Privacy Policy

Last updated: March 9, 2026

Echo ("we", "us", "our") is operated by HuysStyle. This policy explains what data we collect, why, and how we protect it.

1. What we collect

When you use Echo, we collect:

Account data: email address, name (optional), authentication provider (Google, Apple, or email/password).
Audio recordings: recordings you choose to capture through the app. Audio is uploaded to our servers for transcription only.
Transcripts and notes: the text output generated from your recordings, including summaries and action items.
Usage data: minutes used per month, feature usage, app version, device type. No device identifiers are stored.
Payment data: processed by Stripe. We never see or store your full card number.

2. How we use your data

To provide transcription, summarization, and note-taking services.
To track your usage against your plan limits.
To send transactional emails (welcome, usage alerts, receipts).
To improve the service based on aggregate, anonymized usage patterns.

3. Audio processing

Your audio is sent to AssemblyAI for transcription. AssemblyAI processes audio in real-time and does not retain your recordings after transcription is complete. AI summaries are generated via Anthropic's Claude API through our secure backend. Neither AssemblyAI nor Anthropic uses your data to train their models.

4. Data storage and security

Your data is stored on Supabase (hosted in the EU). All data is encrypted in transit (TLS 1.3) and at rest. Row-Level Security ensures you can only access your own recordings and notes. Audio files are stored in user-scoped encrypted buckets.

5. Data sharing

We do not sell your data. We share data only with:

AssemblyAI - for transcription processing.
Anthropic (Claude API) - for AI summary generation.
Stripe - for payment processing.
Resend - for transactional emails.

All processors are bound by data processing agreements.

6. Your rights (GDPR)

If you are in the EU/EEA, you have the right to:

Access your personal data.
Rectify inaccurate data.
Delete your account and all associated data.
Export your data in a portable format.
Restrict processing in certain circumstances.
Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@echoecho.online. We will respond within 30 days.

7. Cookies

The Echo landing page does not set cookies. The Echo app uses only essential cookies for authentication session management. We do not use tracking cookies or third-party advertising cookies.

8. Data retention

Free accounts: notes are retained for 30 days. Pro accounts: notes are retained indefinitely while your account is active. When you delete your account, all recordings, transcripts, and notes are permanently deleted within 30 days.

9. Children

Echo is not intended for users under 16. We do not knowingly collect data from children.

10. Changes to this policy

We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

11. Contact

Data controller: HuysStyle
Email: privacy@echoecho.online
Website: huys.style