EpigoAI Privacy Policy
Effective Date: August 8, 2026
Who We Are
EpigoAI (“we”, “our”, “us”) is a mobile application that helps users organize lessons and notes and use AI-powered study tools such as flashcards, quizzes, explanations, concept maps, mnemonics and other learning features.
The data controller is Barış Aslankan, an independent developer based in Türkiye.
Contact e-mail:
barisaslankan@gmail.com
Scope
This Privacy Policy explains what information EpigoAI collects and processes, how and why we use it, which service providers may process it on our behalf, how long information may be retained, and the rights available to you under applicable privacy laws, including the GDPR, UK GDPR, Türkiye’s KVKK, CCPA/CPRA and similar regulations.
Information We Collect
Account Information
EpigoAI uses Google Sign-In through Firebase Authentication.
When you sign in, we may process and store:
- Your Google e-mail address
- Your Firebase user identifier (UID)
- Your subscription status
- App preferences associated with your account, such as language and theme
We do not request access to your Google password.
Lesson and Note Information
When you use EpigoAI, you may create and store study information including:
- Lesson titles
- Lesson descriptions
- Note titles
- Note dates
- AI-generated note summaries
- Detailed AI-generated study context associated with your notes
This information is stored in Google Cloud Firestore and associated with your authenticated EpigoAI account.
Documents, Images and AI Processing
EpigoAI allows you to select supported documents or images in order to create notes and study materials.
When you use these features, content from the selected document or image may be processed by EpigoAI and transmitted through our secured backend to Google’s Gemini API so that the requested AI output can be generated.
The original source document or image is not permanently uploaded to or stored in EpigoAI’s Firebase Storage as part of the current note workflow.
EpigoAI may store AI-generated summaries derived from your source material so that your notes and study tools remain available in the application.
Other AI-powered features may send your selected note context and instructions to the Gemini API when you request features such as flashcards, quizzes, explanations, concept maps, mnemonics, question solving or similar study tools.
You should only upload or process material that you have the right to use.
App Preferences
EpigoAI may process preferences such as:
- Language
- Theme
- Vibration settings
- Other application configuration choices
Some preferences may be stored locally on your device and others may be associated with your account where required for the relevant feature.
Usage and Diagnostic Information
EpigoAI may use Google Analytics for Firebase to understand how the application is used and to improve its features.
Depending on the enabled configuration, analytics information may include app-interaction events, feature usage, session information, installation identifiers and general device information.
EpigoAI may also use Firebase Crashlytics to detect crashes and technical errors. Crashlytics may process crash traces, installation identifiers, app version information, operating-system information, device model information and diagnostic information associated with a crash.
These services are used to maintain, diagnose and improve the stability and usability of EpigoAI.
Advertising and Attribution Information
EpigoAI does not display third-party advertisements inside the application.
Where the Meta/Facebook SDK is included in the current application build, it is used for external advertising attribution and campaign measurement.
Meta may receive information such as device identifiers, app events and usage or attribution data in order to measure installs, understand advertising performance and provide advertising-related services.
Depending on your jurisdiction and device settings, advertising-related processing may require consent or may be subject to opt-out rights.
Subscription and Payment Information
Paid subscriptions are processed through Google Play.
EpigoAI does not receive or store your full payment-card number or other payment credentials.
Google Play processes payments directly. EpigoAI may receive information necessary to determine your subscription entitlement, such as purchase status, product information and transaction-related identifiers.
How We Use Your Information
We use information processed through EpigoAI to:
- Create and authenticate your account
- Store and synchronize your lessons and notes
- Generate AI-powered study materials
- Provide study tools requested by you
- Maintain your subscription entitlement
- Remember application preferences
- Diagnose crashes and technical problems
- Understand application usage and improve EpigoAI
- Prevent abuse and protect the security of the service
- Comply with applicable legal obligations
- Measure external advertising campaigns where the Meta/Facebook SDK is used
Where the GDPR or UK GDPR applies, the legal basis may include performance of a contract, our legitimate interests in operating and improving the service, compliance with legal obligations, and consent where consent is required for a particular type of processing such as certain analytics or advertising activities.
Other jurisdictions may provide different or additional legal bases and rights.
AI Service Provider
EpigoAI uses Google’s Gemini API to provide generative AI features.
Study content necessary to complete the request may therefore be transmitted to Google for processing.
The Gemini API is accessed through EpigoAI’s backend. The Gemini API credential is stored server-side and is not provided to the Android application.
Google’s processing of Gemini API requests is governed by the applicable Google terms, data-processing terms and privacy documentation.
EpigoAI does not operate or control Google’s underlying AI infrastructure.
Data Sharing and Service Providers
We do not sell or rent your personal information for money.
We may disclose information to service providers only where necessary to operate EpigoAI.
Google / Firebase
Google may process information through services used by EpigoAI, including:
- Firebase Authentication
- Cloud Firestore
- Cloud Functions for Firebase
- Firebase Crashlytics
- Google Analytics for Firebase
These services support authentication, cloud storage of account and study data, secure backend operations, diagnostics and analytics.
