Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") governs the collection, use, and protection of information by Echonym ("we," "our," or "us") when you use our mobile application and related services (collectively, the "Service"). By using Echonym, you agree to the collection and use of information in accordance with this Policy.

Echonym is designed as a privacy-first, anonymous social platform. We collect minimal personal information and implement robust security measures to protect your anonymity and data. This Policy explains your rights, our obligations, and how we maintain the balance between providing a functional service and protecting your privacy.

2. Information We Collect

2.1 Information You Provide Directly

• Authentication Information: Email address for Firebase Authentication login purposes only. We do NOT store your email in our database or use it for any other purpose beyond secure login.
• Account Information: Username and user ID for your anonymous account. We do not collect real names, phone numbers, or other personal identifiers.
• User-Generated Content: Posts, images, voice recordings, polls, comments, and group messages you create and share.
• Profile Preferences: Interests, group memberships, and app settings you configure.
• Feedback & Support: Information you provide when contacting support or submitting feedback.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, app version, and unique device identifiers for compatibility and performance optimization.
• Device Fingerprint: Unique device signature for security and moderation purposes only. This helps us identify and ban devices that repeatedly violate our community guidelines.
• IP Address & Location: Approximate city/region based on IP address for content localization and trending features. We do NOT collect precise GPS location.
• Usage Analytics: App performance metrics, crash reports, and feature usage statistics to improve app reliability and user experience.
• Network Information: Connection type and network status for troubleshooting and performance optimization.

2.3 Information We Do NOT Collect

3. How We Use Your Information

3.1 Core Service Provision

• Account Management: Creating and maintaining your anonymous account, managing login sessions, and providing account recovery options.
• Content Delivery: Displaying posts, managing groups, and facilitating user interactions within the platform.
• Feature Functionality: Enabling voice recording, image processing, polls, and other app features.
• Personalization: Tailoring content recommendations, trending topics, and group suggestions based on your interests and location.

3.2 Security & Moderation

• Community Safety: Implementing our comprehensive moderation system to detect and remove inappropriate content.
• Device Banning: Identifying and banning devices that repeatedly violate community guidelines to protect other users.
• Fraud Prevention: Detecting and preventing spam, fake accounts, and malicious activities.
• Content Moderation: Reviewing reported content and enforcing community guidelines.

3.3 Service Improvement

• Performance Optimization: Analyzing app performance, identifying bugs, and optimizing user experience.
• Feature Development: Understanding user preferences and developing new features based on usage patterns.
• Technical Support: Troubleshooting issues and providing customer support.

4. Our Comprehensive Moderation System

4.1 AI-Powered Content Moderation

• Automated Detection: Advanced technology analyzes text, images, and audio content for inappropriate material.
• Real-time Filtering: Content is screened before publication to prevent harmful material from reaching users.
• Pattern Recognition: Smart systems identify spam, harassment, and other policy violations.

4.2 Human Moderation Team

• Expert Reviewers: Trained professionals review flagged content and user reports.
• Appeal Process: Users can appeal moderation decisions through our support system.
• Policy Enforcement: Consistent application of community guidelines across all content.

4.3 User Reporting System

• Content Reporting: Users can report posts, comments, groups, or messages that violate guidelines.
• Multiple Report Categories: Spam, hate speech, harassment, illegal content, and other violation types.
• Anonymous Reporting: Report violations without revealing your identity to other users.
• Report Tracking: Monitor the status of your reports and receive updates on actions taken.

4.4 Enforcement Actions

• Content Removal: Immediate removal of violating content from the platform.
• User Warnings: Educational messages about community guidelines and expected behavior.
• Temporary Suspensions: Time-limited account restrictions for repeated violations.
• Device Banning: Permanent removal of devices that consistently violate policies.

5. Data Processing & Storage

5.1 Data Storage Infrastructure

• Cloud Services: We use enterprise-grade cloud services for authentication, database, storage, and analytics. These services implement industry-standard security measures and comply with international data protection standards.
• Secure Storage: User-generated content is stored securely with encryption at rest and in transit to protect your data.
• Database Security: Our database uses automatic encryption and strict access controls to protect your information.
• Geographic Distribution: Data may be processed on servers located outside your country, but always in compliance with applicable data protection laws.

5.2 Data Processing Technologies

• Voice Processing: Voice recordings are processed to apply effects and optimize quality. This processing occurs securely and efficiently.
• Image Processing: Images are optimized for storage and delivery while maintaining quality and reducing file sizes.
• Content Analysis: Advanced technology analyzes content for moderation purposes without storing personal information.

