Privacy Policy

We follow a minimal data collection philosophy. Here's exactly what we collect:

What We DO NOT Collect:

• Your text content: The text you process with Echoo is sent directly to your AI provider (OpenAI, Anthropic, Google, etc.) - we never see it.
• Your prompts: We have no idea what instructions or prompts you're using.
• AI responses: We never see what the AI sends back to you.
• Your API keys: Stored locally in Apple Keychain on your device only.
• Account sign-in: If you create a free echoo.ai account, we process the credentials you provide (such as email) to authenticate you and operate the Service. This is separate from your AI text content, which we do not access.
• File contents or paths: We have no visibility into your files.

We only care about usage patterns and issues - so we can improve Echoo and fix problems.

Analytics Events We Collect:

• app_launched: Timestamp only - indicates the app was opened.
• command_executed: Command type (e.g., "translate"), AI provider name, model name, success/failure status, is_custom (whether the command is user-created).
• command_failed: Error type only (e.g., "network_error", "rate_limit").
• custom_command_created: Timestamp only - indicates a custom command was created.
• dictation_completed: Language, mode (hold/toggle), behavior (inline/popup), has_post_processing.
• voice_instruction_completed: Language, mode, provider name, model name.
• transcription_failed: Command name, error type.
• voice_model_installed: Timestamp only - indicates the voice model was downloaded.
• voice_model_deleted: Timestamp only - indicates the voice model was removed.

Device Information (attached to all events):

• app_version: The version of Echoo you're using.
• build_number: The specific build number.
• os_version: Your macOS version.

Microphone Access:

Echoo's voice dictation feature uses your microphone to record audio. Audio is processed entirely on your device by the on-device Parakeet speech-to-text model and is immediately deleted after transcription. Audio is never sent to Echoo servers or any external service.

Screen Recording Access:

Echoo's optional Screen Context feature captures screenshots of your screen to provide context to your chosen AI provider. Screenshots are sent directly to the AI provider you have configured (e.g., OpenAI, Anthropic, Google) and are never stored on your device or sent to Echoo servers.

We use the minimal analytics data we collect solely to:

• Understand which features are most valuable to users.
• Identify and fix bugs and errors.
• Prioritize development of new features.
• Ensure compatibility across macOS versions.

We do not sell, rent, or share your data with third parties for marketing purposes.

Your API keys are stored in Apple Keychain - the same secure, encrypted storage that macOS uses for your passwords and certificates. We use Apple's Security framework directly (SecItemAdd, SecItemCopyMatching) to ensure maximum protection.

• Keys never leave your device.
• Keys are never transmitted to Echoo servers.
• Keys are protected by macOS system-level encryption.

We do not sell your personal data. Analytics data is processed by Mixpanel under their data processing agreement. We do not share any data with third parties for marketing purposes.

We use cookies and local storage to store your preferences (such as theme and accessibility settings) and session state. You can control cookie preferences through your browser settings or our on-site cookie consent tool.

We implement industry-standard security measures. Your API keys are protected by Apple Keychain encryption. Analytics data in transit is encrypted using TLS.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. Since we collect minimal anonymous analytics, most data cannot be tied to you personally. Contact us at privacy@echoo.ai for any privacy-related requests.

If you have questions about this Privacy Policy, please contact us at:

privacy@echoo.ai