Privacy Policy
EchoCard Notes is designed for private voice-first note capture and AI-assisted organization. This policy explains what data the app handles and how it is used.
Data you create
EchoCard Notes lets you record voice notes, create transcripts, generate Echo Cards, and save action items. Audio recordings are stored locally in the app's protected storage on your device and are excluded from device backups.
On-device transcription
EchoCard Notes uses the bundled SenseVoiceSmall model to transcribe recordings on device. Raw audio is not uploaded for transcription.
AI synthesis
When you ask EchoCard Notes to generate Echo Cards, the app sends transcript text and source metadata through EchoCard's Cloudflare Worker synthesis proxy to Google Gemini. The Worker keeps the Gemini API key server-side, validates the request, forwards the request to Google Gemini, and returns generated summaries, suggested actions, source connections, and reusable prompts to the app.
The synthesis request is limited to transcript text and source metadata needed to generate the Echo Card. Source metadata can include source identifiers, capture timestamps, and relevant source excerpts used to trace generated cards back to the original capture.
Raw audio files are not sent to Cloudflare or Google Gemini for transcription or AI synthesis.
Third-party processing and logs
Cloudflare processes synthesis requests as EchoCard's server-side proxy provider. Google processes transcript text and source metadata as EchoCard's AI synthesis provider. These providers may process request metadata such as IP address, request time, HTTP headers, status codes, and operational error information as part of delivering, protecting, and debugging their services.
EchoCard production logging is intended for operational health, abuse prevention, security debugging, and service reliability. EchoCard-controlled Worker logs should not intentionally include raw audio, full transcript text, source excerpts, Gemini API keys, proxy tokens, or complete request and response payloads.
Tracking and advertising
EchoCard Notes does not sell your data. EchoCard Notes does not use your data for third-party advertising or tracking across apps and websites.
Data retention and deletion
Local recordings, transcripts, cards, plans, and prompts remain on your device unless you delete them or remove the app. You can delete individual raw captures in the app; deleting a raw capture also removes its local audio file when the file is still present on the device.
EchoCard Notes does not currently provide a dedicated in-app entry for deleting all local app data at once. Until that feature is implemented, you can delete the app from iOS to remove all local app data from the device. Support requests are retained only as long as needed to respond, troubleshoot, and meet reasonable operational or legal requirements.
Contact
For privacy questions or deletion requests, contact [email protected].
隐私政策摘要
EchoCard Notes 会将录音保存在设备本地受保护的应用存储中，并排除在设备备份之外。应用使用内置的 SenseVoiceSmall 模型在设备端转写录音，不会为了转写上传原始音频。
当你主动生成 Echo Cards 时，应用会通过 EchoCard 的 Cloudflare Worker 整理代理，将文字稿和来源元数据发送给 Google Gemini，用于生成摘要、建议行动、来源连接和可复用提示词。原始音频不会发送给 Cloudflare 或 Google Gemini 用于转写或 AI 整理。
你可以在应用内删除单条原始记录；删除原始记录时，如果本地音频文件仍在设备上，也会一并删除。若要一次移除所有本地应用数据，可以从 iOS 删除该应用。
EchoCard Notes 不出售你的数据，也不会将你的数据用于第三方广告或跨应用、跨网站追踪。