5.3 Data Retention Policies

• Account Data: Retained while your account is active and for a reasonable period after deactivation for recovery purposes.
• User Content: Stored until you delete it or request account deletion.
• Moderation Records: Kept for compliance and safety purposes, typically for 1-2 years.
• Analytics Data: Aggregated and anonymized after 90 days, with individual identifiers removed.

6. Data Sharing & Third-Party Services

6.1 Service Providers

We share data only with trusted third-party services that help us operate Echonym:

• Google Firebase: Authentication, database, storage, and analytics services under strict data protection agreements.
• Google Sign-In: Secure authentication service that processes login credentials without sharing data with us.
• Cloud Functions: Serverless computing for secure content processing and moderation.
• Content Delivery Networks: For efficient content delivery and improved user experience.

6.2 Legal Requirements

• Law Enforcement: We may disclose information when required by law, court order, or government request.
• Legal Proceedings: Information may be shared in legal proceedings to protect our rights or comply with legal obligations.
• Safety Emergencies: We may share information to prevent harm to users or the public.

6.3 What We Do NOT Share

7. Data Security & Protection

7.1 Security Measures

• Encryption: All data is encrypted in transit and at rest using industry-standard encryption protocols.
• Access Controls: Strict authentication and authorization protocols for all data access.
• Secure Infrastructure: Enterprise-grade security measures implemented across all systems.
• Regular Audits: Security assessments and testing conducted regularly to maintain protection.

7.2 Anonymity Protection

• No Identity Linking: We do not link anonymous accounts to real-world identities.
• Content Isolation: User content is isolated and cannot be traced back to personal information.
• Metadata Minimization: We minimize metadata collection that could compromise anonymity.
• Secure Communication: All communications between users are encrypted and anonymous.

7.3 Incident Response

• Security Monitoring: 24/7 monitoring for security threats and suspicious activities.
• Incident Response Plan: Comprehensive procedures for handling security incidents.
• User Notification: Prompt notification of users affected by security incidents.
• Regulatory Compliance: Compliance with data breach notification requirements.

8. Your Rights & Choices

8.1 Data Access & Control

• Access Your Data: Request a copy of all personal information we hold about you.
• Update Information: Modify your username, preferences, and account settings at any time.
• Data Portability: Export your data in a machine-readable format.
• Correction Rights: Request correction of inaccurate or incomplete information.

8.2 Deletion & Account Management

• Content Deletion: Delete individual posts, comments, or other content you've created.
• Account Deletion: Request complete deletion of your account and all associated data.
• Data Retention: Control how long we retain your data after account deletion.
• Revoke Consent: Withdraw consent for data processing at any time.

8.3 Privacy Controls

• Permission Management: Control app permissions through your device settings.
• Notification Preferences: Customize which notifications you receive and how.
• Location Controls: Opt out of location-based features and content.
• Analytics Opt-out: Choose not to participate in app analytics and improvement programs.

9. Children's Privacy

• Age Verification: We do not collect or verify user ages, but our terms of service prohibit users under 13.
• Content Filtering: Our moderation system includes additional protections for content that might be inappropriate for younger users.
• Parental Controls: Parents can contact us to review and delete any information collected from children.
• Educational Resources: We provide resources for parents about online safety and privacy.

10. Child Safety Standards

Echonym has zero tolerance for Child Sexual Abuse and Exploitation (CSAE) and Child Sexual Abuse Material (CSAM).

10.1 Prohibited Content

The following content is strictly prohibited on our platform:

• Any content that sexualizes, exploits, or endangers minors
• Child Sexual Abuse Material (CSAM) of any kind
• Content that facilitates grooming or inappropriate contact with minors

10.2 Detection & Removal

We use automated systems and human review to detect and immediately remove prohibited content. Violating accounts and devices are permanently banned.

10.3 Reporting

Report child safety concerns:

• Use the in-app report button on any content
• Email us directly at: support@echonym.app

10.4 Law Enforcement Cooperation

We report CSAM to the National Center for Missing & Exploited Children (NCMEC) and cooperate fully with law enforcement investigations regarding child safety.

For immediate emergencies involving child safety, contact your local authorities (911) first, then report to us.

11. International Data Transfers

Echonym operates globally, and your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers:

• Data Localization: We strive to process data in regions close to users when possible.
• Transfer Safeguards: Standard contractual clauses and adequacy decisions for international transfers.
• Regulatory Compliance: Compliance with GDPR, CCPA, and other applicable data protection laws.
• User Rights: International users retain the same rights and protections as local users.

