Privacy Policy

1. Scope and controller

Echo is presented by Jahnavi Panwar. Clanflare Solutions Private Limited provides the white-labelled infrastructure and services used to operate Echo and is the data controller for the personal information described in this policy.

This policy applies to the Echo mobile application and its related account, support, community, practice, and payment features. It does not apply to third-party websites or services that have their own privacy policies.

2. Information we collect

Account and profile information

Depending on how you use Echo, we may collect:

• Your email address or phone number used for one-time-password sign-in.
• Your name, profile photo, learning goal, language or Hindi preferences, reminder preferences, and guest-account status.

Echo does not collect English level, women-only preference, or practice time as profile information.

Daily practice and progress

We collect the information you submit while completing daily practice, including:

• Spoken-task audio recordings, written answers, reflection notes, and selections.
• Scores or evaluations, task completion, streaks, and learning progress.

Echo does not transcribe or evaluate these submissions using AI. Authorised Echo staff may listen to submitted answers for support, review, or service improvement. Practice recordings are stored on AWS EC2.

Community and communication

When you use community features, we may collect chats, discussion posts, replies, mentions, uploaded images or files, and voice messages. Public posts, comments, and messages may be visible to other Echo users according to the feature and its visibility settings.

Voice room conversations are real-time audio only. Echo does not record or store voice room conversations.

Notifications and technical information

Echo uses Firebase Cloud Messaging to send push notifications and stores the notification token needed for that purpose. We may also process limited technical and operational information needed to operate, secure, and troubleshoot the app.

Echo does not use analytics or advertising SDKs.

3. How we use information

We use personal information to:

• Create and secure your account, authenticate sign-in, and provide customer support.
• Deliver daily practice tasks, maintain progress, and provide the app’s learning features.
• Provide community features, messages, voice rooms, notifications, and live classes where available.
• Review submitted answers, respond to requests, maintain safety, prevent misuse, and improve service operations.
• Process payments, meet legal obligations, and protect the rights and safety of users and the service.

4. Sharing and service providers

We do not sell personal information. We may share information with:

• Authorised Echo personnel who need it to provide support, review submissions, or operate the service.
• Service providers that support cloud hosting and storage, email or SMS delivery, push notifications, real-time voice, daily practice features, payments, and external learning content.
• Government authorities, courts, or other parties when disclosure is required by law or is necessary to protect users, the service, or legal rights.

These providers may process information on our behalf and are expected to use appropriate safeguards for the services they provide.

5. Payments

Depending on where you purchase, payments may be processed through Google Play Billing for app purchases or through third-party payment providers on the Echo website. Echo does not store full payment card details. Payment records may include transaction information needed to confirm and support a purchase.

6. Retention and deletion

We retain information only for as long as needed for the purposes described in this policy, unless a longer period is required for legal, accounting, security, fraud-prevention, or dispute-resolution reasons.

• Personal and account details are deleted within 30 days after a verified account deletion request.
• Public posts and comments are anonymised within 30 days after account deletion and retained for one year. They may appear under a label such as deleted_user_123.
• Daily-task data, recordings, files, messages, voice messages, and progress are retained for one year.
• Payment records are retained according to applicable payment, accounting, and legal requirements.

You can start deletion through the account deletion option in Echo or use the Echo account deletion request page.

Deletion requests may require verification so that we can protect the account and prevent unauthorised requests.

7. Security

Data is transmitted using HTTPS. Access to personal information is restricted to authorised staff and service providers who need it for their role. No method of transmission or storage can be guaranteed to be completely secure, so please protect your sign-in details and contact us if you notice a security concern.

8. Your choices and rights

Subject to applicable law, you may ask us to provide access to, correct, or delete your personal information. You may also ask questions about how your information is used or request help with a privacy concern.

Echo does not currently use analytics or advertising for targeted advertising. If promotional messages are introduced in the future, they will include instructions for unsubscribing.

9. Age requirement

Echo is intended for people aged 13 and above. The app is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us.

10. Contact us

For privacy requests, account deletion help, or questions about this policy, contact:

For grievance-related matters: