Privacy Policy

Information We Collect

We collect only what we need to provide you with a safe, meaningful experience. Here is what that includes:

• Account data: your display name, username, email address, bio, and profile picture. If you sign in with a third-party provider like Google, we only receive your name and email — never your password.
• Content you create: echoes, responses, direct messages, daily check-in answers, resonances, and bookmarks.
• Usage data: how you interact with the app, like which pages you visit and which features you use. This helps us understand what is working and what needs improvement.
• Device information: browser type, operating system, and general region. We do not track precise location.

How We Use Your Information

Everything we collect serves a clear purpose:

• To provide the service: displaying your profile, publishing your echoes, delivering messages, and powering notifications.
• To keep the community safe: content is reviewed through AI-powered safety checks to prevent harmful or abusive material from reaching others.
• To improve the experience: understanding usage patterns helps us make Echoes more intuitive, reliable, and welcoming.
• To communicate with you: sending sign-in emails, responding to support requests, and delivering notifications you have opted into.

How We Store and Protect Your Data

Your data is stored in an encrypted database managed by a trusted infrastructure provider. All information is encrypted in transit and at rest. Access is restricted to authorized systems, and we follow the principle of least privilege — no one sees more than they need to. We review our security practices regularly and strengthen them as the platform grows.

Information Sharing

We work with a small number of trusted services to keep Echoes running. These providers only receive the minimum data necessary to perform their function:

• Infrastructure and authentication: a trusted hosting provider handles sign-in and stores your account and content securely on our behalf.
• Error monitoring: when something breaks, a third-party service helps us capture technical details about the error. It does not receive the content of your echoes, responses, or messages.
• Automated safety review: published content passes through an automated moderation check before it goes live. The review is automatic, and the content is not retained by that service.

We do not sell, rent, or trade your personal information. We do not share your data with advertisers. Echoes has no ads and no intention of introducing them.

Your Rights and Choices

You are in control of your information. Here is what you can do at any time:

• Access and export your data: you can view all your echoes, responses, and profile information directly within the app.
• Delete your account: you may request permanent deletion of your account and all associated data by contacting support.
• Update your profile: change your display name, username, bio, or avatar from your profile settings whenever you like.
• Manage notifications: adjust which notifications you receive from your profile settings.

Cookies and Local Storage

Echoes uses cookies and local storage minimally — only for authentication sessions, language preferences, and theme settings. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. Your preferences stay on your device.

Children's Privacy

Echoes is not intended for anyone under the age of 13. We do not knowingly collect personal information from children. If we learn that a child under 13 has created an account, we will delete the account and all associated data promptly.

Changes to This Policy

If we make meaningful changes to this policy, we will update the effective date at the top of the page and notify you through the app. We encourage you to review this page from time to time. Continued use of Echoes after a change means you accept the updated policy.

Contact Us

If you have questions about this policy or want to exercise any of your rights, we are here to help. Reach out through our contact page.