Privacy Policy

1. Introduction

Echo ("the App") is a personal video, audio, and text messaging app designed with privacy as a core principle. This Privacy Policy explains how we handle your data.

The short version: your content stays on your device. We don't collect, store, or have access to your personal messages, recordings, or media.

2. Data That Stays on Your Device

The following data is created and stored exclusively on your device and is never transmitted to us or any third party:

• Video, audio, and text messages you create
• Encryption keys (stored in the iOS Keychain, protected by the Secure Enclave)
• App settings and preferences
• Biometric authentication data (managed entirely by iOS)
• Reflections and journal entries

All media is encrypted locally using AES-256-GCM via Apple's CryptoKit framework. We do not have the ability to access, decrypt, or view your content.

3. Data We Collect

We use TelemetryDeck, a privacy-first analytics service, to collect anonymous usage data. This helps us understand how the App is used and improve the experience.

TelemetryDeck is GDPR-compliant and does not sell or share data with third parties.

4. Purchases

Echo offers a one-time lifetime purchase to unlock premium features. All transactions are processed entirely by Apple through StoreKit. We do not collect, process, or store any payment information such as credit card numbers or billing details.

5. iCloud Backup

If you enable iCloud Backup (a premium feature), your encrypted media files may be backed up to your personal iCloud account. This backup is controlled entirely by you and is governed by Apple's iCloud terms and privacy policy. We do not have access to your iCloud data.

6. Data Sharing

We do not sell, rent, trade, or share your personal data with any third party. Period.

The only external service the App communicates with is TelemetryDeck for anonymous analytics, as described in Section 3.

7. Data Retention

Since your data is stored locally on your device, you have full control over it at all times. You can delete all your data from within the App via Settings > Delete All Data. Uninstalling the App also removes all locally stored data.

Anonymous analytics data processed by TelemetryDeck is retained according to their data retention policy.

8. Children's Privacy

Echo does not knowingly collect personal information from children under the age of 13. Since we do not collect personal information from any user, the App does not pose specific risks to children's privacy.

9. Security

We take the security of your data seriously:

• All media is encrypted with AES-256-GCM using Apple's CryptoKit
• Encryption keys are stored in the iOS Keychain, protected by the Secure Enclave
• Optional biometric authentication (Face ID / Touch ID) adds an additional layer of protection
• The App operates in a local-only mode by default with no network data transmission

10. Your Rights

Since we do not collect or store personal data on our servers, there is no personal data for us to provide, modify, or delete. All your data resides on your device and is under your control.

If you are located in the European Economic Area (EEA), you have the right to request information about what data we process. As described above, we process only anonymous analytics data that cannot be linked to you as an individual.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in the "Last updated" date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or the App's data practices, please contact us at: