Privacy Policy

Last updated: April 7, 2026 · epifora.app

Epifora ("we", "us", or "our") operates the Epifora language-learning platform available at https://epifora.app. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

We collect the following types of information:

Type	Examples	How collected
Account data	Name, email address, password (hashed)	When you register
Usage data	Lessons viewed, vocabulary studied, progress	Automatically during use
Device data	IP address, browser type, operating system	Automatically via server logs
Social tokens	OAuth access tokens for TikTok, YouTube, Instagram	When you connect social accounts

We do not collect sensitive personal data such as financial information, government IDs, or health data.

2. How We Use Your Information

To provide and operate the Service (lesson delivery, progress tracking, content generation).
To publish content to connected social media accounts on your behalf, using OAuth tokens you authorize.
To communicate with you about your account or the Service.
To improve and debug the Service through aggregated usage analysis.
To comply with legal obligations.

3. Third-Party Platform Integrations

When you connect a TikTok, YouTube, or Instagram account, we store OAuth access tokens to post content on your behalf. Specifically:

TikTok: We use the TikTok API to upload videos. We request only the scopes necessary for content publishing (video.upload, video.publish). We do not read your TikTok messages, contacts, or private data. Use is subject to TikTok's Terms of Service and TikTok's Privacy Policy.
YouTube: We use the YouTube Data API v3 to upload videos to your channel. Subject to Google's Privacy Policy.
Instagram: We use the Instagram API to publish Reels. Subject to Meta's Privacy Policy.

OAuth tokens are stored securely in our database and are never shared with third parties other than the respective platform APIs. You can revoke access at any time by disconnecting the account in our Settings or through the platform's own security settings.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

Service providers: Hosting and infrastructure providers who process data on our behalf under confidentiality agreements.
Legal requirements: When required by law, court order, or governmental authority.
Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.

5. Data Retention

We retain your account data for as long as your account is active. OAuth tokens are retained until you disconnect the social account or they expire. You may request deletion of your account and associated data at any time by contacting us.

6. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Data portability (receive your data in a structured format).

To exercise these rights, contact us at legal@epifora.app.

9. Cookies

We use session cookies to keep you logged in. We do not use third-party tracking or advertising cookies. You can disable cookies in your browser settings, but this may affect Service functionality.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:
legal@epifora.app
Epifora — https://epifora.app