EchoNote Privacy Policy

Effective Date: October 6, 2026

1. Overview

EchoNote ("the App") is an audio recording and AI-powered transcription app for Android. Your privacy is important to us. This policy explains what data the App accesses, how it is used, and your choices.

2. Data We Collect

3. How Audio Data Is Processed

Finishing a new recording starts transcription and summarisation automatically. In proxy mode, the App sends the recording, its duration, transcript text, and processing preferences over HTTPS to our Cloudflare Worker. The proxy sends audio for transcription and text for summarisation to the provider selected by its configuration or your enabled BYOK preferences. The default configuration uses Groq; configured fallbacks may use other providers. Direct BYOK mode sends AI requests from your device to your selected providers. Available providers include:

The proxy handles recordings and text for the API calls and does not write audio, transcripts, summaries, or API keys to its usage database. Operational logs may contain request identifiers, provider names, and status information. Existing logs may also contain transcript excerpts from earlier proxy versions and follow Cloudflare retention settings. Each AI provider handles and may retain submitted content according to its service, account settings, and privacy terms; this policy does not promise that provider processing or retention ends with the API request. See the privacy information from Groq, Google Gemini, OpenAI, and Speechmatics.

4. BYOK (Bring Your Own Key)

Providing your own API keys is optional. Saved keys use the device's secure credential storage. In the current app, saved Groq, Gemini, and OpenAI keys are included in authenticated proxy-request headers, including usage checks and account-data deletion, even when a provider is disabled. The proxy uses enabled keys for provider API calls and uses a submitted key when you validate it. Direct BYOK mode sends AI requests and keys directly to the selected provider, but account and usage requests still use the Cloudflare proxy.

5. Data Sharing

EchoNote uses Google sign-in for authentication, Cloudflare for proxy processing and account usage records, AI providers for transcription and summarisation, and Firebase for analytics and crash diagnostics. These services receive the data described in this policy to provide their respective functions. If you use the App's share controls, you choose the recipient and share the selected recording or note through your device.

6. Advertising & Analytics

EchoNote does not display in-app ads. It uses Google Firebase Analytics and Crashlytics, which can collect app usage, device and installation identifiers, approximate location, and crash diagnostics. These services are active in the current Android app. See Google's Privacy Policy for its data handling practices.

7. Data Retention & Deletion

You can delete individual recordings and notes in the App. Open Settings → Delete account data → Delete to delete the usage record for your Google account from Cloudflare KV, remove local recordings, notes, and saved BYOK keys from this device, reset local preferences, and sign out. The usage record has no automatic expiry in the current implementation. This action does not delete your Google account or automatically delete data already held by Firebase, AI providers, or operational logging systems. Provider retention and deletion depend on the relevant service and account settings. For privacy or deletion requests that the App's controls cannot complete, contact us below.

If you no longer have the App installed, open EchoNote account usage record deletion, sign in with the same Google account, and select Delete server account usage record. Signing in alone does not delete data. This deletes the account-linked free-tier usage record on our server; other devices remain signed in and continued use can create a new record. Local recordings and notes must be deleted on each device. This page does not delete your Google account or automatically delete Firebase, AI-provider, or historical log records. To request help deleting associated data that these controls do not remove, email ysangy@gmail.com.

8. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. The updated version will be posted at this URL with a revised effective date.

10. Contact Us

If you have questions about this policy, please contact us at ysangy@gmail.com.


© 2026 EchoNote. All rights reserved.