Privacy policy

Last updated: 30 August 2026

Echo is a private messenger for friends. This page says, without jargon, what we collect, why, and what you can do about it. The principle: we take the bare minimum needed to run a messenger, and nothing else.

Who is responsible

The data controller is [Éditeur à renseigner]. For any question: support@example.com.

What we collect

• Your account: an email address, or the identifier provided by Apple or Google if you sign in with them (plus the email they pass along). No password, no phone number.
• Your profile: a nickname, and a photo if you add one. Only members of your chats see them.
• What you send: messages, photos, voice messages, reactions, and the chats and groups you belong to.
• Your devices: one identifier per device and a push token, to deliver notifications and to know which device is already reading.
• Your language: your device's, for notifications and emails.
• Technical logs: IP address, device type and request timestamps, kept briefly for security (rate limiting, abuse detection) and troubleshooting.

We don't read your address book, we don't sync your contacts, we don't locate you. Photo location metadata (EXIF) is stripped on your device before upload.

Why

• Running the messenger: signing you in, delivering your messages to chat members, sending you notifications (performance of the service).
• Securing the service: limiting abuse, protecting accounts (legitimate interest).
• Answering your support requests (legitimate interest).

No advertising, no profiling, no reselling or sharing for commercial purposes. The website you are reading uses neither cookies nor analytics.

For how long

• Chats and media: kept as long as the chat exists, so the group keeps its memory — that is the heart of the product. A message you delete is removed for everyone; a photo becomes inaccessible.
• Account: kept until you delete it, from the app (see below). Your nickname, photo, devices and tokens are then erased immediately; your messages stay in the other members' chats without your name (“Former member”), and a chat you leave empty disappears with its media.
• Sign-in tokens: 30 days without use.
• Technical logs: a few weeks at most.
• Backups: daily encrypted copies of the database, kept 30 days then destroyed automatically.

Where, and with whom

Data is hosted in the European Union. We rely on the following processors, who act only on our instructions:

• Scaleway (Paris, France): servers and database.
• Cloudflare: protection of the service (firewall, rate limiting) and storage of photos and voice messages (R2). Files are only reachable through signed links, valid for one hour, generated for chat members.
• Expo, then Apple and Google: delivery of push notifications to your device. The notification content passes through them.
• Apple and Google: sign-in with your account, if you choose that option.
• An email delivery provider, for sign-in links.

Beyond these providers, your data is only shared with the members of the chats you belong to, or when the law requires it.

Your rights

You can access your data, correct it, have it erased, request a copy, or object to processing based on our legitimate interest. Write to support@example.com from your account's email address: we answer within a month. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local authority.

Deleting your account

In the app: Profile → Delete my account, then confirm. It is immediate and permanent: your account, photo, devices and tokens are erased; you leave all your chats, your messages stay there without your name, and a chat you leave empty disappears with its media. Backups erase themselves after 30 days.

If you no longer have access to the app, write to support@example.com from your account's address: we take care of it within 30 days.

Age

Echo is for people aged 13 and over. If you believe someone under 13 has created an account, write to us: we will delete it.

Changes

If this policy changes in a meaningful way, we will let you know in the app. The date at the top of the page shows the latest version.