Privacy Policy

1. Information processed on your device

EchoNote may process and store the following information in Android private app storage:

• microphone audio that you explicitly record or compatible audio that you choose to import;
• recording titles, timestamps, folders, transcripts, model-generated text, and your edits;
• app settings, such as theme, transcription language, playback speed, and selected model; and
• speech-recognition and voice-activity model files that you choose to download.

Speech recognition runs locally on your device. EchoNote does not upload audio, titles, transcript text, custom vocabulary, or imported media to the developer, Firebase, or any cloud transcription provider. EchoNote excludes its private data from Android cloud backup and device transfer.

2. Analytics and crash diagnostics

Production versions of EchoNote use Google Firebase Analytics and Firebase Crashlytics to understand general app usage and improve stability. Depending on the event, these services may receive app interaction and session information, app version and installation source, device model and operating system information, country-level information inferred from the network address, per-installation identifiers, crash and ANR stack traces, relevant app state, and relevant device metadata.

EchoNote does not set a Firebase user ID and does not add recording names, transcript text, audio, file names, private paths, or custom vocabulary to analytics events, Crashlytics keys, or crash logs. Advertising ID collection is disabled, the advertising ID permission is removed, and analytics data is not enabled for personalized advertising. Firebase may use analytics events as breadcrumb information immediately before a crash.

This diagnostic information is transmitted to and processed by Google LLC as the Firebase service provider. It is used for analytics, fraud/security protection, and app functionality such as diagnosing crashes and ANRs. Data is encrypted in transit. Retention and deletion are governed by the configured Firebase project settings and Google's applicable terms and controls.

3. Optional model downloads

When you choose to download a speech model, EchoNote sends an HTTPS request to an approved Hugging Face or hf-mirror host. The host may receive your IP address, approximate location inferred from that address, request time, requested public model path, protocol information, a fixed EchoNote user agent, and a Range header used to resume a download. These requests do not contain your recordings, titles, transcript text, account information, advertising ID, or persistent physical-device identifier. EchoNote verifies the expected file size and SHA-256 hash before using a downloaded model.

4. Permissions

• Microphone: requested when you start a recording.
• Notifications and foreground services: used for visible recording, model download, and long on-device transcription tasks.
• Internet and network state: used for Firebase analytics/crash diagnostics and optional model downloads.

EchoNote does not request location, contacts, camera, phone, SMS, calendar, advertising ID, or broad file-storage permissions.

5. Export, clipboard, and sharing

EchoNote transfers content to another app only after you choose an export, copy, or share action. Files exported through the Android document picker are handled by the destination you select. Copied text is placed on the Android system clipboard. A share card is created on your device and the selected app receives temporary read access through the Android share panel. The receiving app's privacy policy then applies to the content you chose to send.

6. Retention and deletion

Recordings, transcripts, settings, and downloaded models remain in private app storage until you delete them or uninstall EchoNote. A recording moved to Recently deleted can be restored for 30 days unless you permanently delete it sooner; expired items are removed by the app's cleanup process. Temporary share-card images are kept in a limited private cache for no more than 24 hours and eight cards and may be removed sooner. Uninstalling EchoNote deletes its private local data from the device.

EchoNote has no user accounts and no developer-operated backend that stores recordings or transcripts. Firebase analytics and diagnostic records and third-party model-host logs may remain according to their service retention settings. For a legally applicable access or deletion request, contact us using the address below.

7. Security

EchoNote uses Android private storage, excludes app data from system backup and transfer, requires HTTPS for network traffic, restricts model download hosts and redirects, and verifies downloaded model files. No security measure can guarantee absolute protection, and operating-system behavior, a compromised device, user-selected destinations, Google Firebase, and model download hosts are outside EchoNote's exclusive control.

8. Third-party services

• Google Firebase privacy and security information
• Google Privacy Policy
• Hugging Face Privacy Policy

9. Changes to this policy

This policy may be updated when EchoNote's features, SDKs, data practices, or legal requirements change. Material changes will be reflected by an updated effective date on this page.