplete;
• unexpected;
• misleading;
• unsuitable for your specific situation.

You should evaluate generated content critically before relying on it.

Epifany does not use generated responses to make automated decisions that produce legal or similarly significant effects concerning you.

6. Analytics and your choices

Optional analytics are disabled until you provide consent.

When consent options are presented, you may:

• reject analytics;
• accept analytics;
• review and customise your preferences.

Rejecting analytics does not prevent you from:

• submitting prompts;
• receiving generated perspectives;
• changing the interface theme;
• saving perspectives;
• retrieving saved perspectives.

You may withdraw analytics consent at any time through Cookie Settings.

When analytics consent is withdrawn:

• future optional analytics tracking stops;
• analytics data stored in your browser is removed where technically possible;
• your theme preference remains available;
• your functional identifier may remain available where required to retrieve saved perspectives;
• server-side analytics already collected may remain until the applicable retention period expires or a valid deletion request is completed.

Epifany does not currently use:

• third-party advertising pixels;
• behavioural advertising;
• retargeting technologies;
• third-party marketing analytics.

If these practices change, this Privacy Policy, the Cookie Policy, and the consent interface will be updated before the technologies are activated.

7. Service providers and recipients

We use specialised service providers to operate Epifany.

7.1 OpenAI

OpenAI provides artificial intelligence processing.

It may process:

• prompts;
• visual inputs or related information;
• instructions and contextual information;
• generated content;
• API-related technical metadata.

7.2 Vercel

Vercel provides infrastructure services including:

• website hosting;
• application deployment;
• content delivery;
• server execution;
• network security;
• logging;
• reliability and performance services.

Information processed through Vercel may include:

• IP address;
• request information;
• browser and device information;
• technical logs;
• application data processed through the infrastructure.

7.3 Neon

Neon provides managed database infrastructure.

Information stored in the database may include:

• prompts;
• generated responses;
• anonymous identifiers;
• saved-content information;
• consent-dependent analytics data;
• technical and operational records.

7.4 Professional and legal recipients

We may also disclose personal data where necessary to:

• professional advisers bound by confidentiality;
• courts;
• regulatory authorities;
• law-enforcement authorities;
• parties involved in establishing, exercising, or defending legal claims;
• a successor organisation in the event of a restructuring, merger, acquisition, financing, or transfer of Epifany.

We do not sell personal data.

We do not disclose personal data to advertisers for their own independent advertising purposes.

8. International data transfers

Epifany is operated from Switzerland.

Our service providers or their subprocessors may process data in:

• Switzerland;
• the European Economic Area;
• the United States;
• other countries in which they operate.

The laws of these countries may provide a different level of protection from the laws of your country.

Where required, international transfers are protected through appropriate mechanisms, which may include:

• transfers to countries recognised as providing an adequate level of protection;
• contractual data-protection clauses;
• data-processing agreements;
• supplementary technical and organisational safeguards;
• other mechanisms permitted under applicable law.

9. How long we keep personal data

We retain personal data only for as long as necessary for the purposes described in this Policy, unless a longer period is required by law.

Our intended retention periods are:

OpenAI may retain API inputs, outputs, and related metadata under the conditions described in Section 5.

We may retain limited information for longer where necessary to:

• comply with legal obligations;
• investigate abuse or security incidents;
• resolve disputes;
• establish, exercise, or defend legal claims.

Information retained for statistical purposes may be aggregated or de-identified where reasonably possible.

10. Browser storage and similar technologies

Epifany uses browser storage and similar technologies to:

• remember your privacy choice;
• remember your light or dark theme;
• associate saved perspectives with your browser;
• perform optional analytics after consent.

Some technologies are necessary to provide the service or remember a feature you explicitly requested.

Optional analytics technologies are used only after consent.

More information, including the names and purposes of the technologies used, is available in our Cookie Policy.

11. Your rights

Depending on your location and applicable law, you may have the right to:

• ask whether we process personal data concerning you;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of certain processing;
• object to certain processing;
• withdraw consent;
• receive certain data in a portable format;
• lodge a complaint with a competent data-protection authority.

Because Epifany currently operates without user accounts, we may need information from your browser or anonymous functional identifier to locate data associated with your use.

We may request information reasonably necessary to:

• verify your identity;
• locate the relevant information;
• prevent unauthorised access to another person’s data.

To exercise your rights, contact:

contact@epifany-project.com

Requests are normally handled free of charge.

Where permitted by law, we may refuse or charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive.

In Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Where the GDPR applies, you may also contact the competent data-protection authority in the country where you live or work.

12. Security

We use reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure;
• destruction.

These measures may include:

• encrypted network connections;
• restricted infrastructure access;
• access controls;
• secure management of credentials and environment variables;
• monitoring and logging;
• software updates;
• backups and recovery procedures.

No online service or storage system can guarantee absolute security.

If you believe that your information or use of Epifany has been compromised, contact us promptly at:

contact@epifany-project.com

13. Data concerning other people

You should only provide personal data concerning another person where:

• it is necessary for your use of Epifany;
• you have the right to provide it;
• doing so does not breach confidentiality;
• doing so complies with applicable law.

You remain responsible for information you choose to include in a prompt.

14. Children

Epifany is not intended for persons under the age of 18.

We do not knowingly collect personal data from persons under 18.

If you believe that a person under 18 has submitted personal data to Epifany, contact us at contact@epifany-project.com so that we can assess the situation and delete the information where appropriate.

15. Changes to this Privacy Policy

We may update this Privacy Policy when:

• Epifany’s features change;
• our data-processing practices change;
• a service provider changes;
• legal requirements change;
• analytics or advertising technologies are added or removed;
• retention periods or security practices change.

The latest version will be published on this page with its effective date.

If a change materially affects how we process personal data, we will provide an appropriate notice.

16. Contact

For privacy questions, requests, or complaints: