Echora Privacy Policy
This Privacy Policy is provided for general information and is not legal advice.
1. Overview
Echora is a private thought-recording and AI reflection app provided by YONGWEI RUAN. This Privacy Policy explains what information Echora collects, how we use it, how third-party services help us operate Echora, and how you can manage or delete your information.
Echora is designed for personal thoughts, ideas, images, and voice notes. Because this content may be sensitive, we aim to collect only what is needed to provide the service, protect the app, process subscriptions, and improve reliability.
2. Information we collect
| Category | Examples | Primary purpose |
|---|---|---|
| Account information | Email address, Apple or Google sign-in identifiers, Supabase user ID, anonymous guest account ID, profile name, avatar. | Authentication, account management, personalization, quota enforcement, and entitlement tracking. |
| User content | Thought text, uploaded image attachments, image captions, voice recordings, transcriptions, Review conversation messages, daily reflections, related-thought links. | Saving your thoughts, showing your history, and generating AI organization and reflections after you allow AI data sharing. |
| AI processing data | Prompts derived from your thoughts, generated tags/categories, embeddings, AI job status, provider metadata, usage counters. | AI transcription, analysis, semantic search, related idea discovery, Review replies, Daily Review, cost and quota control. |
| Subscription data | RevenueCat customer ID, App Store product ID, entitlement status, renewal/expiration state, purchase environment. | Providing Echora Pro, restoring purchases, applying paid quotas, fraud prevention, and support. |
| Technical data | App interactions needed for functionality, crash and error diagnostics, device and app version, timestamps, IP address and network metadata normally handled by service providers, backend function errors, and usage events needed for quotas or security. | Security, debugging, service reliability, abuse prevention, quota enforcement, and support. |
3. How we use information
- To create, authenticate, and maintain your Echora account, including guest accounts.
- To save, display, and organize your thoughts, images, voice notes, and profile information.
- To provide AI features after you allow AI data sharing, such as transcription, categorization, embeddings, related ideas, Review replies, and Daily Review.
- To apply Free and Pro usage limits and fair-use protections.
- To process subscriptions, restore purchases, and sync entitlement status through RevenueCat and the App Store.
- To protect Echora from abuse, debug issues, improve reliability, and comply with legal obligations.
4. AI data sharing and consent
Echora asks for your permission before sending personal content to a third-party AI service. If you allow AI features, Echora may send text thoughts, image captions, voice recordings for transcription, transcribed voice text, Review conversation messages, and recent thought content used for Daily Review, tags, embeddings, and related thoughts to Google Gemini, provided by Google, through Echora Supabase Edge Functions.
Current image attachments are stored privately in Supabase Storage and are not sent to Google Gemini for image analysis. If Echora later adds image analysis that sends image files to an AI provider, we will update this Privacy Policy and ask for any required permission before that sharing occurs.
You can decline AI features or turn them off from Account Management. If AI features are off, Echora keeps allowing basic thought and image-caption saving, but it will not send your personal content to Google Gemini for transcription, Review replies, tags, embeddings, or related thoughts.
We do not sell your thoughts. We do not intentionally use your private thoughts for advertising. We do not claim that AI output is medical, mental-health, legal, financial, or professional advice.
5. Third-party services
Echora currently relies on service providers that help operate the app:
- Supabase: authentication, database, private storage, Edge Functions, usage quotas, and account deletion workflows.
- Apple: Sign in with Apple, App Store purchases, subscription management, payment processing, refunds, and device permission controls.
- Google: Google sign-in where you choose to use it.
- RevenueCat: subscription entitlement management and purchase event syncing.
- Sentry: crash and error diagnostics so we can identify reliability problems. Echora configures Sentry not to intentionally attach private thought content, request bodies, or default personal information to events.
- Google Gemini, provided by Google: AI transcription, embeddings, analysis, Review replies, related thoughts, and Daily Reviews after you allow AI data sharing.
These providers process information according to their own terms and privacy practices. We share only what is reasonably needed for them to provide their services to Echora, require service providers to protect personal data under their applicable data protection, security, and confidentiality terms, and do not share your private content with third-party advertising networks.
6. Storage and security
Echora stores user content in Supabase databases and private Supabase Storage buckets. User records are associated with your Echora account ID and protected by row-level security and authenticated access controls. No online service can be guaranteed perfectly secure, but we use reasonable technical and organizational measures to protect your information.
7. Tracking, advertising, and sale of data
Echora does not use your content for third-party advertising, does not sell your personal information, and does not use third-party advertising trackers in the app. If Echora's practices change, we will update this Privacy Policy and relevant app-store privacy disclosures.
8. Retention
Echora keeps your account information and saved content while your account remains active or as needed to provide the service. AI job records, usage counters, entitlement records, and diagnostic metadata may be kept as needed for reliability, quota enforcement, subscription support, security, legal compliance, and dispute resolution.
9. Your choices
- You can choose what thoughts, images, and audio to submit, and you can stop submitting any category of content at any time.
- You can decline or turn off Echora AI features. When AI features are off, Echora will not send your personal content to Google Gemini.
- You can use supported sign-in methods or guest access where available.
- You can withdraw camera, microphone, and photo library permissions in iOS Settings. Some image or voice features may stop working if you withdraw those permissions.
- You can manage or cancel App Store subscriptions through your Apple Account settings.
- You can initiate account deletion from Echora's settings.
- You can contact us at echora.support@icloud.com for privacy questions or requests.
10. Account deletion
You can initiate deletion from Echora's account settings. Deletion removes your Echora account and associated personal data from active Echora records, including thoughts and private media, except where limited retention is required for legal, billing, fraud-prevention, security, or dispute-resolution reasons.
Deleting your Echora account does not automatically cancel an App Store subscription. You must cancel subscriptions through your Apple Account subscription settings. See Delete Account for more details.
11. Children
Echora is not intended for children under 13 or for anyone below the minimum age required by applicable law to use the service. If you believe a child has provided personal information through Echora, contact us at echora.support@icloud.com.
12. International use
Echora's backend services may process and store information in countries different from where you live, including the United States. By using Echora, you understand that your information may be processed in those locations.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify you, such as updating the effective date, posting a notice, or showing an in-app message.
14. Contact
For privacy questions, requests, or concerns, contact YONGWEI RUAN at echora.support@icloud.com.