Legal
Privacy Policy
Effective October 4, 2026. EpiGuard is operated by Westward Engineering Corp. ("we"). This policy covers the EpiGuard iOS app and epiguard.app.
What EpiGuard is
EpiGuard trains restaurant and business employees to recognize anaphylaxis and use an epinephrine auto-injector. Your employer invites you with a join code; you complete lessons, a written exam and a skills check, and your employer can see whether you have finished.
Information we collect
- Account: your name, email address, a hashed password, and, if you use Sign in with Apple, an Apple account identifier.
- Workplace: the organization you joined, your role there (for example employee, instructor or owner), and the join code used.
- Training records: lessons completed, exam answers and scores, skills-check results, the instructor who signed off, and any completion document issued, each with the course version and date.
- Skills videos: if your employer uses video skills checks, a short video of you demonstrating a trainer (needle-free) device, which you choose to record and submit.
- Security logs: sign-in sessions, a tamper-evident audit log of training events, and basic request logs (time, IP address, device type) used to keep the service secure.
We do not collect your location, health records or contacts, and we do not use advertising or tracking SDKs.
How we use it
- To run your training, score your exam and record your skills check.
- To show your training status to your employer's owners and instructors in the same organization.
- To produce completion records that you or your employer may need for California EMS Authority (EMSA) requirements.
- To secure the service and investigate misuse.
We do not sell or share your personal information for advertising.
Who can see it
- Owners and instructors of the organization you joined can see your name, email, training progress and results.
- Skills videos are private: only authorized instructors for your organization can view them, through short-lived links.
- Service providers that host the service for us: Amazon Web Services (data storage and servers, United States) and Cloudflare (website delivery and network protection).
- Regulators or others when required by law.
How long we keep it
- Skills videos are deleted after an instructor reviews them, and in any case no later than 72 hours after upload.
- Training records and their audit log are kept for up to 5 years so completions can be verified for EMSA and your employer.
- Account details are kept while your account is active.
Deleting your account
In the app, open Profile or Settings and choose Delete Account. This signs you out everywhere, removes you from your organization's roster, deletes any pending skills video, and frees your email for a new account. Training completion records may be retained as described above. You can also email privacy@epiguard.app to request deletion.
Your rights
Depending on where you live, including California, you may have the right to know what we hold about you, to get a copy, to correct it and to delete it. Email privacy@epiguard.app and we will respond within 45 days. We will not treat you differently for exercising these rights.
Children
EpiGuard is for workplace training and is not intended for anyone under 16.
Security
Data is encrypted in transit, passwords are hashed, and access is limited to people who need it. No system is perfectly secure; report problems to security@epiguard.app.
Changes
We will post updates here and change the effective date. For material changes we will notify you in the app or by email.
Contact
Privacy and data requests: privacy@epiguard.app
Security issues: security@epiguard.app
Westward Engineering Corp.