Legal

Privacy Policy

Last updated: July 10, 2026

Echois is a private family memory journal. We built it to help you preserve the moments that matter most, and we take the privacy of your personal memories seriously. This policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

We collect the following types of information when you use Echois:

• Account information. Your email address, display name, and profile details you provide during sign-up and onboarding.
• Journal content. Text entries, photos, videos, and audio recordings you add to your journal. This content is private by default and only visible to people you explicitly invite — either as a co-author of a shared journal, or as a connection you choose to share individual entries with. See "Journal Sharing" below.
• Voice transcripts. If you use voice memos and have an active Plus subscription, your audio recordings are sent to OpenAI for transcription using the Whisper model. Transcripts are stored in your private journal. Audio is processed solely for transcription and is not used to train AI models.
• Photo descriptions. If you turn on AI photo analysis in Settings, photos may be sent to Anthropic's Claude to generate descriptive text used for search. This is optional and off by default.
• AI writing prompts. To generate personalized journal prompts, we send Anthropic's Claude limited profile context you've provided — your display name, why you journal, and the topics, people, or places you've told us you care about. This happens automatically as part of the prompts feature and is not used to train AI models.
• Location data. If you tag an entry with a location, we request your device's GPS coordinates at that moment, use them to look up a place name (city, region, country), and store both the coordinates and the place name with the entry. You can replace this with free text instead, which discards the coordinates. We only access your location when you take this action — never in the background.
• Subscription information. In-app purchases are processed by Apple (iOS) or Google (Android) and managed by RevenueCat. We receive your subscription status and tier but do not store credit card or payment details.
• Usage and diagnostic data. Basic crash reports and performance data collected by Sentry. This does not include the content of your journal entries.
• Device information. Device type, operating system version, and push notification tokens used to deliver optional daily prompts and reminders.
• Website analytics. Our public website at echois.app (including these legal pages) uses Google Analytics to understand traffic. This does not apply inside the app itself.

How We Use Your Information

• To provide, maintain, and improve the Echois service.
• To sync your journal content securely across your devices.
• To deliver optional daily writing prompts and notifications you have opted into.
• To manage your subscription and unlock Plus features.
• To diagnose technical issues, fix bugs, and prevent abuse.
• To send you transactional emails such as journal sharing invitations and account notices.

How We Share Your Information

We do not sell your personal information. We share data only with the following third-party service providers that help us operate Echois:

• Supabase — database, authentication, file storage, and backend infrastructure.
• RevenueCat — subscription management and in-app purchase processing.
• OpenAI — voice memo transcription via the Whisper API (Plus subscribers only).
• Anthropic — optional AI photo descriptions and AI-generated journal prompts, via the Claude API.
• Sentry — crash reporting and error diagnostics.
• Loops — transactional email delivery (e.g., journal sharing invitations).
• Resend — authentication email delivery (e.g., account confirmation and password reset).
• Expo / EAS — app delivery and push notification infrastructure.
• Google Analytics — anonymized traffic analytics on our public website only, not inside the app.

We may also disclose information if required by law or to protect the rights, safety, and property of Echois or its users.

Journal Sharing

Echois offers two ways to share your content, and you control both:

• Shared journals. You can invite people as co-authors of a shared journal. Co-authors can read every entry in that journal. You can remove a co-author's access at any time from within the app.
• Connections. You can invite people as connections. Connections only see the individual entries you specifically choose to share to your feed — never your full private journal.

We never share your journal content with anyone you have not explicitly invited through one of these two paths.

Data Retention

We retain your account and journal content for as long as your account is active. If you delete your account through the app, your data is permanently deleted within 30 days. Encrypted backups may retain data for up to 90 days following deletion.

If you've ordered a printed edition through Echois Editions, we retain that edition's approved content — its photos, text, and layout — for up to one year after account deletion, solely so you can reorder it. Contact us at admin@echois.app if you'd like that content deleted sooner.

Your Rights

You have the right to access, correct, or delete your personal information at any time. Most account and content management is available directly within the app. To request a copy of your data or complete account deletion, contact us at admin@echois.app.

Children's Privacy

Echois is designed for adults to document their life, which may include family memories with children. Children do not create accounts or submit data directly. Echois is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at admin@echois.app and we will delete it promptly.

Security

We protect your data using industry-standard measures including encrypted connections (TLS), row-level security policies in our database, and secure credential storage. No system is perfectly secure, but we continuously work to protect your information.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app or by email. Continued use of Echois after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy? Reach us at admin@echois.app.