epoc
On this page
  1. Who's responsible
  2. On your phone
  3. What epoc's service keeps
  4. Audio
  5. If you turn on Your agents
  6. The website
  7. Who else handles data
  8. Legal bases
  9. How long it's kept
  10. International transfers
  11. Your rights
  12. Children
  13. Backups and moving to a new phone
  14. Changes to this policy
  15. Contact

epoc privacy policy

Updated 15 October 2026

epoc records meetings on your Android phone and transcribes them with Soniox, a speech recognition service. This policy says what epoc keeps, where it's kept and for how long.

Who's responsible

Lev Gelfenbuim, trading as Frogsoup Innovative, makes epoc and is responsible for the data described here. Questions and requests go to hi@epoc.si.

On your phone

  • Your recordings, transcripts, meeting titles, speaker names and settings are stored on your phone. If you turn on Your agents, the text of your meetings is also synced, encrypted, as described below.
  • You don't need an account to use epoc. You need one only if you turn on Your agents. The app has no analytics and no ads.
  • If you turn on auto-save, epoc writes each finished meeting as a Markdown file to the folder you pick, and nowhere else. Turn it off in Settings at any time.

What epoc's service keeps

epoc runs a small service of its own, the relay. It gives the app access to transcription and counts the hours used. For each install of epoc it keeps:

  • a random install token, which the app uses to identify itself, stored only as a hash;
  • when the install was created and when it last called the relay, so that an unused install can be deleted;
  • whether this install was given the free trial. epoc's service stores no device identifier. When the app sets itself up it sends a Google Play Integrity verdict, which the relay checks with Google and doesn't keep. To give each phone one free trial, epoc uses Google Play Integrity's device recall where Google offers it: Google keeps a flag for the phone saying it has had the trial, for up to 3 years after it was last used, so that reinstalling epoc doesn't start a new one;
  • which epoc Pro subscription the install is linked to, if any. The relay keeps one record for each subscription, however many installs link to it: a hash of Google Play's purchase token, a hash of the token it replaced after a change of plan, the plan, its state in Google Play, when it started, when its current period ends, and whether it was a test purchase;
  • for each meeting, how many seconds were transcribed, under a random meeting id;
  • how many seconds the install transcribed each day.

While a final transcript is being made, the relay also keeps Soniox's ids for the job, the meeting's random id, the install token's hash, and when the job started and was collected. It drops them within about a day.

The relay keeps no audio, transcripts, titles or names. Its logs hold only each request's route, status, duration and error code, plus daily totals, alerts and counts across all installs.

Your phone's IP address reaches the relay with each request, as it does with any internet service. The relay uses it only to limit how many installs can register from one address, and doesn't store it.

Audio

  • While you record, the audio goes from your phone straight to Soniox, under a short-lived key that works for one session only. It doesn't pass through the relay.
  • With epoc Pro, the final transcript is made from the meeting's recording after you stop. The recording passes through the relay to Soniox without being stored.
  • Soniox also gets the languages you picked in Settings, if any, so it knows what to listen for.
  • Once the final transcript is back, the relay deletes the recording and the transcript at Soniox. If you delete the meeting before that, they're deleted then, or once the phone is back online. If the transcript is never collected, the relay deletes them after 24 hours.

If you turn on Your agents

Your agents lets the AI assistants you link, such as Claude or ChatGPT, read the meetings you share. It's off unless you turn it on.

