How we handle what you send us

Who the controller is

EPIQ Fundacja Wzmocnienia Zdrowia, ul. A. Branickiego 15, 02-792 Warsaw, Poland. KRS 0001194954, NIP 9512630080.

For anything about your data write to fundacja@epiq.org.pl — we answer every message.

What we collect

Research form: answers to three closed questions, an account in your own words (optional), a voice recording (optional), an attached text file (optional), and an e-mail address (only if you want a reply).

Consultation request: name, e-mail, phone (optional), the specialist you would prefer, and two accounts — of the person concerned and of the problem. Either can be written or recorded.

Voice recordings

A recording contains your voice, which can identify you, so we ask for separate consent — the box appears only once you actually attach a recording. Without it the form will not send with the recording.

The recording goes to private file storage under a random, unguessable name. It is not publicly reachable at any address. Only the Foundation's team can play it, after signing in.

We do not publish recordings, do not share them with anyone outside the Foundation, and do not use them to train AI models.

What we use it for

Research submissions: aggregate analysis of how personal AI use affects sleep, concentration, mood and relationships, and educational material. We publish results in aggregate only — never as individual accounts with details that would let someone be recognised.

Consultation requests: replying to you, sending materials, and where needed helping you find an educator, therapist or mentor. The Foundation does not provide therapy or diagnosis.

Legal basis

Consent — Art. 6(1)(a) GDPR, and where you describe health, Art. 9(2)(a) GDPR.

You may withdraw consent at any time by writing to fundacja@epiq.org.pl. Withdrawal does not affect what we lawfully did beforehand, but from then on we stop processing and delete the recording and any attachment.

How long we keep it

Consultation requests: until the matter is closed and for one year after, in case you come back to us about the same thing.

Research submissions: up to three years from sending, or until consent is withdrawn — whichever comes first.

Recordings and attachments are deleted together with the submission they belong to.

Who processes it for us

The site runs on infrastructure from providers who process data on our instructions: Vercel (hosting), Supabase (the submissions database), Bunny.net (storage for recordings and attachments).

Beyond that we pass data to no one and sell it to no one. We do no profiling and make no automated decisions.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time.

If you believe we are handling data improperly you may complain to the President of the Personal Data Protection Office (UODO) in Poland.

A practical note: research submissions are anonymous unless you leave an e-mail. In that case we have no way to find your particular submission — so send a deletion request with enough description to identify it, or leave an e-mail when you send it.

Protection against abuse

So that nobody can bury us in serial submissions, we count how many times a form has been sent from a given connection. We do not store the IP address — we store a salted cryptographic hash of it, which cannot be turned back into the address.

That counter is deleted after two days and exists only to block abuse. It is not linked to the content of any submission.

Cookies

The site uses no analytics or advertising cookies. Cookies appear only when you sign in to the members area or the panel, and they serve only to keep that session.