Skip to content

Privacy Policy

Jump to bottom
Stepan V. edited this page Apr 26, 2026 · 1 revision

Privacy Policy

Last updated: April 26, 2026

Echo ("we", "our", or "us") is a solo-developed iOS app. This policy explains what data we collect, why, and your rights.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. DATA WE COLLECT

Account data

We create an anonymous account automatically when you first open Echo (via Firebase Auth). If you choose to sign in with Apple or Google, your name and email address are provided by Apple/Google and linked to your account.

Content you create

Flashcards, decks, and translation history you create are stored in Firebase Firestore and synced across your devices when signed in.

Usage analytics

We collect anonymised in-app events (e.g. "translation performed", "card reviewed") via Mixpanel to understand how the app is used and improve it. Mixpanel processes this data on EU servers. No event contains the text you translate.

Subscription data

If you purchase Echo Pro, your subscription status is managed by RevenueCat. We receive your subscription state (active/expired) and purchase history. Payment processing is handled entirely by Apple.

Device & preferences

Notification preferences and app settings are stored locally on your device (UserDefaults). We do not upload these.

2. HOW YOUR TEXT IS PROCESSED

Primary translation uses Apple's on-device Translation framework — your words never leave your device for basic translation.

For the AI enrichment feature, words and phrases you translate are sent to our AI proxy service (AIProxy) to generate example sentences, alternatives, and frequency scores using Anthropic Claude and DeepL. We do not store or use this text for any purpose other than returning results to you.

3. THIRD-PARTY SERVICES

The following third parties process data on our behalf:

  • Firebase (Google) — authentication and database. Privacy policy: firebase.google.com/support/privacy
  • RevenueCat — subscription management. Privacy policy: revenuecat.com/privacy
  • Mixpanel — analytics (EU data residency). Privacy policy: mixpanel.com/legal/privacy-policy
  • AIProxy — API proxy for Anthropic and DeepL. Privacy policy: aiproxy.pro/privacy
  • Google Sign-In — an optional sign-in method. Privacy policy: policies.google.com/privacy

4. DATA RETENTION

Your flashcard and account data are retained until you delete your account. You can request account and data deletion by emailing velichko.stepan@gmail.com — we will action it within 30 days.

Mixpanel analytics events are retained per Mixpanel's standard retention policy (90 days by default on our plan).

5. YOUR RIGHTS

If you are in the EU/EEA or UK, you have rights under GDPR / UK GDPR including:

  • Access to your personal data
  • Correction of inaccurate data
  • Deletion of your data
  • Data portability

To exercise any of these rights, email velichko.stepan@gmail.com.

  1. CHILDREN

Echo is not directed at children under 13. We do not knowingly collect personal data from children under 13.

  1. CHANGES

We may update this policy. Significant changes will be noted in app release notes. Continued use after changes constitutes acceptance.

  1. CONTACT

Stepan V., velichko.stepan@gmail.com

Clone this wiki locally