Privacy Policy

Aquity Innovations, in collaboration with EPCON, the creators of EPICare would like you to be familiar with how we collect, use and disclose information and data. This Privacy Policy explains our practices in connection with information that we collect through EPICare (“App”), our websites, “Websites”) and any services we provide you either through the App or through our customer service practices (“Services”). In regard to data collected through the app, Aquity Innovations is the data controller. In the case of any privacy related questions or in case of desired actions relevant to your privacy rights, please contact Freck Dikgale. By downloading, accessing or using the App, or providing information to us in connection with the App, you agree to the terms and conditions of this Privacy Policy.

Modifications to the privacy policy

We reserve the right to update or modify this Privacy Policy at any time without prior notice. This Privacy Policy was last updated on the 27/05/2021. Your continued use of the Services after any changes or revisions to this Privacy Policy shall denote your agreement with the terms of such a revised Privacy Policy.

What information is collected from you?

  • When you create the account

If you want to access data collected by your Device, you must create a EPICare account. When you create a EPICare account, we ask for some personal information, including your email address and a password. Your email address will be used to log-into your account.

  • When you add information to your profile

You can customize your EPICare experience by adding other types of information to your account, such as: Name, Gender, Birthdate.

  • Recording of medical data

Full use of EPICare requires that you record information related to your medication intake, adverse events, your symptoms, your triggers, your medication, your reliefs, etc.

  • Synchronizing the application

When you sync your Device through EPICare, data recorded on your Device about your activity is transferred from your Device to our servers. This data is stored and used to provide Services and is associated with your account. Each time a sync occurs, we log data about the transmission. Some examples of the log data are the sync time and date, device battery level, and the IP address used when syncing.

  • Support

Whenever you contact Aquity Innovations for help, we collect your email address along with additional information you provide in your request so that we can provide you with assistance and improve the Services. If you contact us when you are already logged in to your account, the web form automatically pre-fills this information, so you don’t have to type it manually. You can also contact Aquity Innovations on public forums such as Facebook; however, we cannot maintain the privacy of your communication to us if you contact us through these channels.

  • Inviting community members, family or friends

You can invite your community members or invite friends and family members as part of your subscription. Your contacts will become individual members of the platform but will access their data through your application interface. You as primary contact will then receive notifications for each of the community or family members that you have added to your account.

  • Location features

The Services include features that require the collection of specific location data, in order to detect weather parameters (humidity, pressure, temperature) which are relevant to study the impact of the environment on your individual wellbeing. We only collect this type of data when you activate a location feature. We stop collecting this type of data when you deactivate the feature. We store this information in your EPICare account.

How we use your information

Personal information can include the email address and password provided at sign-up, as well as gender and geographic location, first name, last name, phone number, and date of birth of a person who has downloaded, accessed and used Services in connection to the App (“User”).

We may use your personal information:

  • To respond to your inquiries, comments and posts or to send newsletters to you in order to inform you of our present and upcoming services.

  • To send you news and research-based TB / COVID-19 information that we believe may be of interest to you.

  • To allow you to send messages or invites to a friend through the applications

  • To personalize your experience on the application

  • Under the following circumstances: (a) under applicable law (b) to comply with legal process; (c) to respond to requests from public or government authorities, including public or government authorities outside your country of residence.

How we use your data

By using, accessing and inputting information in the application, you agree that any and all TB related data (excluding personal information) that you have entered or may enter at a future time, into the application, as well as any data you may enter into related features or Services of the application (which are not present at the moment within the application, but which may be introduced at any time in the future), you consent to the compilation, processing, analyzing as well as anonymous disclosure of the resulting statistics to a third party.

(i) Data storage:

We store your data (self-recorded data, phone sensor data and analytics data) in controlled cloud servers, and on some third-party servers than are used as Aquity Innovations’ Data Processors, or Afrihost.

(iI) Encryption:

We encrypt all communications with SSL. It ensures that nobody can look at the data exchanged between Aquity Innovations’servers and the EPICare user application.

(iii) GDPR compliance


Our platform is fully GDPR compliant. We store patient data in different geography South Africa.

