Echo Privacy Policy

1. Introduction

At Echo, your privacy is our foundational principle. This Privacy Policy explains our practices regarding information collected through our mobile application ("the App"). Because Echo is a fully local, zero-knowledge application, we do not collect, store, or transmit your personal data.

2. Zero Personal Data Collection

As displayed directly within the App's settings, Echo operates under a strict "No Data Collection" model:

• No Accounts Required: You do not need to create an account, register, or log in to use Echo. Ever.
• No Tracking: We do not track user behavior, app usage patterns, or how long you use the App.
• No Analytics: We do not integrate any third-party analytics Software Development Kits (SDKs) and do not collect crash reports containing personal data.
• No Advertisements: Echo does not display ads or sell advertising space, meaning no tracking pixels or advertising identifiers are utilized.

3. Local Encryption & On-Device Storage

All content you create inside the App—including personal thoughts, feelings, and voice notes ("Memories")—is stored exclusively on your individual device. Your Memories are secured using robust AES-256 encryption. Because we do not run or maintain external databases or servers for your Memories, we never have access to your content, your encryption keys, or your recovery codes.

4. Third-Party Subscription Management & Processing

While Echo itself does not collect or store your personal data, the App utilizes Apple's In-App Purchase infrastructure and RevenueCat to manage and validate subscriptions ("Echo Premium").

• Payment Processing: All transactions are securely processed and handled directly by Apple Inc. Echo and RevenueCat never see, receive, or store your credit card details, billing address, or financial information.
• Anonymous Subscription Data: RevenueCat processes transaction tokens and randomized, anonymous app user identifiers solely to verify your subscription status and unlock premium features. No personally identifiable information (PII)—such as your name, account logins, or email address—is ever shared with or transmitted to RevenueCat.

5. On-Device Encryption Details

Echo utilizes strict encryption protocols to safeguard your personal entries:

• On-Device Encryption: Every single Memory is encrypted locally directly on your hardware before it is saved.
• Zero-Knowledge Architecture: Only your unique Recovery Key can unlock and decrypt your database. Because we do not possess your keys, no one—including the Echo development team—can read your thoughts.
• No Cloud Storage: Echo does not utilize any cloud databases or backup servers. Deleting the App or losing your device and Recovery Key means your local data is permanently unrecoverable.

6. Children's Privacy

Echo is not designed to attract, nor do we knowingly target, collect, or solicit personal data from children under the age of 13. Since the App functions purely locally and collects no information from any user, we do not store or process data subject to the Children's Online Privacy Protection Act (COPPA) or applicable Canadian privacy laws regarding minors.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect modifications in app functionality or regulatory requirements. Any adjustments will be posted directly within this page inside the App, accompanied by an updated "Last Updated" date at the top of the policy. Your continued use of Echo after an update constitutes acceptance of the modified practices.

8. Contact Information and Governing Jurisdiction

As a privacy-focused application developed in Ontario, Canada, any inquiries or concerns regarding these data practices can be directed to our support contact links provided on our official Apple App Store product page.