ECHO Privacy Policy

Last updated 2026-09-03

This English text is a translation of the Korean original, provided for your convenience. If the two differ, the Korean text governs.

The short version

Echo recognizes your conversations and keeps them as text so you can learn from them. Recordings are not stored on the server. The data used to recognize your voice stays on this device only, and you can delete it at any time.

⚠ Legal notice about recording conversations

Live Talk recognizes the speech of people around you. The Republic of Korea's Protection of Communications Secrets Act prohibits secretly recording or listening in on a conversation you are not a party to. Before you turn this feature on, you must tell the other person and get their consent. Any legal liability arising from using it without consent is yours.

Echo does not save the other person's voice as a file. Only the recognized text remains. During recognition, however, the audio is sent to the companies in the table below.

What we collect

ItemWhere it stays
Conversation text · scores · learning recordsServer (tied to your account)
Vocab · expression cards · personaServer (tied to your account)
Voice pitch range (numbers)Server (tied to your account)
Original reading recordingsThis device only
Voice feature values (voiceprint)This device only
Settings · progress · records waiting to uploadThis device only
Email address · social account info (if you linked an account — when you sign in with Google or another provider, Echo receives that account's email address and account ID, plus the profile name and picture URL. The email and account ID are used only to identify your account and restore your records on a new device; the profile name and picture are never read by the app and stay only in the sign-in service (Supabase). Nothing received from a social account is given to anyone outside the companies in the table below, and none of it is used for advertising or to train AI models. You can disconnect at any time under 'Third-party apps & services' in your Google Account)Server (Supabase)
AI usage timestamps (no content — only which provider was accessed and when; kept 25 hours to enforce the daily usage cap, then deleted)Server (tied to your account)

We do not collect your phone number, address, or payment information. Your name is kept only in two cases — when you tell it to the persona interview (server, tied to your account, included in AI conversation prompts) and when you link a social account (see the table above). We do not use advertising identifiers.

Processors and transfers abroad

The companies below process data on Echo's behalf, and Echo gives personal data to no one else. Speech recognition and AI responses are processed on the servers of companies outside Korea — sent in real time over an encrypted connection the moment you use a conversation or practice feature. After processing, each company keeps or deletes the data under its own policy, and Echo neither views nor controls what is stored on those servers. If you do not agree to the transfer abroad, you can decline on the first-run consent screen; Echo's speech recognition and AI conversation are then unavailable.

There are two routes. Audio goes from the glasses to the recognition company directly. Text requests (translation · expression suggestions · building situations · speech synthesis) go through Echo's server — so that the keys are not kept in the app. It only passes through; the content is not stored. How we protect it. All transfers are encrypted with TLS. Server records are protected by per-account access control (row-level security) so that only your account can read them, and vendor API keys are kept on the server, never in the app. Original recordings and your voiceprint never leave your device.

CompanyCountryWhat goes there
SupabaseRepublic of Korea (Seoul) — servers of Supabase, Inc. (a US company)Conversation text · learning records · Vocab · persona · account identifier · email address · social account info · sign-in records · relaying AI requests (not stored)
SonioxUnited States⚠ Raw microphone audio (includes other people's voices)
Google (Gemini)United States⚠ Raw microphone audio (AI Free Talk) · conversation text · persona
OpenRouterUnited StatesConversation text (not audio)
DeepgramUnited StatesText of the sentences to be read aloud (not audio)

No conversation content goes to the two places below — when program files are downloaded, only connection records (IP, device information) remain: Hugging Face(Downloading the voice recognition model) · jsDelivr(Downloading the audio processing library).

How long we keep it

We keep your learning records and account information (email · social links) until you delete them in the app or ask us to delete them at the contact below. Because the point of learning is comparing against past records, we do not set a period and delete them automatically. You can delete them whenever you want in the ways below; requests by email are handled within 10 days.

How to delete

WhatWhere
Voice data (original recordings · voiceprint · pitch range)Me → My Voice → Your data
All learning records (conversations · Vocab · persona)Me → Data → Delete all learning history
One word at a timeVocab → that entry → Remove from list
One persona fact at a timeMe → Persona → that fact → Delete
Account · email address · social links · every server recordEmail jk06095@gmail.com (handled within 10 days, with a reply)

Data that lives only on this device (original recordings · voiceprint) is deleted along with the app when you uninstall it.

Open source we use

We use the WeSpeaker model (onnx-community/wespeaker-voxceleb-resnet34-LM) to tell voices apart — CC BY 4.0. We use ONNX Runtime Web (MIT) and Transformers.js (Apache-2.0) for audio processing.

Contact

Data controller and privacy officer: the developer (independent developer, GitHub jk06095-lang) — jk06095@gmail.com. Send requests to access, correct, delete, or suspend processing, or to withdraw consent, to this address; we handle them within 10 days and reply. You may also contact the Korean Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118). It is also on the web: https://harico.cloud/privacy/