Aggregating anonymized user statistics allows us to enhance our services through the provision of insights that can not only help users and physicians understand the causes of potential adverse events, but also show how a population responds to treatment methods and medications. The main objective of data collection is to assist patients throughout their treatment period. In lieu of these objectives, the above-mentioned compilation, processing, analysis, and anonymous disclosure of statistical information may be conducted with the purpose of:

1) Developing anonymous aggregated reports, analysis, charts, tables, infographics in order to:

  • Develop and improve the Crowdsourced Search Engines (how many users record a specific word)

  • Work with external researchers to improve algorithms and develop new individualized algorithms meant at improving your experience including “adherence to medication,” “activity detection,” and “trigger learning,” without being limited to those.

  • Compare different TB/COVID-19 population groups for our understanding, as well as for communication and awareness of TB related treatment.

  • Participate in academic research with a resulting publication, sponsored by Aquity Innovations or a Third Party (cf, Disclosing Statistics To A Third Party).

You can still opt-out at any time 

2) Improving Aquity Innovations’ algorithms in order to:

  • Improve Machine Learning and affiliated services

  • Create groups or customized patterns

You can still opt-out at any time 

3) Quantifying how Aquity Innovations’ services are utilized

Disclosing statistics and data to a third party

Your statistics and/or data may be disclosed to a third party in the following instances:

1) In the event of a sale, merger, reorganization, dissolution or similar event relating to all or a portion of our business or assets, your personal information and data may be part of the transferred assets.

2) We may also disclose your data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or property, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public.

3) Fully anonymized statistics derived from data collection can be included in anonymous & aggregated reports, analysis, charts, tables, infographics to support research and awareness of TB related challenges, more in How We Use Your Data, 1).

We store your Personally Identifiable Information for as long as you maintain a EPICare account. Once the account is deleted, your Personally Identifiable Information will be removed within 30 calendar days.

Modifying personal data

Personal information and data that you provide to EPICare can be modified from your EPICare account (ex: modify your user’s email address from your EPICare profile). If you remove personal information on wellbeing and medical history, it will no longer appear to you. Backups of that data will remain associated with your EPICare account and in our archive servers. It is important to note that the data on the aforementioned backups is only deleted once the account is deactivated, and this occurs within 30 days of deactivation.

Deactivating your EPICare account

You can deactivate your EPICare account by contacting from your user’s email address. When you do, data that can identify you will be removed from the Services, including but not limited to your email, name and other relevant data. Backup copies of this data will be removed from our server based upon an automated schedule, which means it may persist in our archive for a short period. Aquity Innovations may continue to use your de-identified information after you deactivate your account. De-identified information is fully anonymized and there will be absolutely no way to trace any of this information to your personal identifiable information. It is important to note that the identifiable data on the aforementioned backups is only deleted once the account is deactivated.

Exclusions to privacy policy

This Privacy Policy does not and shall not apply to any unsolicited information you provide to us. This includes, but is not limited to, information posted to any public and social media forums, such as the Aquity Innovations forum and other social media pages and websites (collectively, “Public Platforms”), including any ideas for new products or modifications to existing services, and other unsolicited submissions (collectively, “Unsolicited Information”). All such Unsolicited Information shall be deemed to be non-confidential, and we shall be free to reproduce, use, disclose, and distribute such Unsolicited Information to others without limitation or attribution.

Please also note that any personal information you provide to be displayed in publicly available parts of EPICare, will be displayed for those who you have added within your community network to see and thus will not be subject to the terms of this Privacy Policy. We cannot and will not be responsible for i) who you add as a community member within the App and ii) what those community members do with any personal information or other forms of information, such as but not limited to personal data, that you choose to make publicly available.

This Privacy Policy will also not be applicable to any information you share on Community members Tab in the App. Therefore, we advise that you exercise great caution when adding a member within the app and what information you choose to make publicly available through our Services.


If you are under sixteen, please do not submit any Personal Data and Information through the App or our website without consent from a parent or guardian. Parents who are using the App and our website for their children who are under 16 will be responsible for any data and Personal Information they enter into the App.


EPICare is, under no circumstances, meant to make a diagnosis or provide treatment for TB, COVID-19 or any other related health condition. For a proper diagnosis of your medical condition and the treatment that may stem from such a diagnosis, we suggest you consult a doctor or related health care professional.

Questions about the Privacy Policy

If you have questions or comments about our Privacy Policy, please contact us at

Reporting a breach in data privacy

If you believe your data is unprotected or in breach of GDPR regulations, please contact or your aggregated local authorities.