EpochTwin Privacy Policy

We use your information to:

• Generate your personalized health risk reports and recommendations
• Maintain and update your “health twin” over time as you submit new data
• Process payments for report generation and subscriptions
• Communicate with you about your account, reports, and service updates
• Improve our AI models and risk-scoring accuracy (using aggregated, de-identified data only — see Section 5)
• Comply with legal obligations

Your health data is processed using a combination of:

• Established clinical risk calculators (e.g., Framingham Heart Score, ADA Diabetes Risk Score)
• AI language models (including OpenAI’s GPT-4) to generate readable, personalized reports
• Optical character recognition (OCR) to extract values from uploaded lab reports

Important:EpochTwin’s reports are generated using artificial intelligence and established medical risk formulas. They are intended for informational and preventive awareness purposes only and do not constitute a medical diagnosis. See our full disclaimer in Section 10.

• Your data is stored using Supabase, a secure cloud database provider, with encryption in transit and at rest
• We implement Row Level Security, meaning your health data is technically restricted so that only you (and authorized EpochTwin systems) can access it
• Uploaded lab reports and documents are stored in encrypted cloud storage
• While we take reasonable technical and organizational measures to protect your data, no system is 100% secure, and we cannot guarantee absolute security

We do NOT sell your personal health data. We may share information in these limited circumstances:

• Service providers: Third parties that help us operate (e.g., Supabase for database hosting, OpenAI for report generation, Razorpay for payments). These providers only receive the data necessary to perform their function and are bound by their own data protection obligations.
• Aggregated, de-identified data: We may use anonymized, aggregated data (that cannot be traced back to you individually) for research, improving our risk models, or potential future partnerships with insurers, healthcare providers, or researchers. This will never include your name, contact details, or any directly identifying information.
• Legal requirements: If required by law, court order, or government request
• Business transfers: If EpochTwin is acquired, merged, or sells assets, your data may be transferred as part of that transaction, subject to the same privacy protections

Any future plans to license aggregated data to insurers, pharmaceutical companies, or government health programs will always use de-identified, aggregated data only, and we will update this policy before any such program begins.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data through your Settings page
• Downloadyour data in a portable format (available in Settings → Data & Privacy)
• Delete your account and associated data at any time (available in Settings → Account)
• Withdraw consent for data processing (which may limit your ability to use certain features)
• Opt out of non-essential communications (notification preferences in Settings)

To exercise any of these rights beyond what’s available in your account settings, contact us at support@epochtwin.com.

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required for legal compliance or legitimate business purposes (such as payment records for tax purposes).

EpochTwin is not intended for individuals under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately at support@epochtwin.com.

EpochTwin is based in India and primarily operates under Indian data protection law (the Digital Personal Data Protection Act, 2023). If you access our services from outside India, your data may be transferred to and processed in India.

EpochTwin provides AI-generated health risk assessments for informational and preventive awareness purposes only. Our reports:

• Are NOT a medical diagnosis
• Do NOT replace consultation with a qualified healthcare provider
• Should NOT be used as the sole basis for medical decisions

Always consult a qualified doctor before making any health-related decisions based on your EpochTwin report.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on our platform. Continued use of EpochTwin after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how your data is handled, contact us at:

Email: support@epochtwin.com
[Vadde’s Abode, 681/2 HMT Hills, Kukatpally, Hyderabad, 500085]