Privacy Policy

Introduction

Echo ("we," "our," or "us") is operated by Stage5. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. Please read this privacy policy carefully. By using Echo, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Username and display name
• Password (securely hashed - we never store plain text passwords)
• Profile picture (optional)
• Bio (optional)
• Apple ID or Google ID (if you sign in via OAuth)

Reflection Content

As part of the core app experience, we collect:

• Daily questions presented to you
• Your written responses
• AI-generated grades and feedback
• Streak and completion data
• Submission timestamps

Profile Insights

To personalize your experience, our AI analyzes your reflections to extract:

• Interests and topics you write about
• Personal traits and values

This data is used solely to tailor questions and improve your reflection experience.

Typing Metadata

To maintain the integrity of the reflection experience and prevent copy-pasting, we collect:

• Keystroke count
• Typing timing patterns

This metadata is used only for anti-cheat verification and is not shared with third parties.

Device & Preferences

• Push notification tokens (for daily reminders)
• Timezone (to deliver questions at appropriate times)
• Theme preference (stored locally on your device)

Subscription Information

• Subscription tier (free or pro)
• Subscription expiration dates
• Transaction identifiers (via RevenueCat)

We do not store or have access to your payment card details. All payment processing is handled securely by Apple's App Store and RevenueCat.

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Echo service
• Generate personalized daily reflection questions
• Grade your responses and provide AI feedback
• Track your streaks and progress
• Send push notifications (daily reminders, streak alerts)
• Send transactional emails (password resets, account notifications)
• Process and manage subscriptions
• Enable the public feed feature (only for content you choose to share)
• Improve and optimize the app experience
• Prevent fraud and enforce our terms of service

Public Feed & Shared Content

Echo includes an optional public feed where you can share polished versions of your reflections. When you choose to share a response:

• Your display name and profile picture will be visible
• The shared reflection will be visible to other Echo users
• You can delete shared content at any time

Sharing is always optional. Your private reflections are never shared unless you explicitly choose to publish them.

Third-Party Services

We use the following third-party services to operate Echo:

Each third-party service has its own privacy policy governing its use of your data. We encourage you to review their policies.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Secure password hashing
• JWT-based session management
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You can request deletion of your account and associated data at any time.

Upon account deletion:

• Your profile information will be permanently deleted
• Your private reflections will be permanently deleted
• Any publicly shared content will be removed from the feed
• Some anonymized, aggregated data may be retained for analytics purposes

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of certain data processing activities
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at the email address below.

Children's Privacy

Echo is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Address:
Stage5
30 N Gould St Ste N
Sheridan, WY 82801
United States