Privacy Policy
Last updated May 12, 2026
Echo ("we", "our", or "the app") is a voice notes and idea capture app for iOS. This policy explains how recordings, transcripts, summaries, account data, subscriptions, analytics, and exports are handled.
Echo is designed to process audio on your device whenever possible. Cloud transcription and AI summarization are used only when needed for longer recordings, Arabic or mixed-language recordings, or features that require server processing.
Audio and transcript data
- Audio recordings you create, including duration, timestamps, generated titles, transcripts, summaries, tags, and action items.
- Recordings are saved locally first so a failed network request does not delete your audio.
- Audio may be processed on device when supported, or sent over encrypted HTTPS to cloud transcription and AI providers when needed.
Account and sync data
- Sign in with Apple account identifiers used for authentication.
- Synced recordings, transcripts, summaries, action items, and settings stored in Supabase when cloud sync or backup is enabled.
- Email address and display name only when provided by Apple for account functionality.
How we use your data
- To record, transcribe, summarize, search, and organize your voice notes.
- To extract action items and create Reminders or Calendar events when you choose those exports.
- To sync your library across devices, restore purchases, and provide subscription entitlements.
- To improve reliability through privacy-conscious analytics and crash diagnostics.
Cloud AI processing
When cloud processing is needed, Echo may use OpenAI Whisper for transcription and OpenAI GPT-4o-mini or Anthropic Claude Haiku for summarization, titles, action extraction, and semantic search support. We do not sell recordings, and cloud audio or transcript content is not used to train models.
Third-party services
- OpenAI - cloud transcription, summaries, action extraction, and embeddings when needed.
- Anthropic - AI summarization and action extraction where configured.
- Supabase - authentication, storage, sync, database, and row-level security.
- RevenueCat and Apple StoreKit - subscription management, trials, Family Sharing eligibility, and purchase validation.
- PostHog - product analytics used to understand aggregate app behavior and improve reliability.
- Apple EventKit, Reminders, Calendar, Push Notifications, Live Activities, and widgets - native iOS integrations you choose to enable.
Your rights and controls
- Delete individual recordings or your account from the app; associated cloud data is removed within 30 days.
- Export transcripts, summaries, and notes in supported formats for portability.
- Revoke microphone, speech recognition, notification, Reminders, or Calendar access in iOS Settings.
- Contact support@culi.app for access, correction, deletion, or privacy requests under GDPR, CCPA, UAE PDPL, or similar laws.
Data we do not sell or use for ads
- We do not sell your recordings, transcripts, or personal information.
- We do not use recordings or transcripts for advertising profiles.
- We do not use your recordings to train AI models.
Retention
Local recordings remain until you delete them or uninstall the app. Synced recordings and transcripts remain while your account is active or until you delete them. Deleted account data is removed from active systems within 30 days, subject to backups and legal requirements.
Children's privacy
Echo is rated 4+ but is not directed at children to collect personal information. If you believe a child has provided personal information, contact us so we can delete it.
Changes
We may update this policy as Echo evolves. Changes will be posted on culi.app with an updated "Last updated" date.
Contact
If you have questions about privacy, data handling, or policy updates, contact: