Privacy Policy

Echokey collects only what's necessary to provide the service:

• Account data — your email address and name when you create an account.

• Usage statistics — word counts, session durations, and feature usage (aggregated, not the content of your dictations).

• Crash reports — anonymous error logs to help us fix bugs. You can opt out in Settings → Data & Privacy.

We do not collect, store, or transmit the audio you record or the text you dictate. Everything stays on your device.

We use your data to:

• Provide and maintain the Echokey service

• Sync your dictionary, snippets, and settings across devices (if you're signed in)

• Send important product and account emails

• Improve the product through aggregated analytics

We do not sell your data. We do not share it with third parties except as described below.

Echokey uses the following third-party services:

• Supabase — authentication, database, and file storage (hosted in EU/US)

• OpenAI Whisper — audio transcription. Your audio is sent to OpenAI's API and is subject to their data retention policy. OpenAI does not use API data to train their models.

• Paystack — payment processing. We never see or store your full card details.

Your account data is stored securely on Supabase-managed infrastructure. Your transcription history is stored locally on your device in an encrypted SQLite database.

If you delete your account, all cloud data is permanently deleted within 30 days. Local data is removed when you uninstall Echokey.

You can:

• Export your data at any time from Settings → Data & Privacy

• Delete your account and all associated data from Settings → Account

• Opt out of anonymous analytics in Settings → Data & Privacy

• Contact us at privacy@echokey.app for any data-related requests

Questions about this policy? Email us at privacy@echokey.app — we'll respond within 48 hours.