Privacy Policy

Last updated October 29, 2026

Echoes is a private notebook. This policy explains what we collect, why, who helps us run the service, and the choices you have. We wrote it to be read, not skimmed past.

The short version

• Your notes are private unless you choose to share one. Voice notes cannot be shared.
• We don't show ads, we don't use tracking or advertising SDKs, and we never sell your data.
• Automated safety checks and the assistant only process a note when you share it or ask a question about your own notes.
• You can export everything and delete your account at any time. Deletion removes your notes, recordings and images.

What we collect

Account information

Your email address, or the identifier Apple provides when you use Sign in with Apple (which may be a private relay address). We assign you a pen name; we never ask for your real name, birthday or photo.

Your content

The notes, tags, images and voice recordings you create, the transcripts of those recordings, and the reports you send. Free accounts keep original recordings for 30 days. Pro keeps them until 30 days after the membership ends. Transcripts are kept until you delete them.

Usage needed to run the service

Counters for daily limits (for example, voice notes or questions used today), your time zone so limits reset at your midnight, your speech-recognition language, notification preferences, and a device token if you allow push notifications. We use your approximate country, derived from your IP address at request time, to comply with export-control law. We don't store a location history.

Purchases

Whether you have an active Pro subscription and when it renews. Apple handles payment; we never see your card.

Why we use it (legal bases)

We process your data to provide the service you asked for (performance of a contract), to keep Echoes safe and lawful (legitimate interests and legal obligations), and to send push notifications you opted into (consent, which you can withdraw in Settings).

Who helps us

We share the minimum necessary with these processors, each bound by a data-processing agreement:

• Apple: Sign in with Apple, in-app purchases, push notifications, and speech recognition. Where your device supports it, speech is recognised on-device; otherwise short audio segments are processed by Apple.
• Supabase (United States): database, authentication and file storage.
• Vercel (United States): hosting for our website and servers.
• TypeSafe AI (Jev): automated safety and quality checks. Only runs on a note when you share it, on reported content, and on assistant answers about your own notes.
• DeepSeek: generates assistant answers. Receives your question and short excerpts of your own matching notes, only when you ask.
• RevenueCat: subscription status.
• Resend (United States): delivers sign-in codes and support emails.

Private notes are never sent to Jev or DeepSeek. We don't use your content to train models, and our processors may not either.

What other people can see

If you share a written note, it may be shown to a small number of other users with similar interests. They do not see your pen name or a picture of you. Voice notes stay on your account and are never shared. People who echo a note stay anonymous to you: you learn how many, not who. You can make a shared note private again at any time.

International transfers

Our infrastructure is in the United States. Transfers from the EEA, UK and Switzerland rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses where applicable.

How long we keep data

• Notes, transcripts and images: until you delete them or your account.
• Original voice recordings: 30 days on Free. On Pro, until 30 days after the membership ends, or until you delete them if the membership has no end date.
• Moderation records: up to 2 years, to handle appeals and repeat abuse.
• Rate-limit counters: about 48 hours.

Your rights

Wherever you live, you can access and export your notes (Settings, Export), correct your content, and delete your account and everything in it (Settings, Delete account). Residents of the EEA, UK and California have additional rights, including objecting to processing and lodging a complaint with a supervisory authority. We do not sell or share personal information as defined by the CCPA/CPRA.

Children

Echoes isn't directed to children under 13 (or under 16 where local law requires), and we don't knowingly collect their data. If you believe a child is using Echoes, contact us and we will delete the account.

Security

Data is encrypted in transit and at rest. Row-level security means each account can only read its own private notes, and server keys never reach your device.

Contact

Questions or requests: li_ze_bang@163.com. We reply within 30 days. If we make material changes to this policy, we'll tell you in the app before they take effect.