Echoes Privacy Policy

Effective Date: May 1, 2025

Your privacy is our priority. This Privacy Policy explains how Echoes (“we”, “us”, “our”) collects, uses, and protects your information. This Policy applies to all users worldwide, including those in the European Economic Area (EEA), United Kingdom (UK), and California.

1. Information We Collect

We collect only the information necessary to provide and improve Echoes, including:

• Account details: Such as your name, email address, and authentication credentials (including those from third-party sign-in providers you choose).
• Usage data: Your listening history, playlists, tags, and related activity within the app.
• Profile settings: Including whether your profile is public or private.
• Cookies: Used only for authentication and to remember your settings and preferences for your convenience.

We do not collect data for advertising or analytics purposes.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve Echoes.
• Track your listening history.
• Enable features such as playlists, tags, and statistics.
• Allow you to share your profile if you choose to make it public.
• Communicate with you about your account or important updates.
• Comply with legal obligations.

3. Legal Bases for Processing (EEA/UK Users)

If you are in the EEA or UK, we process your personal data only when we have a legal basis, including:

• Contract: To provide the Echoes service you request.
• Consent: For optional features (e.g., making your profile public).
• Legal obligation: To comply with applicable laws.
• Legitimate interests: To improve and secure Echoes (where your rights do not override our interests).

4. Data Sharing and Disclosure

• We do not sell or rent your data.
• We do not share your data with third parties except as required by law or to protect our rights.
• If you choose to make your profile public, your chosen profile information and listening history will be visible to other users. You can disable this at any time.

5. International Data Transfers

Your data may be processed and stored on servers outside your country, including outside the EEA or UK. We take steps to ensure your data is protected in accordance with this Policy and applicable law.

6. Data Security

We use industry-standard security measures to protect your data, including encryption and secure storage. However, no method of transmission or storage is 100% secure.

7. Data Retention

We retain your data as long as your account is active. You may delete your account at any time, and your personal data will be removed from our active systems, except as required by law or for legitimate business purposes (e.g., to resolve disputes or enforce our agreements).

8. Your Rights

a. EEA/UK Residents (GDPR)

You have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability (receive your data in a portable format).
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with your local data protection authority.

To exercise your rights, contact us.

b. California Residents (CCPA/CPRA)

You have the right to:

• Know what personal information we collect, use, and disclose.
• Access your personal information.
• Delete your personal information.
• Opt out of the sale or sharing of personal information (we do not sell your data).
• Non-discrimination for exercising your privacy rights.

To exercise your rights, contact us.

9. Children’s Privacy

Echoes is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes. Continued use of Echoes after changes means you accept the new policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at Alex.Jarrah1@gmail.com.