Privacy Policy – EpiphyX

Effective date: July 12, 2026

This Privacy Policy explains how Epiphyllum Studio LLC (“we”, “our”, or “us”) collects, uses, and protects information in connection with the EpiphyX application (“the App”).

This policy applies exclusively to EpiphyX, which is developed and operated by Epiphyllum Studio LLC.

1. Information We Collect

1.1 Information You Provide

  • Account identifiers, email address, and authentication provider identity. Authentication tokens are handled by Supabase; we do not receive your password from Apple or Google.
  • Company profile information you choose to save, such as name, address, phone number, email, license details, and estimate terms
  • Subscription and purchase information (processed via app store providers)
  • User-generated input and data entered within the App
  • Design files, project metadata, deck scene data, AI render prompts, uploaded reference photos, and generated render images when you use AI render features
  • Communications sent to us (support requests or feedback)

1.2 Operational Information

  • Server request metadata and error information needed for security, abuse prevention, and troubleshooting
  • Feature usage records needed to enforce subscription entitlements and AI render limits

Preferences and drafts that remain only on your device are not collected by us unless you sign in and use a cloud save, sync, share, or AI feature that uploads them.

2. Authentication & Accounts

EpiphyX supports user login. Authentication is handled using Supabase, our secure authentication and data platform.

We do not store passwords directly on our servers.

3. Subscriptions & In-App Purchases

EpiphyX offers subscriptions and/or in-app purchases.

  • Payments are processed by the platform’s app store (e.g. Google Play, Apple App Store)
  • We do not collect or store full payment card details
  • Transaction status and entitlement information may be stored to manage access to paid features

4. Advertising and Tracking

The iOS version does not include the Google Mobile Ads SDK, does not display advertising, does not request App Tracking Transparency permission, and does not use collected data to track you across apps or websites owned by other companies.

Other platform versions may display ads and will provide platform-appropriate notice and consent where required.

5. AI Render Features

EpiphyX may offer AI-assisted image rendering features for deck presentation visuals.

When you choose to generate an AI render, we may process:

  • Your deck design scene and related project or saved-design identifiers
  • Optional text prompts or style notes you provide
  • Optional house or site photos you upload as reference images
  • Generated render images, render history, provider metadata, usage counts, and diagnostic information needed to operate the feature

This information may be sent to trusted AI image providers, such as Google AI Studio or Replicate, only as needed to generate the requested render, troubleshoot failures, enforce usage limits, and provide render history.

Generated renders are stored in private app storage and are associated with your account, saved design, or project. Reference image metadata may be retained with the render record. Do not upload photos or prompts containing sensitive personal information that is not needed for the deck visualization.

6. Children's Privacy

EpiphyX is not intended for children under 13.

We do not knowingly collect personal information from children under 13. If such data is discovered, it will be deleted promptly.

7. Data Sharing

We do not sell personal data.

We may share limited data with trusted third-party service providers for:

  • Authentication
  • Infrastructure and hosting
  • Subscription and entitlement management through RevenueCat and the applicable app store
  • AI image generation and related processing when you use AI render features

All providers are required to protect data and use it only for authorized purposes.

8. Data Security

We apply reasonable security measures to protect user data. However, no system can be guaranteed to be fully secure.

9. Data Retention

Account-linked projects, designs, settings, company profiles, estimates, render history, and entitlement records are retained while your account is active. When you delete your account in the App, EpiphyX deletes account-owned application data and the Supabase authentication account. Some transaction or security records may be retained where required by law or needed to prevent fraud.

Other data is retained only as long as necessary to:

  • Provide app functionality
  • Meet legal obligations
  • Enforce agreements

Public share links remain accessible to anyone with the link until you revoke or delete the shared item or delete the owning account. Copies previously exported or saved by another person are not controlled by EpiphyX.

10. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access your data
  • Request correction or deletion
  • Withdraw consent where applicable

Requests can be sent to the contact below.

11. Changes to This Policy

Updates will be posted on this page with a revised effective date.

12. Contact

Company: Epiphyllum
Email: [email protected]

Website: https://epiphyllum.studio