Privacy Policy

Echos Journal · Last updated: June 28, 2026

1. Who We Are

Echos Journal is a mood journaling application developed by Federico Carrizo ("we", "us", or "our"). If you have any questions about this policy, you can contact us through the in-app feedback form.

2. What Data We Collect

Category	Data	Purpose
Account	Email address	Account creation and authentication
Journal content	Mood entries and notes you write	Core app functionality – storing your journal
Technical	Crash reports, anonymous usage events	Bug detection and app improvement

We do not collect your name, phone number, location, contacts, or any payment information. There are no ads and no in-app purchases.

3. How We Use Your Data

Purpose	Legal Basis
Providing and syncing your journal across devices	Performance of contract
Authenticating your account	Performance of contract
Detecting and fixing errors	Legitimate interests
Improving app features	Legitimate interests

4. Third-Party Service Providers

We use the following processors to operate the app:

Supabase Inc. – Authentication and cloud database storage. Data is stored on servers in the EU/US with encryption in transit (TLS) and at rest.
Google LLC (Firebase) – Crash reporting and anonymous usage analytics. Reports are retained for 90 days and contain no personally identifiable information.

Both providers are bound by data processing agreements and comply with applicable data protection regulations, including GDPR Standard Contractual Clauses for international transfers.

5. Data Retention

Account and journal data: retained while your account is active. Deleting your account permanently removes all associated data within 30 days.
Crash reports: automatically purged after 90 days.

6. Security

We protect your data with encrypted connections (TLS), hashed password storage, and strict access controls. No security measure is 100% foolproof, but we take industry-standard precautions.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Restrict or object to certain processing
Receive a copy of your data in a portable format

To exercise any of these rights, contact us through the in-app feedback form. We will respond within 30 days. If you are in the EU/EEA, you may also lodge a complaint with your local data protection authority.

8. Children's Privacy

Echos Journal is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, please use the in-app feedback form. We aim to respond within 30 days.