Privacy Policy

Using ECHO without an account

ECHO works fully anonymously. Visiting the app assigns your browser a random, unguessable session identifier (see the Cookie Policy) so a journey you build can be resumed on the same device — nothing tied to your identity is collected unless you choose to register.

What we collect if you register

• Email & password. Your password is never stored in plain text — only a salted hash. Registering attaches these credentials to your existing anonymous session rather than starting a new account, so anything you already built carries over.
• Google sign-in. If you use "Sign in with Google" instead, we receive only your email address (scopes: openid, email) — no profile photo, contacts, or other Google data.

What you tell ECHO to build a journey

Songs, memories, dreams, and mood answers you enter are sent to Anthropic's Claude API to generate track suggestions and narrative text for your journey. This content is used only to build your journey in that moment — ECHO doesn't use it to train models or share it with anyone beyond the AI provider processing the request.

Optional integrations

• Spotify. If you export a journey as a playlist, ECHO requests a limited OAuth grant to create and populate that one playlist on your account.
• Stripe. If you make a purchase or voluntary contribution, payment details are handled directly by Stripe — ECHO never sees your card number.

None of these are required to use ECHO.

What we don't do

No advertising or analytics trackers, no selling or renting your data to third parties, no cross-site tracking.

Your choices

Saving journey history is opt-in. You can log out at any time, which ends that browser's session without affecting your account elsewhere. To request deletion of your account and associated data, contact the site owner.