Privacy Policy

We follow a minimal data collection philosophy. Here's exactly what we collect:

What We DO NOT Collect:

• Your text content: In Free Mode, text is sent to your configured AI provider (OpenAI, Anthropic, Google, etc.). In Pro Mode, text is sent to OpenAI under Echoo's managed project. Echoo does not store processed text content, except where you turn on Memory for a command - see Section 6.
• Your prompts: We do not store the instructions or prompts you use, except where you turn on Memory for a command - see Section 6.
• AI responses: We do not store AI responses, except where you turn on Memory for a command - see Section 6.
• Your Free Mode API keys: Stored locally in Apple Keychain on your device only.
• Account and billing: If you create an echoo.ai account, Supabase processes your email and auth credentials. For Pro Mode subscriptions, Paddle processes your name, payment method, and billing address as Merchant of Record. This is separate from your AI text content.
• File contents or paths: We do not store your file contents or paths.

We use usage patterns and issue signals to improve Echoo and fix problems.

Analytics Events We Collect:

• app_launched: Timestamp only - indicates the app was opened.
• command_executed: Command type (e.g., "translate"), AI provider name, model name, success/failure status, is_custom (whether the command is user-created).
• command_failed: Error type only (e.g., "network_error", "rate_limit").
• custom_command_created: Timestamp only - indicates a custom command was created.
• dictation_completed: Language, mode (hold/toggle), behavior (inline/popup), has_post_processing.
• voice_instruction_completed: Language, mode, provider name, model name.
• transcription_failed: Command name, error type.
• voice_model_installed: Timestamp only - indicates the voice model was downloaded.
• voice_model_deleted: Timestamp only - indicates the voice model was removed.

Device Information (attached to all events):

• app_version: The version of Echoo you're using.
• build_number: The specific build number.
• os_version: Your macOS version.

Microphone Access:

Echoo's voice dictation feature uses your microphone to record audio. Audio is processed entirely on your device by the on-device Parakeet speech-to-text model and is immediately deleted after transcription. Audio is never sent to Echoo servers or any external service.

Screen Recording Access:

Echoo's optional Screen Context feature captures screenshots of your screen to provide context to your chosen AI provider. Screenshots are sent directly to the AI provider you have configured (e.g., OpenAI, Anthropic, Google) and are never stored on your device or sent to Echoo servers.

We use the minimal analytics data we collect solely to:

• Understand which features are most valuable to users.
• Identify and fix bugs and errors.
• Prioritize development of new features.
• Ensure compatibility across macOS versions.

We do not sell, rent, or share your data with third parties for marketing purposes.

Your Free Mode API keys are stored in Apple Keychain - the same secure, encrypted storage that macOS uses for your passwords and certificates. We use Apple's Security framework directly (SecItemAdd, SecItemCopyMatching) to protect them.

• Free Mode API keys stay on your device.
• Free Mode API keys are not transmitted to Echoo servers.
• Keys are protected by macOS system-level encryption.

We do not sell your personal data. We share data only with the following processors, each under a data processing agreement or their applicable terms:

• Paddle - Merchant of Record for Pro Mode subscriptions. Processes your name, payment method, billing address, and transaction history. Echoo receives subscription status and plan metadata, not full card details.
• Supabase - account authentication. Processes your email and auth credentials to operate your echoo.ai account.
• OpenAI - in Pro Mode, your processed text is sent to OpenAI under Echoo's managed project. Where Memory is on for a command, OpenAI also retains that command's conversation history under the same project. OpenAI may process this data in the United States under its applicable international transfer safeguards, including Standard Contractual Clauses where required.
• Mixpanel - product analytics for the macOS app under a data processing agreement.
• Google Analytics - consent-based website analytics. Google receives the limited website usage data described in Section 6 only after you accept analytics.
• Your chosen AI provider (Free Mode) - in Free Mode your text goes directly to the provider you configure, under that provider's terms.

We do not share any data with third parties for marketing purposes.

To enforce your monthly Pro Mode credit allowance (and the introductory credit allowance), Echoo sends usage counts and subscription status to api.echoo.ai. We count successful Pro Mode commands. We do not store the content of your commands or responses on Echoo servers. Where Memory is on for a command, Echoo stores a reference to that command's OpenAI conversation - not the text held within it.

