EasyHeartCheck Privacy Policy
Last updated: 2 September 2026
1. Who controls your personal data
Epibatai Corporation, a Delaware corporation, United States (“Epibatai”, “we”, “us”), is the controller of the personal data described in this policy. Contact: admin@epibatai.com. Registered office: 16192 Coastal Highway, Lewes, Delaware 19958, County of Sussex, United States.
2. Data we collect
Depending on the functions you use, we may collect:
- account and signup data, such as name, email address, telephone number, address, preferred language and age range;
- license, purchase, renewal and activation information;
- device and compatibility information, such as phone model and identifiers needed to activate and protect a license;
- support and service communications;
- technical and security information, such as timestamps, security events and limited network or browser information;
- an optional sex value: Female, Male or Other. If you make no selection, no value is recorded for this field.
Payment-card details are handled by the payment provider and are not intended to be stored by Epibatai in full.
3. Why we use the data
We process personal data to provide and secure EasyHeartCheck, manage accounts, licenses, payments and activations, communicate about the service, provide support, comply with legal obligations and establish or defend legal claims.
If provided, the optional sex value may be used for internal statistics and internal research, including evaluation of aggregate differences between user groups and improvement of the performance and fairness of EasyHeartCheck. Leaving the field blank does not prevent signup or limit the service.
Reports and research outputs are produced in aggregated or anonymized form and are not intended to identify individual users. The optional sex value is not sold and is not shared with external research organizations.
4. Legal bases
Depending on the processing activity, the legal bases may include performance of a contract, compliance with legal obligations, legitimate interests in operating and protecting the service, and consent where requested. The legal basis for use of the optional sex value for internal statistics and research is Epibatai’s legitimate interest in measuring use of the service and improving its performance and fairness. This processing is limited to what is necessary for those internal purposes, and users may object as described below.
If a research activity combines this information with health data, Epibatai will document an applicable condition for processing such data and obtain explicit consent where required.
5. How long we keep the data
The optional sex value is retained until the related license expires and is deleted automatically within 30 days after expiry. Limited transaction, tax, fraud-prevention, security or legal-claim records may be retained longer where required by law or reasonably necessary for those purposes. Those records do not need to retain the optional sex value.
6. Recipients and service providers
Access is limited to authorized personnel and service providers that support hosting, email delivery, payment processing, security and technical operations. Those providers may process data only for the services they provide and under applicable contractual safeguards. Internal research data is not disclosed to external research organizations.
7. International transfers
Epibatai is based in the United States and some service providers may operate in other countries. Where required, appropriate safeguards are used for international transfers of personal data.
8. Your choices and rights
You may leave the sex field blank. Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing. Contact admin@epibatai.com. You may also lodge a complaint with the competent data-protection authority.
9. Security
We use technical and organizational measures designed to protect personal data. No system can guarantee absolute security.
10. Changes
We may update this policy when the service or legal requirements change. The current version and update date will be available on this page.
