Privacy Policy
Last updated: October 2025
Echoa AI is an empathetic language-learning assistant. We keep learning safe, private, and empowering. This policy explains the data we do and do not process, and your rights under GDPR and global data protection laws. :contentReference[oaicite:2]{index=2}
Age & Legal Responsibility
Echoa applies age-appropriate access and payment rules to protect young users.
| Age | Access | Payment | Description |
|---|---|---|---|
| Under 14 | Not permitted | Not permitted | No registration or use. |
| 14–15 | Free mode only | Not permitted | Limited, protected learning features. |
| 16–17 | Full app access | Permitted (own funds) | Purchases possible under pocket-money rules (e.g., §110 BGB). |
| 18+ | Full access | Full rights | All features incl. optional 18+ content. |
Subscriptions & Payments
Subscriptions are optional and cancellable at any time. Payments are handled by authorized providers (e.g., Apple/Google). Echoa never stores raw card or banking data. Plans: Echoa Plus $11.99/month or $79.99/year. :contentReference[oaicite:3]{index=3}
Data Privacy & Storage
We follow GDPR and ePrivacy principles of data minimization and purpose limitation. We store only what’s necessary for learning and login. :contentReference[oaicite:4]{index=4}
Data We Store
- User UUID and access token (encrypted) for secure sessions.
- Local learning settings and progress for personalization and streaks.
- Subscription status (active/inactive) to enable premium features.
What We Never Collect
- Microphone/audio without consent.
- Biometric, medical, or precise location data.
- Tracking cookies or third-party analytics.
- Personal identifiers unless you voluntarily provide them for support.
Deletion & Portability
You can delete your account at any time in the app. We erase local data and server-linked records within 72 hours, and provide readable exports upon request. :contentReference[oaicite:5]{index=5}
User Rights (GDPR)
- Access, rectification, erasure, restriction, portability, and objection.
Security
- Password hashing and expiring sessions.
- Log out from all devices anytime.
- Optional MFA planned.
Contact
Email: support@echoa.ai • Website: echoa.ai
This policy may be updated; changes are announced in-app and on the website. Continued use means you accept the new version. :contentReference[oaicite:6]{index=6}