Memory is an optional, per-command feature on the Pro and Max plans. It is off by default, and you turn it on for each command separately.

When Memory is on for a command, that command keeps an ongoing conversation with OpenAI under Echoo's managed project. The command's earlier requests and their results are retained in that conversation and are sent with each new execution, which is what lets results follow your names, terminology, and tone. Echoo's own servers store a reference to that conversation and the command it belongs to - not the text of your requests or results.

This is the one case where text you process is retained after a command finishes. For every command with Memory off, and for all Free Mode usage, requests are not retained.

A conversation is retained until you reset that command's Memory, or until it reaches its size limit, at which point the command starts a fresh conversation. You can reset a command's Memory at any time in Settings, which ends the retained conversation for that command. Memory is not available in Free Mode.

The echoo.ai website uses Google Analytics 4 only after you choose Accept analytics. We use it to understand consenting visits, traffic sources, pages viewed, and Echoo download starts. We do not use Google Analytics for advertising, remarketing, Google Signals, or cross-device identification.

When enabled, Google Analytics may process page paths and titles, referrer and campaign parameters, approximate location derived from network information, browser and device details, and download events. We remove non-campaign query parameters from analytics page locations and exclude the /pay checkout route. We do not intentionally send text content, form values, email addresses, payment details, or Paddle transaction identifiers to Google Analytics.

Google Analytics uses _ga and _ga_<container-id> cookies to distinguish consenting browsers and maintain session state. These cookies may remain for up to two years unless you withdraw consent or delete them earlier. GA4 event-level data is retained for 14 months.

For visitors in the EU and UK, the legal basis for Google Analytics is consent. You may reject analytics without losing site functionality and may change your choice at any time through Cookie preferences in the site footer. Withdrawal stops future analytics collection and removes accessible Google Analytics cookies from this site.

Google may process analytics data in the United States and other countries using its applicable international transfer safeguards, including Standard Contractual Clauses where required. See Google's privacy documentation for details.

We also use local storage for essential theme and accessibility preferences and to remember your analytics choice. The site requests an anonymous download counter from CounterAPI, fetches our Product Hunt badge from Product Hunt, and loads Paddle's checkout script only on the payment page.

We implement industry-standard security measures. Free Mode API keys are protected by Apple Keychain encryption. Analytics and account data in transit is encrypted using TLS. Billing data is handled by Paddle under its security standards.

Account data is retained while your account is active and deleted upon request. Billing records are retained as required by tax and accounting law. macOS app analytics events are retained in aggregated form for product improvement. Where Memory is on for a command, that command's conversation history is retained until you reset it or it reaches its size limit. Consent-based GA4 event data is retained for 14 months, while GA4 cookies may remain for up to two years unless consent is withdrawn or the cookies are deleted earlier.

Depending on where you live, you may have rights over your personal data:

• EU and UK (GDPR and UK GDPR): the right to access, rectify, erase, restrict processing, data portability, and object. Where processing relies on legitimate interests, you may object to that processing.
• California (CCPA and CPRA): the right to know, delete, correct, and opt out of the sale or sharing of your personal information. Echoo does not sell your personal data.
• EU Right of Withdrawal: you may withdraw from a Pro Mode subscription within 14 days of purchase. Where you expressly request immediate digital delivery, acknowledge that delivery begins right away, and use a managed credit, you may waive the 14-day withdrawal right for that billing cycle as permitted by law. See our Refund Policy for details.

If you use Memory, you can delete a command's retained conversation yourself at any time by resetting that command's Memory in Settings.

To exercise any right, contact us at [email protected]. We will respond within the period required by applicable law.

For transparency under the EU Digital Services Act: Echoo, operated from Israel, is the service provider and acts as the data controller for the personal data described in this policy. The single point of contact for legal correspondence is [email protected]. Paddle acts as the Merchant of Record for Pro Mode subscriptions and is responsible for billing, tax, and refund processing.

If you have questions about this Privacy Policy, please contact us at:

[email protected]

Echoo, Israel. Postal address available on request via the email above.