Privacy Policy

Welcome to Echo Loop. This Privacy Policy explains how Echo Loop ("we", "us", or "our") collects, uses, and protects your personal information when you use our mobile applications, website, and related services (collectively, the "Services").

By using Echo Loop, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Services.

1. Information We Collect

1.1 Account Information

When you create an account, we may collect:

• Email address (required for account creation)
• Name (optional, for display purposes)
• Profile picture (optional)
• Authentication credentials (when using Google or Apple Sign-In)

1.2 Learning Data

To provide our language learning services, we collect:

• Learning progress (lessons completed, practice time, proficiency level)
• Bookmarked sentences and vocabulary (your saved learning content)
• Spaced repetition data (review schedules and performance)
• Audio playback preferences (speed, loop settings)

1.3 Audio Content

• Uploaded audio files (for transcription and learning)
• Transcription data (AI-generated subtitles and timestamps)
• Custom annotations (highlights and notes you create)

Audio files are processed by our AI transcription providers to generate word-level timestamps. Audio data is transmitted securely and processed only for the purpose of transcription. We do not use your audio data for training AI models.

1.4 Device and Usage Information

We automatically collect:

• Device information (device type, operating system, app version)
• Log data (access times, screens viewed, crash reports)
• IP address (for security and analytics purposes)

1.5 Payment Information

If you subscribe to premium services:

• Payment processing is handled by third-party providers (Apple App Store, Google Play, or Stripe)
• We receive only a confirmation token and subscription status
• We do not store your credit card or payment details

2. How We Use Your Information

We use the collected information to:

• Provide Services: Deliver personalized learning experiences, sync progress across devices, and manage your account
• Improve Services: Analyze usage patterns, fix bugs, and develop new features
• AI Transcription: Process uploaded audio through AI providers to generate word-level timestamps
• Communication: Send service updates, respond to inquiries, and provide customer support
• Security: Protect against fraud, unauthorized access, and other illegal activities

3. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties. We do not share your data with advertisers and do not monetize your personal information in any way. Your data is used solely for operating and improving the Services.

4. Information Sharing

We may share information only in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party providers for:

• AI Transcription: Deepgram, OpenAI, Google Cloud, or Azure (for speech-to-text processing)
• Cloud Storage: Supabase, AWS (for data storage)
• Analytics: PostHog (for usage analytics, no personal data shared)
• Payment Processing: Stripe, Apple, Google (for subscription management)

These providers process data strictly to operate our Services and are bound by confidentiality agreements.

4.2 Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect the rights, property, and safety of Echo Loop, our users, or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmission uses TLS/SSL encryption
• Access Control: Restricted access to personal data on a need-to-know basis
• Secure Storage: Data stored with encrypted cloud providers
• Regular Audits: Periodic security reviews and updates

While we strive to protect your information, no method of transmission over the Internet is 100% secure. Please use strong passwords and protect your account credentials.

6. Data Retention

• Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Learning Progress: Retained while your account is active to maintain your learning history.
• Uploaded Audio: Retained until you delete them or close your account.
• Analytics Data: Retained in aggregated, anonymized form for service improvement.
• Payment Records: Retained as required by law for tax and accounting purposes.

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your learning data in a portable format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at support@echo-loop.top or use the in-app settings.

8. CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request that we delete the personal information we have collected from you
• Right to Opt-Out: You have the right to opt out of the sale of your personal information (though we do not sell personal data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Designate an Agent: You may designate an authorized agent to make requests on your behalf
• Right to Data Portability: You may request your data in a readily usable format

To exercise these rights, contact us at support@echo-loop.top.

9. GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of all personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request that we restrict the processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Our legal basis for processing your data includes: performance of a contract (providing the Services), legitimate interests (improving the Services and ensuring security), and consent (where applicable).

10. Children's Privacy

Echo Loop is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@echo-loop.top, and we will promptly delete such information.

For users between 13 and 18 years old, parental or guardian consent is recommended.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws, including standard contractual clauses where required.

12. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting a notice within the app
• Sending an email to registered users
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Services after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: support@echo-loop.top

Response Time: We aim to respond to all inquiries within 10 business days.

Thank you for trusting Echo Loop with your language learning journey. We are committed to protecting your privacy and providing a secure learning environment.