  • epoc's cloud service then keeps your account's email and sign-in id; for each of your phones, the name you gave it, a token it uses to identify itself (stored only as a hash), its notification token, and when it was linked and last used; the names of the AI assistants you linked and when they were linked and last used; how many requests your assistants made that day; a copy of your meetings' key, locked with your recovery key; and the text of the meetings you share: titles, times, languages, speaker names and transcripts, never audio.
  • Meetings are encrypted on your phone with a key that only your phones and the assistants you approve hold. The recovery key's words never leave your phone.
  • epoc's cloud stores your meetings encrypted. While an assistant you linked asks for a meeting, the cloud uses that assistant's key to decrypt it in memory and send it, then drops the key. Its logs hold counts only, never titles, names or words.
  • What an assistant reads goes to the company that runs it.
  • The meetings you share include what the other people in them said, so the assistants you link read their words too.
  • Signing in on cloud.epoc.si, for example to link an assistant or to delete your account, keeps your email and sign-in id even if you haven't turned on Your agents in the app, so that the account can be deleted later.
  • In the app you can stop sharing any meeting, unlink a phone or an assistant, delete your synced data, or delete your account. Deleting a meeting on your phone deletes it from the cloud too. You can also delete your account at cloud.epoc.si/account/delete, or by writing to hi@epoc.si. Deleting your account also deletes it at Clerk.

The website

The website uses Cloudflare Web Analytics to count visits. It sets no cookies, stores nothing on your device, and builds no profile of you or follows you across other sites. Cloudflare, as epoc's processor, sees the address of the page, the page you came from, your browser and your country, as it does with any request to the site. epoc sees only the totals.

Who else handles data

  • Soniox transcribes the audio, in the US, as epoc's processor.
  • Cloudflare hosts the relay and epoc's website, and counts the website's visits, as epoc's processor.
  • Google Play runs billing and Play Integrity. Google does this as a controller in its own right, under its own privacy policy.
  • If you turn on Your agents: Clerk signs you in, in the US, as epoc's processor, under the EU-US Data Privacy Framework and standard contractual clauses. Cloudflare stores your synced meetings in the EU. Google's Firebase Cloud Messaging carries the notification that an approval is waiting, with no names or content in it.
  • Running the service and your subscription is needed to perform the contract with you. So is running Your agents, if you turn it on.
  • Giving each device one free trial and limiting abuse rely on epoc's legitimate interest in keeping the service fair and affordable.
  • Counting the website's visits relies on epoc's legitimate interest in knowing how the site is used.

How long it's kept

  • Daily totals: 13 months.
  • Each meeting's usage under epoc Pro: until 25 months after the start of the monthly window it counted in. epoc Pro's hours are counted in monthly windows, for the monthly and the yearly plan alike.
  • Usage during the free trial: as long as the install's record, because it shows how much of the trial was used.
  • An install unused for 24 months is deleted, with its usage.
  • Subscription records: until 13 months after the subscription's period ended.
  • Copies at Soniox: until the final transcript is back, and deleted after 24 hours if it's never collected.
  • Your agents: your synced data stays while you use it. An account with no activity from your phones or your assistants for 24 months is deleted, with an email a month before. Unlinking an assistant ends its access at once.

International transfers

Soniox processes audio in the US, and Cloudflare runs wherever it operates around the world. These transfers rely on the providers' standard contractual clauses. If you turn on Your agents, Clerk signs you in from the US, under the EU-US Data Privacy Framework and standard contractual clauses, and your synced meetings are stored in the EU.

Your rights

Under the GDPR and Israel's Privacy Protection Law, you can ask to see your data, to correct or delete it, to restrict or object to its use, and to get a copy of it. Write to hi@epoc.si. You can also complain to your data protection authority.

  • Uninstalling epoc removes everything it keeps on your phone.
  • The relay's records aren't tied to a name or an email, so epoc can't look them up by who you are. After an uninstall nothing new is collected, and the install's records are deleted once it has been unused for 24 months.
  • An epoc Pro subscription's record can be found from its Google Play order number. Send the number and ask, and it's deleted.

Children

epoc is for people 18 and over.

Backups and moving to a new phone

  • Cloud backup copies nothing from epoc.
  • Android's phone-to-phone transfer copies your meetings, their audio and your settings, on Android 12 and later. On Android 10 and 11 it copies nothing from epoc.
  • The install token is stored encrypted, with a key from Android Keystore that never leaves your phone. It's never backed up or transferred. A new phone is a new install, and an epoc Pro subscription comes back through Google Play.

Changes to this policy

When this policy changes, the new version appears here with a new date at the top.

Contact

Questions about privacy: hi@epoc.si.