At Epiloca ("we", "our", or "us"), your privacy is a top priority. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you use our website and Progressive Web Application (the "Service").

1. Information We Collect

We may collect information about you in a variety of ways, including:

• Personal Data: Personally identifiable information, such as your email address, that you voluntarily give to us when you register with the Service or when you choose to participate in various activities related to the Service.
• Authentication Data: Passwords, password hints, and similar security information used for authentication and account access.
• Payment Data: Data necessary to process your payment if you make purchases, such as your payment instrument number (e.g., a credit card number), and the security code associated with your payment instrument. All payment data is handled by our payment processor, Stripe. We do not store your payment data on our servers.
• Camera and Barcode Data: Our application requires access to your device's camera for barcode scanning. We process barcode images locally on your device. We only store the resulting barcode data (e.g., ISBN or UPC numbers) to provide the core functionality of tracking and managing your assets.
• Location Data: If you grant permission, we may collect and process your current GPS location to provide map-based features, such as showing nearby drop points or recording where an asset was scanned. You can revoke this permission at any time in your device settings.
• Device Tokens: If you choose to enable push notifications, we securely store a unique device identifier (FCM token) generated by your browser or operating system to route alerts to your device.

2. Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

• Create and manage your account.
• Process your purchases, subscriptions, and tokens.
• Operate the core features of the app, including asset management and barcode lookup.
• Sync your data offline and online via our offline-first architecture.
• Improve our services and develop new features.
• Communicate with you regarding updates, security alerts, and support messages.

3. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.
• Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing (Stripe), data analysis, email delivery, cloud hosting services, customer service, and marketing assistance.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We do not sell, trade, or rent your personal identification information to others.

4. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information, including utilizing industry-standard authentication and secure database rules. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

5. Offline-First Syncing

Our app uses an offline-first architecture. This means data you create while offline is stored locally on your device and synced to our secure cloud servers when an internet connection is established. By using the app offline, you consent to this local storage and subsequent cloud syncing.

6. Communications & Notifications

We may send you emails and push notifications for system alerts, account security, and community activity (such as book requests, drops, and waitlists). You have the ability to manage and disable these activity notifications at any time through your account preferences. We do not sell your personal information or email address to any third parties for marketing purposes or otherwise.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by updating the "Last updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

8. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at support@epiloca.com.