Your Data, Your Control

Privacy isn't an afterthought - it's how Echoo is built. Let's start with what matters most.

What We Don't Collect

Here's what we never see, store, or have access to:

• Your text - the content you're processing stays between you and your AI provider
• Your prompts - we don't know what instructions you're sending
• AI responses - we don't know what you're getting back
• API keys - stored only on your device, never transmitted to us
• Personal information - no name, no email, no identity
• File contents or paths - nothing from your filesystem
• Anything identifying - we can't tell what you're working on

Your conversations with the AI are completely invisible to us. We have zero visibility into your prompts, your responses, or your content.

How Your Data Flows

When you use Echoo, your text goes directly from your Mac to your AI provider (OpenAI, Anthropic, Google, etc.). We are not in the middle. We don't relay it, we don't intercept it, we don't process it. It's a private, direct connection - just you and the AI service you've configured.

Your sensitive documents, private messages, and confidential work never pass through our servers.

What We Collect

We collect a small set of anonymous usage events - only to improve the app and fix bugs. Here's the full list:

• app_launched - a timestamp. We know the app was opened.
• command_executed - the command type (e.g., "translate"), AI provider, model, and success status.
• command_failed - the error type (e.g., "network_error"). Helps us fix issues.
• custom_command_created - a timestamp. We know a custom command was created.

Every event also includes: app version, build number, and macOS version.

That's the full list. No more, no less. We use this data solely to understand which features are popular, identify bugs, and prioritize improvements.

No Registration, No Identity

There is no login. No signup. No authentication. We don't know who you are - and we don't want to.

The only identifier is a random installation ID, and we have no way to link it to any person. You're just an anonymous user.

Your Keys Are Safe

Your API keys are stored in Apple Keychain - the same encrypted storage macOS uses for your passwords and certificates. We use Apple's native Security framework (SecItemAdd, SecItemCopyMatching) directly.

Your keys never leave your device. They're never transmitted to us. They're protected with the same level of security as your system passwords.