Epoch StudioPrivacy Policy
1. The short version
Epoch Studio is local-first. Your manuscripts and projects are stored on your device and are not sent to us. We do not operate a server that receives your creative work, we do not sell your data, and we do not train AI models on your manuscripts. Your work leaves your device only when you choose to use an optional third-party service (such as a cloud AI provider whose key you enter), or for the narrow, listed system functions below (updates, optional research lookups, optional model downloads).
2. Who we are
The Software is published by Epoch Works LLC (118 Conemaugh Avenue, Jerome, PA 15937, USA) under the product name Epoch Studio. For privacy questions, contact chriskantz@gmail.com.
3. What we store, and where
| Data | Where it lives | Sent to us? |
|---|---|---|
| Manuscripts, chapters, characters, analysis, images, project files | Your device — browser localStorage (nc-* keys, compressed) and, in the desktop app, the OS user-data folder | No |
| App settings, including any API keys you enter | Your device — local settings storage (nc-settings-v1) | No |
| Error logs (if a feature fails) | Your device — a local log file, rate-limited | No |
| Session/writing stats, goals, streaks | Your device | No |
We do not maintain accounts, and the Software contains no analytics, advertising, or telemetry SDK (verified against the codebase, 2026-06-15).
4. API keys
If you enter API keys for third-party providers, they are stored locally on your device and used only to call the provider you configured. We never receive your keys. Treat keys as you would a password; anyone with access to your device could read them.
5. When your content leaves your device — and only then
The Software is built so that nothing about your work is transmitted off your device except in the specific cases below. These are summarized here and listed exhaustively in §C.
- You enable a cloud AI provider. If you configure a third-party LLM or image provider (by entering a key or URL) and the "never send manuscript text to cloud" privacy setting is off, the relevant text or prompt is sent to that provider to produce the feature you invoked (analysis, writing assist, character chat, image generation). It goes to the provider you chose, under their privacy policy — not to us. See the AI Processing Addendum.
- You use the research lookup. A search term you enter is sent to Wikipedia to fetch a summary.
- You download a bundled model. The Software fetches the model file from the model host (Hugging Face, or its mirror), verified by checksum. No personal data is sent.
- The desktop app checks for updates. A version check, and if you update, a download, from the update host (GitHub releases).
- You initiate local-network discovery. If you ask the Software to find a model server on your own LAN, it probes local-network addresses. This stays on your network; nothing goes to the internet.
6. Privacy mode
The Software includes a setting to never send manuscript text to the cloud. When enabled, AI features run only on a local model; if no local model is available, the feature is blocked rather than sent off-device.
7. We do not train on your work
We do not use your manuscripts or projects to train, fine-tune, or evaluate AI models. Any model training would require your explicit, separate, opt-in consent, which we do not currently request or collect. (See EULA §5.)
8. We do not sell your data
We do not sell, rent, or share your personal information or creative work. There is no advertising.
9. Children
The Software is not directed to children under 13 and we do not knowingly collect personal information from them.
10. Your rights
Because your data is stored locally and we do not hold it, you control it directly — you can view, edit, export, and delete your projects within the Software at any time. For any personal data you believe we hold (e.g., if you email us), you may request access or deletion at chriskantz@gmail.com.
11. Third-party services
When you use an optional third-party service, that service's privacy policy governs the data you send it. We do not control those services. The current set of services the Software can reach is in §C and in the AI Processing Addendum.
12. Security
Your data is stored locally under your operating system's protections. The Software restricts file access to approved locations and validates external links before opening them. No system is perfectly secure; keep your device and accounts protected.
13. International users
Your data stays on your device wherever you are. If you choose a cloud provider, your content may be processed in the country where that provider operates, under their terms.
14. Changes
We may update this policy. Material changes will be communicated in-app or on next launch.
§C — Exhaustive list of destinations the Software can reach
| Destination | Trigger | Data sent |
|---|---|---|
| A cloud LLM provider you configure (e.g., Anthropic, OpenAI, Groq, OpenRouter, Google Gemini, xAI, Together, Cerebras, Pollinations) | You enable it (key) and privacy mode is off | The manuscript/derived text for the feature you invoked |
| An image provider you configure (Pollinations free default, or fal.ai / Replicate / Stability / Ideogram with your key; or your own local A1111/ComfyUI) | You generate an image | The image prompt (built from metadata) |
| Hugging Face (or its mirror) | You download a bundled model | None (a file download) |
| Wikipedia | You use the research lookup | Your search term |
| Update host (GitHub releases) | Desktop app launch / update | A version check, then a download if you update |
| Your own local network | You start LAN model discovery | A local probe only — stays on your network |
The Software contains no analytics, advertising, or telemetry calls. Namespace identifiers that appear in exported files (e.g., EPUB XML namespaces) are not network requests.