Echo Privacy Policy

This policy explains how Echo ("we", "us") handles personal data. Echo is a product of AimDev; the data controller is AimDev. For any privacy question or to exercise your rights, contact privacy@aimdev.site.

Echo lets you leave a message — text, a voice recording, or a photo — that a recipient can only unlock when they physically reach a place you chose. This policy meets GDPR Articles 13 and 14 and the equivalent requirements of CCPA/CPRA, LGPD, APPI, POPIA, PDPA, PIPEDA/Law 25, and the Australian Privacy Principles.

Two important privacy promises

1. We never store a recipient's location. When a recipient tries to unlock a drop we record only the outcome (success/failure), the distance from the target at that moment, and the time. We never store a location track, a map trail, or the recipient's coordinates.
2. Audio and photos are ephemeral. Voice recordings and photos are deleted from storage after the recipient finishes listening/viewing, or when the drop expires — whichever comes first. They are not kept indefinitely.

Who we are

• Controller: AimDev
• Privacy contact / data-subject requests: privacy@aimdev.site

What we collect

From you (the creator):

• Your account — keyed to your platform sign-in identity. Your display name and email come from your verified sign-in token.
• Your drops, trails, and games — the title, text message, and the location you chose (latitude/longitude and radius), plus any voice recording or photo you attach. For trails we store each step's location and content; for hosted "Echo Hunt" games we store the game settings.
• Payment records — if you buy a premium drop or a hosted game, we store a Stripe reference, amount, currency, and status. Card details are handled by Stripe and never touch our servers.

About recipients and players (people you send to):

• Recipient contact details — the name, email, and/or phone number you provide so we can notify a recipient, plus a random unguessable access token. This is personal data about a third party; by entering it you confirm you have a legitimate reason to contact that person.
• Player names — for hosted games, the names you give each player, each with their own access token.
• Unlock / progress events — outcome, distance-at-unlock, and timestamps only (never a location track — see above).

We do not collect recipients' locations, contacts, or device identifiers.

Lawful basis (why we process)

• Providing the service (storing and delivering your drop, notifying your recipient, taking payment): performance of our contract with you (GDPR Art 6(1)(b)).
• Processing recipient/player contact details: our and your legitimate interest in delivering the message you created to the person you chose (Art 6(1)(f)); you are responsible for having a proper basis to contact them.
• Product analytics: legitimate interest in operating and improving Echo (Art 6(1)(f)). You can object at any time.
• Security and abuse prevention: legitimate interest.

Sub-processors and international transfers

Audio and photo objects are stored in our own in-cluster object storage, optionally backed by Cloudflare R2. We do not sell or rent personal data and do not share it with advertisers or data brokers. Data-processing agreements with these providers are being finalised before our EU launch.

Analytics

Echo uses self-hosted product analytics — no third-party analytics or ad-tech SDK. Events are keyed to your pseudonymous account ID and carry only counts, enums, booleans, durations, and step indexes — never a recipient's email or phone, message or audio content, coordinates, or an access token. This telemetry is first-party and is not sold or shared.

Retention

• Drops, trails, games, recipients, players: kept while your account is active or until the drop/trail/game expires. When you delete your account, this data is deleted and hard-purged after a 30-day grace period.
• Voice recordings and photos: ephemeral — deleted after the recipient finishes listening/viewing or when the drop expires.
• Unlock/progress events: outcome + distance + timestamp only; removed with the parent drop/trail/game.
• Analytics events: automatically deleted after 425 days (~14 months).
• Logs: retained up to 365 days.

Your rights

Under GDPR (and equivalents in the regions listed above) you have the right to access your data, request erasure, obtain a portable copy (portability), request rectification, restrict processing, and object to processing based on legitimate interest.

• Erasure is available in two ways: in the app (delete a drop/trail/game, or use Profile → Delete my account), and by emailing privacy@aimdev.site. Deleting your account removes your drops, trails, games, the recipient and player details you entered, and any remaining audio/photo objects, after the 30-day grace period.
• To exercise access or portability, use Profile → Download my data for a portable JSON copy, or email privacy@aimdev.site for access, rectification, restriction, or objection. We respond within 30 days (15 days for Brazil under LGPD, 45 days for California under CCPA where applicable).
• If you are a recipient or player and want the contact details a creator entered about you removed, email privacy@aimdev.site and we will action it.
• If you are in the EEA or UK you may also lodge a complaint with your local data protection supervisory authority.

Children

Echo is not directed at children and is intended for users of the age of digital consent in their jurisdiction.

Changes

We will update this page and its "last updated" date when our practices change.

Terms of Service