Privacy Policy

What Echo collects

Echo collects the minimum needed to work. Here's exactly what that is:

• Email address — collected via Supabase Auth when you sign up. Used for login and essential account emails only.
• Journal entries — the text you write, along with timestamps, AI-generated titles, mood scores, and themes extracted from your content.
• Conversation history — your messages to Echo and Echo's responses, stored so Echo can remember context within and across entries.
• Voice transcripts — if you use voice input, your audio is sent to OpenAI Whisper for transcription and then stored as text. The audio itself is not retained.
• Usage data — message count, streak, and subscription tier. Used to enforce plan limits and display your stats.
• Payment information — handled entirely by Stripe. Echo never sees your card number or billing details.

How it's used

Your journal entries and conversations are used to generate Echo's responses and your Insights. That's the core of the product — the AI reads what you've written to reflect it back.

Your email is used for authentication and transactional messages (like password resets). We do not send marketing emails without your explicit consent.

Usage data (message count, streak, tier) is used to enforce subscription limits and display your personal stats within the app.

Your data is never sold to third parties. It is not used to train AI models.

Third-party services

Echo uses the following external services to operate:

• Supabase — hosts the database and authentication. Your data is stored on Supabase servers.
• Anthropic Claude — powers AI responses, insight generation, and entry analysis. Entry content is sent to Anthropic's API to generate responses.
• OpenAI Whisper — used for voice transcription when you record audio. Audio data is sent to OpenAI for processing.
• Stripe — handles subscription billing. Payment information is collected and stored by Stripe directly.

Your rights

You can request deletion of your account and all associated data at any time by emailing us at hello@echo.so. We'll process deletion requests within 30 days.

Journal entry export is coming soon. When available, you'll be able to download all your entries as a plain text or JSON file directly from your account settings.

Data retention

Your data is retained for as long as your account exists. If you delete your account, all associated entries, conversations, and profile data are permanently deleted. Stripe may retain billing records independently as required by law.

Contact

Questions about this policy? hello@echo.so