Privacy Policy

Overview

My EPBuddy ("we," "our," or "the Service") is an independent personal productivity tool designed to help Air Force service members track accomplishments and draft EPB narrative statements.

Information We Collect

Account Information

When you create an account, we collect:

• Email address (for authentication)
• Display name (optional)
• Rank information (for statement generation customization)

Accomplishment Data

You voluntarily provide accomplishment entries including actions, impacts, and metrics. This data is stored securely and is only accessible by you and any team members you explicitly authorize.

Generated Content

Narrative statements generated by the Service are stored in your account for your reference. You maintain full ownership of all content you create.

API Keys

If you choose to use your own AI provider API keys, they are encrypted before storage and are never logged or shared.

How We Use Your Information

We use your information solely to:

• Provide and improve the Service functionality
• Generate AI-powered narrative statements based on your input
• Enable team collaboration features you explicitly opt into
• Send important service-related communications

We do not:

• Sell your personal information
• Share your data with third parties for marketing
• Use your accomplishment data to train AI models
• Access your data for any purpose other than providing the Service

Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest
• Secure, encrypted storage for API keys
• Row-level security policies in our database
• Regular security audits and updates
• HTTPS enforcement with HSTS

Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication (hosted in the United States)
• AI Providers: OpenAI, Anthropic, or Google (when you use their APIs for statement generation). Your accomplishment data is sent to these services only when you explicitly request statement generation.
• Vercel: Hosting and analytics

Each of these services has their own privacy policies. We recommend reviewing them if you have concerns about their data handling practices.

Data Retention

Your data is retained as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

Your Rights

You have the right to:

• Access your personal data
• Export your accomplishment data
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of non-essential communications

Children's Privacy

This Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or through the Service.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the Support page within the application.