Privacy policy
Last updated October 4, 2026
Echo is a private library for the quotes that stay with you. Your Echoes are yours: only you can see them, nothing is ever published, and you can export or delete everything at any time.
Signing in with Google
Echo uses Google only to sign you in. When you continue with Google we receive your name, email address and profile photo, and nothing else: no contacts, no files, no calendar. Your first sign-in creates your account.
What Echo stores
- Your account: name, email address, profile photo link, time zone and theme choice.
- What you save: each quote with its author, source, mood and reflection; your tags and collections; favorites; and Revisit dates.
- A sign-in session, so you stay signed in. It is kept in a secure, HTTP-only cookie.
Your data is stored in a PostgreSQL database hosted by Supabase and served by Vercel. Connections are encrypted. Echo doesn't sell or share your library, and it never reads your Echoes except to show them to you.
Analytics
Echo records simple usage events, such as “an Echo was saved”, “a search returned 4 results” or how many days old an opened Echo is, using PostHog (EU cloud). Events are tied to a random account ID, not your name or email. They never include the text of your quotes, reflections or searches. There is no session recording and no advertising tracking.
Error reports
When something breaks, Echo sends an error report to Sentry so it can be fixed. Reports are scrubbed before they leave Echo: no request bodies, cookies, quote or reflection text, search terms or identity.
Cookies
Echo sets two cookies: your sign-in session and your Appearance choice. There are no advertising or third-party tracking cookies.
No backups
Echo doesn't keep backups of your library. When you delete an Echo or your account, it is gone at once and no copy remains anywhere. It also means that if the database ever failed, your library couldn't be recovered, so download your data from Settings from time to time if you want to keep it safe.
Exporting and deleting your data
In Settings › Your data you can download everything you've saved as JSON or CSV, and permanently delete your account. Deleting your account removes your Echoes (including ones you deleted earlier), tags, collections, Revisits and sign-in right away, asks PostHog to delete your usage events, and revokes Echo's access to your Google account.
Changes and contact
If this policy changes in a way that matters, the date at the top changes and Echo will tell you in the app.
Questions or requests: ruturajchaubey@gmail.com.