Google Gemini API
Study material and prompts necessary to perform an AI request are transmitted to Google’s Gemini API for processing.
Google Play
Google processes subscription purchases and payment information. EpigoAI receives only the information necessary to determine purchase and subscription status.
Meta Platforms / Facebook
Where the Meta/Facebook SDK is active, Meta may receive device identifiers, app events and attribution information for external advertising measurement.
Although we do not sell personal information for money, some advertising-related disclosures may be considered “sharing”, targeted advertising or cross-context behavioural advertising under certain privacy laws. Where applicable, you may have the right to opt out.
Data Retention
Your EpigoAI account information, lessons, notes and stored study summaries are retained while your account remains active unless you delete them earlier.
Individual lessons and notes may be deleted from within the application.
When you delete your EpigoAI profile, EpigoAI deletes the corresponding Firebase Authentication account and the EpigoAI Firestore profile, lessons and embedded note data associated with that account.
Some information maintained by service providers may remain temporarily in backups, security logs, analytics systems, crash-reporting systems, fraud-prevention systems or other provider-controlled systems according to their applicable retention policies and legal obligations.
Firebase Crashlytics and Google Analytics data are retained according to the applicable Firebase/Google configuration and service policies.
Data processed by the Gemini API may be retained by Google for limited service, security, abuse-prevention or legal purposes in accordance with the applicable Gemini API terms.
Meta advertising and attribution data are retained according to Meta’s applicable policies.
Google Play transaction and payment records are controlled by Google and are not deleted by deleting your EpigoAI profile.
Data Deletion and Portability
You can delete individual lessons and notes directly inside EpigoAI.
You can permanently delete your EpigoAI profile from:
Settings › Delete Profile
Deleting your profile removes the EpigoAI account from Firebase Authentication and deletes your EpigoAI Firestore profile, lessons and embedded notes.
You may also contact us at:
barisaslankan@gmail.com
to request access to, correction of, deletion of, or where applicable a machine-readable copy of personal data associated with your EpigoAI account.
We may need to verify your identity before completing a privacy request.
We aim to respond within 30 days, subject to the time limits and exceptions provided by applicable law.
Deleting your EpigoAI profile does not necessarily delete information independently maintained by Google Play, Meta, Google Analytics, Crashlytics or other service providers under their own legal and operational retention requirements.
Your Rights
Depending on where you live, you may have rights regarding your personal information.
GDPR / UK GDPR
Where applicable, these rights may include:
- Access to your personal data
- Correction of inaccurate data
- Erasure
- Restriction of processing
- Data portability
- Objection to certain processing
- Withdrawal of consent where processing is based on consent
- The right to lodge a complaint with a competent supervisory authority
Türkiye — KVKK
Where applicable, you may have rights including:
- Learning whether your personal data are processed
- Requesting information about processing
- Learning the purpose of processing
- Requesting correction of incomplete or inaccurate data
- Requesting deletion or destruction where applicable
- Objecting to certain processing results
- Seeking compensation where permitted by law
California — CCPA / CPRA
Where applicable, you may have rights including:
- The right to know what personal information is collected
- The right to request deletion
- The right to correct inaccurate information
- The right to obtain information about disclosures
- The right to opt out of certain forms of sharing or targeted advertising
- The right not to receive discriminatory treatment for exercising privacy rights
To exercise a privacy right, contact:
barisaslankan@gmail.com
International Data Transfers
EpigoAI is operated by an independent developer based in Türkiye.
Google, Meta and other service providers used by EpigoAI operate infrastructure in multiple countries. As a result, information may be processed outside your country of residence.
Where required by applicable law, international transfers are handled under appropriate legal mechanisms and safeguards provided by the relevant service provider and applicable data-processing agreements.
Security
We use reasonable technical and organizational measures designed to protect information processed through EpigoAI.
These measures include authenticated access to user data, HTTPS/TLS-protected network communication, access controls, Firebase security mechanisms and server-side protection of the Gemini API credential.
Google Firebase services also provide encryption and security controls for supported data at rest and in transit.
However, no electronic storage or transmission system can be guaranteed to be completely secure.
Children’s Privacy
EpigoAI is not directed to individuals under the age of 18.
We do not knowingly provide EpigoAI’s AI-powered service to children under 18.
If you believe that a person under 18 has provided personal information through EpigoAI, please contact us at barisaslankan@gmail.com so that we can review the situation and take appropriate action.
Changes to This Privacy Policy
We may update this Privacy Policy when EpigoAI’s features, service providers, data practices or applicable legal requirements change.
If a change is material, we may provide notice through the application, through an updated policy, by e-mail where appropriate, or through another reasonable method.
The effective date at the top of this Privacy Policy identifies the latest version.
Contact
For privacy questions, requests or concerns, please contact:
Barış Aslankan
Independent Developer
Türkiye
E-mail:
barisaslankan@gmail.com