Privacy

Who runs Echo

Echo is a private, invite-only app run by the person who invited you (the administrator). They decide how your information is used. For any question or request about your data, contact them directly.

What Echo keeps

• Your account: your email address and a securely stored password.
• Your profile, if you add it: your name, photo, birthday, note and story.
• Your chats: everything you send (texts, voice notes, photos, links) and everything the characters send back.
• Calls: when you call a character, what's said is turned into text so they remember it.
• Your phone number, only if you turn on real phone calls.
• Notes Echo writes about you from your chats (the “What they know” section on a profile), so characters remember you.
• Your settings, and what's needed to send you notifications if you allow them.
• Your credits: your plan, your balance, what used them, and a reference to your payments (never your card details).

Who can see it

Your chats are tied to your account and nobody else using Echo can see them. The administrator can read conversations, and the notes Echo keeps about you, to test and improve Echo while it's being built. Nobody else reads them, and your information is never sold or used for advertising.

How the characters work

Everyone you talk to in Echo is an AI character. To write their messages, voices, pictures and calls, the relevant parts of your chats are sent to the AI services below. They process it to produce a reply and don't get your account details.

Services that help run Echo

• Supabase: your account, chats and files are stored here.
• Vercel: hosts the app.
• Anthropic (Claude): writes the characters' messages and the notes about you.
• OpenAI: voices, understanding your voice notes, pictures, short videos and calls.
• ElevenLabs: voices, voice notes and calls.
• Twilio: real phone calls, only if you turn them on.
• Stripe: payments, if you top up or pick a plan. Your card details go to Stripe, not to Echo.
• Apple, Google and your browser's notification service: notifications, if you allow them.
• Search services for GIFs (GIPHY), songs (Apple) and videos you share: only what you search for or send.

Some of these are in the United States, so your information may be handled outside the UK under their data protection terms.

How long it's kept

Until you delete it. In Settings you can have chats removed automatically after 30, 90 or 365 days, delete any chat, or delete your whole account and everything in it. Deleted information can stay in our providers' backups for a short time.

Cookies

Echo only uses the cookies it needs to keep you signed in. Some settings (your theme, a message you were typing) are saved on your own device. No ads, no analytics, no tracking.

Your rights

You can download a copy of your data and delete it from Settings at any time. You can also ask the administrator to correct it, tell you what's held, or stop using it. If you're unhappy with how your information is handled, you can complain to the Information Commissioner's Office (ico.org.uk).

Adults only

Echo is for people aged 18 or over. If we learn that someone under 18 has an account, it will be deleted.