12. Third-Party Integrations

12.1 Third-Party Services

We use trusted third-party service providers to support our app's functionality. These include:

• Authentication services (to let users create and access accounts)
• Cloud hosting and databases (to store user content securely)
• File storage services (to store images, audio, and other media)
• Analytics and crash reporting (to improve app performance and reliability)
• Content processing tools (to apply effects to voice posts and optimize media)
• Security services (to detect abuse and protect the community)

We do not sell your data to third parties. Service providers may only use your data on our behalf and as necessary to provide their services. All service providers are bound by strict data protection agreements and may not use your data for any other purpose.

12.2 Third-Party Privacy Policies

Our third-party service providers have their own privacy policies. We encourage you to review these policies to understand how they handle data:

• Google Privacy Policy: https://policies.google.com/privacy

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the Date: Change the "Last updated" date at the top of this policy.
• Provide Notice: Notify users of significant changes through in-app notifications.
• Review Period: Give users time to review changes before they take effect.
• Consent Requirements: Obtain consent for material changes that affect data processing.

Continued use of Echonym after changes constitutes acceptance of the updated policy.

14. Legal Basis for Data Processing

We process your data based on the following legal grounds:

• Contract Performance: Processing necessary to provide Echonym services and fulfill our obligations to you.
• Legitimate Interests: Processing for security, fraud prevention, content moderation, and service improvement.
• Consent: Processing based on your explicit consent for optional features and analytics.
• Legal Obligations: Processing required by applicable laws and regulations.
• Vital Interests: Processing to protect user safety and prevent harm.

15. Contact Information & Support

15.1 Response Times

• General Inquiries: We aim to respond within 24-48 hours.
• Privacy Requests: Data access, correction, and deletion requests are processed within 30 days.
• Urgent Issues: Security and safety concerns are addressed immediately.
• Appeal Process: Moderation appeals are reviewed within 7 days.

15.2 Privacy & Data Requests

For privacy-related inquiries, data deletion requests, or other data protection matters, please contact us at contact@echonym.app.

16. Additional Resources

16.1 Community Guidelines

Our community guidelines outline expected behavior and content standards. These guidelines work in conjunction with this Privacy Policy to ensure a safe and respectful environment.

16.2 Terms of Service

Our Terms of Service govern your use of Echonym and include important information about your rights and responsibilities as a user.

16.3 Security Best Practices

We provide resources and tips for maintaining your privacy and security while using social media platforms.

16.4 Privacy Education

Educational content about online privacy, data protection, and digital rights to help you make informed decisions.

17. Data Breach & Incident Response

In the unlikely event of a data breach or security incident, we have comprehensive procedures in place to protect your information:

17.1 Incident Detection

• 24/7 Monitoring: Continuous monitoring for security threats and suspicious activities.
• Automated Alerts: Immediate notification of potential security issues.
• Threat Intelligence: Monitoring emerging threats and vulnerabilities.

17.2 Response Procedures

• Immediate Action: Swift response to contain and mitigate security incidents.
• User Notification: Prompt notification of affected users within 72 hours of incident discovery.
• Regulatory Reporting: Compliance with data breach notification requirements.
• Recovery Process: Systematic restoration of affected systems and data.

18. Updates & Notifications

18.1 Policy Updates

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• Version Control: Each update includes a version number and date.
• Change Summary: Clear explanation of what has changed and why.
• User Consent: Obtaining consent for material changes that affect data processing.
• Grace Period: Reasonable time for users to review changes before they take effect.

18.2 Notification Methods

• In-App Notifications: Prominent notifications about policy changes.
• Email Updates: Direct communication for significant changes.
• Website Updates: Updated policy posted on our website.
• Social Media: Announcements on our official channels.

19. Social Media & Community Features

19.1 Content Sharing & Visibility

Echonym is designed as an anonymous social platform. Understanding how your content is shared and visible is important:

• Public Content: Posts shared in public groups or feeds are visible to all users of the platform.
• Group Content: Content shared in private groups is visible only to group members.
• Anonymous Identity: Your real identity is never revealed, even when content is shared.
• Content Control: You can delete your content at any time, and it will be removed from the platform.

19.2 User Interactions

• Reactions & Comments: Users can react to and comment on your posts while maintaining anonymity.
• Share Posts: Users can share posts both within the platform and externally (to other apps/platforms) while preserving the original poster's anonymity.
• Save Posts: Users can save posts to their private collection for later viewing, accessible only to them.
• Reporting System: Users can report inappropriate content or behavior through our comprehensive reporting system.
• Community Moderation: Our moderation team reviews reported content and takes appropriate action.

19.3 Content Guidelines

• Community Standards: All content must comply with our community guidelines and terms of service.
• Prohibited Content: Hate speech, harassment, illegal content, and other harmful material is strictly prohibited.
• Content Review: Content may be reviewed by our moderation systems and human team.
• Enforcement Actions: Violations may result in content removal, warnings, or account restrictions.