EPK · Connected health

Privacy Policy

This notice describes the EPK iPhone, Android and Apple Watch apps and member web portal. Health records remain on the member’s phone; only account details and EPK summaries a member chooses to synchronise are sent to the member service.

1. What the app reads

With explicit permission, the iPhone app may read available Apple Health records for nutrition and dietary water; weight, body-fat percentage and lean body mass; sleep; heart rate, resting heart rate, heart-rate variability recorded as SDNN, respiratory rate, blood oxygen and sleeping wrist temperature; and steps, active and resting energy, exercise time, walking, running and cycling distance, flights climbed and workouts. The Android app may read authorised Health Connect records for nutrition and hydration; weight, body-fat percentage, lean body mass, bone mass, body-water mass and basal metabolic rate; sleep and exercise; steps, distance and floors climbed; active and total calories burned; and heart rate, resting heart rate, heart-rate variability recorded as RMSSD, oxygen saturation and respiratory rate. Android members may separately allow up to 90 days of history for EPK baselines and body trends; if they decline, EPK uses the standard recent records Health Connect makes available. The member can approve or refuse individual categories through the phone’s health-permission controls.

The Android app requests permission to write exercise only when a member deliberately starts and finishes the prescribed functional-strength recorder in EPK. It then saves that one session to Health Connect. EPK does not infer a workout from ordinary phone movement and does not change records created by other apps.

2. Where records come from

Apple Health and Health Connect may contain records written by the phone, Apple Watch or compatible services and devices such as Cronometer, WHOOP, Garmin, Fitbit and connected scales. EPK retains source information when the phone health platform supplies it. EPK does not recreate proprietary wearable scores that are not present in the authorised records.

Weight, body-fat percentage and lean-body-mass records from consumer scales are optional trend context. Their availability and accuracy depend on the source device, and EPK does not treat them as diagnostic measurements. Apple Health does not provide EPK with connected-scale bone-mass or body-water records.

3. Why EPK uses the records

EPK uses authorised records and member-entered information to calculate and explain Energy Per Kilo, energy coverage, nutrition, hydration, recovery context, body trends, movement guidance and member reports. EPK is educational decision support; it does not diagnose, treat or replace medical care.

4. Accounts, storage and synchronisation

• Authorised Apple Health or Health Connect records, imported nutrition history and detailed calculations are stored in protected app storage on the phone. EPK does not upload the underlying phone health records to its member service or a wearable-data aggregator.
• The member service processes the verified payment email, an internal member identifier, sign-in sessions, membership status and security audit events so that paid access works on iPhone, Apple Watch, Android and the web portal.
• If a member chooses summary synchronisation, EPK stores a limited profile, body trend and report summary. The service accepts only defined summary fields and does not receive the underlying health-record samples.
• A member may separately grant the single authorised EPK coach read-only access to those reduced summaries and may revoke that access at any time. A person invited to a free discovery assessment may explicitly share only the answers entered into that form. Coach sharing does not expose raw Apple Health or Health Connect records and does not create or require a paid coaching service.
• The Apple Watch companion receives the latest calculated fuel summary from the paired iPhone. It does not independently read the member’s iPhone health history or repeat EPK calculations.
• EPK does not sell Health data or use it for advertising or cross-app tracking.
• A report or export leaves the app only when the member deliberately shares it or enables an identified summary-synchronisation action.

5. Member control

Apple Health and Health Connect permissions can be changed in the phone’s settings at any time. The app provides a consent-withdrawal action that stops future health collection and removes EPK’s local health cache without deleting original records from the phone health platform or source apps. A signed-in member can initiate EPK account deletion inside the app. This revokes app sessions and deletes synchronised EPK summaries; programme cancellation, refunds and legally required Stripe transaction records remain separate. Removing the app deletes its local container subject to the phone platform’s behaviour and any backups controlled by the member.

6. Legal basis

Connected-health use and optional summary synchronisation are based on consent and, for special-category health information, explicit consent. Account and membership processing is necessary to provide paid member access; security and fraud-prevention records are handled for legitimate interests and legal obligations as applicable. Consent can be withdrawn for future processing without affecting earlier lawful processing.

7. Retention and security

The app keeps local working data until the member erases it using the in-app controls or removes the app. Synchronised summaries remain until replaced, deleted through account controls or removed under the applicable retention policy. Billing and tax records may be retained where law requires. EPK uses iOS data protection, protected session tokens, encrypted transport and access controls. No system can guarantee absolute security.

8. Service providers

Apple provides HealthKit, Watch Connectivity and platform distribution. Google provides Health Connect and Android distribution. Cloudflare provides protected hosting, identity access and account storage. Stripe processes programme payment and supplies the payment email and payment status used to grant or revoke EPK access. Compatible health and nutrition applications write records into Apple Health or Health Connect under their own terms; EPK reads only the categories the member authorises. Analytics remains disabled unless this policy and the relevant store privacy declarations are updated before activation.

9. Rights and complaints

Depending on the circumstances, a member may have rights to access, correct, erase, restrict or receive personal data, object to certain processing, and withdraw consent. Privacy requests can be sent to privacy@enerjarden.com. A member may also complain to the UK Information Commissioner’s Office at ico.org.uk.

10. Children and changes

EPK is intended for adults aged 18 and over. This notice may be updated when the app’s data route or legal requirements change. Material changes affecting connected-health processing will be presented before new processing where appropriate.