Android Privacy Policy
This notice explains how personal data is handled in the Epifor mobile application for Android (formerly Epoptia; the "App"), published on Google Play by EPOPTIA P.C. ("Epoptia", "we"), a Greek private company registered with the General Commercial Registry (G.E.MI.) under no. 147698736000, 312 Andrea Syngrou Avenue, 176 73 Athens, Greece.
Contact: info@epifor.com. It supplements our website Privacy Policy; for the App, this notice prevails.
1. The most important thing: your employer controls most of your data
The App is a workplace tool. You use it with an account provided by your employer (or another organization that is an Epifor customer). For the data processed in the App (your account details, production entries, messages and images) your employer is the data controller and Epoptia acts as processor on its behalf, under a data processing agreement in accordance with Article 28 GDPR.
This means two practical things: your employer determines why and how that data is used and can access the data you enter in the course of your work and requests about that data (access, correction, deletion) are best addressed to your employer first. We support them in fulfilling such requests. For anything else, contact us at info@epifor.com.
Epoptia acts as controller only for the limited technical data needed to run, secure and improve the App itself (Section 3).
2. Data processed in the App
- Account data: name, username, role and login credentials provided through your employer's account. Passwords are stored encrypted and cannot be retrieved, not even by us.
- Production data you enter: production order entries, times, quantities, statuses and comments recorded as part of your work.
- Images and scans: barcode/QR scans for production order tracking and photos you capture in the App, which are uploaded to your employer's account for tracking and recording purposes.
- Communications: instant messages and voice communication exchanged through the App with your colleagues.
- Technical data (Epoptia as controller): device model, operating system version, App version and technical logs needed for security and troubleshooting.
The App contains no advertising and uses no marketing or advertising trackers. We do not sell personal data and we do not use App data for marketing.
3. Device permissions and why the App asks for them
You can revoke any permission at any time in your device settings; the related features will stop working, but the rest of the App remains usable.
4. Purposes and legal bases
Processing in the App takes place to perform the service agreement with your employer (Art. 6(1)(b) GDPR, on the employer's side under its own legal bases toward you) and in our legitimate interest in keeping the App secure and functioning (Art. 6(1)(f)). We process special categories of data in the App neither by design nor knowingly.
5. Who receives data
Data from the App is disclosed only to: your employer (the data you enter is part of its production records); our hosting and infrastructure subprocessors, bound by data processing agreements; and public authorities where the law requires it. We do not share App data with advertising or analytics third parties.
Where a subprocessor processes data outside the EEA, the safeguards described in section 6 of the Privacy Policy apply (EU–U.S. Data Privacy Framework and Standard Contractual Clauses).
6. Retention
Account and production data are retained for as long as your employer's agreement and configuration require and are deleted or anonymized in accordance with the data processing agreement, including the post-termination export window described in the Terms & Conditions. Technical logs are kept only as long as needed for security and troubleshooting.
7. Account deletion
You can request deletion of your account and associated data as described on our Account Deletion page. For employer-provided accounts, your employer can also delete your account from its administration environment. Deletion requests are honored subject to the employer's controller role and legal retention duties.
8. Your rights
You have the rights described in section 8 of our Privacy Policy: access, rectification, erasure, restriction, portability, objection and complaint to the Hellenic Data Protection Authority (www.dpa.gr). For data your employer controls, address requests to your employer; we will support their response. For data we control, write to info@epifor.com; we respond within one month.
9. Children
The App is a workplace tool for authorized personnel of our customers and is not directed at children. We do not knowingly process data of anyone under 15 through the App.
10. Security
Connections between the App and our platform are encrypted in transit. Credentials are stored encrypted. Access to production systems is limited to a small number of authorized personnel, on an as-needed basis. Our full security practices are described in the Support Policy.
11. Changes to this notice
We may update this notice as the App evolves. The current version, with its effective date, is always available at this page and material changes are announced through the App or your employer.
12. Contact
EPOPTIA P.C. · 312 Andrea Syngrou Avenue, 176 73 Athens, Greece · info@epifor.com · +30 210 924 2900