Your Data, Your Control

Privacy isn't an afterthought - it's how Echoo is built. Let's start with what matters most.

This describes Free mode and BYOK (bring your own API key) mode. If you use a managed Pro or Max plan, Echoo routes your request through its own provider account to fulfill the command - see the Privacy Policy (opens in new tab) for exactly how that works.

What We Don't Collect

Here's what we never see, store, or have access to:

• Your text - the content you're processing stays between you and your AI provider
• Your prompts - we don't know what instructions you're sending
• AI responses - we don't know what you're getting back
• API keys - stored only on your device, never transmitted to us
• Personal information - no name, no email, no identity
• File contents or paths - nothing from your filesystem
• Anything identifying - we can't tell what you're working on

Your conversations with the AI are completely invisible to us. We have zero visibility into your prompts, your responses, or your content.

How Your Data Flows

In Free and BYOK mode, your text goes directly from your Mac to your AI provider (OpenAI, Anthropic, Google, etc.). We are not in the middle. We don't relay it, we don't intercept it, we don't process it. It's a private, direct connection - just you and the AI service you've configured.

Your sensitive documents, private messages, and confidential work never pass through our servers in this mode. (Managed Pro/Max plans are different - see the note above.)

What We Collect

We collect a small set of usage events tied to a random installation ID, not your identity - only to improve the app and fix bugs. Here's the full list:

• app_launched - a timestamp. We know the app was opened.
• command_executed - the command type (e.g., "translate"), AI provider, model, and success status.
• command_failed - the error type (e.g., "network_error"). Helps us fix issues.
• custom_command_created - a timestamp. We know a custom command was created.

Every event also includes: app version, build number, and macOS version.

That's the full list. No more, no less. We use this data solely to understand which features are popular, identify bugs, and prioritize improvements.

No Registration, No Identity

There is no login. No signup. No authentication. We don't know who you are - and we don't want to.

The only identifier is a random installation ID, and we have no way to link it to any person.

Your Keys Are Safe

In Free and BYOK mode, your API keys are stored in Apple Keychain - the same encrypted storage macOS uses for your passwords and certificates. We use Apple's native Security framework (SecItemAdd, SecItemCopyMatching) directly.

Your own keys never leave your device. They're never transmitted to us. They're protected with the same level of security as your system passwords. (Managed Pro/Max plans don't require your own key at all - Echoo's provider access is used instead.)

For processing that stays on the Mac, see the Ollama integration guide (opens in new tab), the private AI writing use case (opens in new tab), and the explanation of local LLMs (opens in new tab).