Privacy Policy
Last updated: May 4, 2026
This Privacy Policy describes how Echo ("we", "our", or "us") handles your data. We built Echo with privacy as a first principle. This policy explains what that means in practice.
TL;DR
- Audio recordings stay on your iPhone. They are never uploaded to our servers.
- Transcription is on-device by default, using Apple's Speech framework.
- AI features are opt-in. When you add your own API key (Anthropic, DeepSeek, Deepgram), only the transcript or text — never the audio file — is sent to your chosen provider, and only when you explicitly request a summary or chat.
- No analytics. No tracking. No third-party SDKs phoning home.
- You own your data. Export anytime. Delete anytime.
What we collect
Stored locally on your iPhone
- Audio recordings you create
- Transcripts generated from those recordings
- Photos you capture during recording
- AI-generated summaries, key points, decisions, and action items
- People and companies extracted from transcripts
- Optional: city/region tag (only if you enable location tagging in Settings)
- Optional: calendar event titles you've matched to recordings
Sent to third parties (only with your explicit configuration)
When you enter an API key in Settings:
- Anthropic (Claude) — receives meeting transcripts (text only, never audio) when you generate a summary, draft a follow-up, or ask Echo a question. Their privacy policy.
- DeepSeek — same as above if you choose DeepSeek as your provider. Their privacy policy.
- Deepgram — receives audio files when you enable Deepgram-based speaker diarization. Their privacy policy.
You can remove any API key at any time in Settings → AI. Once removed, Echo stops sending data to that provider.
Sent to us
Nothing. Echo does not have a server backend. We never receive your recordings, transcripts, or any usage data.
Optional integrations (read-only)
If you grant permission, Echo reads (never writes) from the following on your device:
- Microphone — to record audio. Required for the core function.
- Speech Recognition — to transcribe audio on-device.
- Calendar — to suggest meeting titles and notify you before scheduled events.
- Contacts — to fill in email/phone for people Echo has extracted from your transcripts.
- Location (when in use) — to tag the city of a recording if you enable it.
- Notifications — to alert you before upcoming meetings or when a call starts.
You can revoke any of these in iOS Settings → Echo at any time. Echo continues to function with reduced capability when permissions are denied.
What we do not do
- We do not collect analytics, telemetry, or usage data.
- We do not use third-party tracking SDKs.
- We do not sell, share, or monetize your data.
- We do not have an account system. There is no Echo account to sign up for.
- We do not advertise. There are no ads in Echo, ever.
Crash reporting (Sentry, optional)
Echo includes optional crash reporting via Sentry. By default, this is disabled. If you choose to enable it (in development builds, or by entering a Sentry DSN), only anonymous crash reports — never your recordings, transcripts, or personal data — are sent to a Sentry account that you configure. We do not run a shared Sentry instance.
Two-party consent
Recording laws vary by jurisdiction. Eleven U.S. states require all parties to a conversation to consent before it is recorded. Many countries have similar laws. You — not Echo — are responsible for compliance with applicable recording laws in your jurisdiction. Echo prompts you to disclose recording before your first session. We strongly recommend you disclose recording to all participants regardless of legal requirement.
Children
Echo is not directed to children under 13. We do not knowingly collect data from children under 13.
Changes to this policy
We may update this policy. Material changes will be reflected in an updated "Last updated" date. Because Echo has no account system, we cannot notify you directly — please check back.
Contact
Privacy questions: phillipan14@gmail.com
This policy is short on purpose. Privacy claims should be auditable. If anything here surprises you, the source code answers it: Echo is built to do exactly what this document says, and nothing more.