Privacy Policy

Last updated: September 7, 2026 | Effective: September 7, 2026

      EchoVaani ("Hear them Again") is a service that lets you preserve the voice, personality, and memories of people
      you love. We take your privacy — and especially the privacy of the loved ones you memorialise — very seriously.
      This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights.
    

1. Who We Are

EchoVaani ("we", "us", "our") is operated by the EchoVaani team based in India. For privacy-related enquiries, contact us at privacy@echovaani.life.

Data Controller: EchoVaani, Hyderabad, Telangana, India.

2. Information We Collect

We collect the following categories of data when you use EchoVaani:

2.1 Information You Provide

Account information: your name, email address, and hashed password (or Google account email if you sign in with Google).
Persona data: names, descriptions, personality prompts, and photographs you provide for the personas you create.
Voice samples: audio recordings you upload or record through your device's microphone for voice cloning purposes.
Memory entries: text memories, stories, and facts you add to a persona's knowledge base.
Conversation history: the text of messages exchanged during chat sessions with AI personas.

2.2 Information Collected Automatically

Usage data: session counts, feature usage metrics, and interaction timestamps for rate limiting and plan enforcement.
Device information: browser type, operating system, and screen resolution (standard HTTP headers only — we do not use device fingerprinting).
Authentication tokens: stored in browser localStorage to keep you signed in.

2.3 Information from Third-Party Sign-In

If you sign in with Google, we receive your name and email address from your Google account. We do not receive or store your Google password or access your Google contacts, calendar, or other Google services.

2.4 Payment Information

Subscription payments are processed entirely by Whop (our third-party payment processor). We never receive, see, or store your credit/debit card numbers, bank account details, or UPI credentials. We only receive your subscription status (active, cancelled, or expired) and plan tier from Whop via secure webhook notifications.

3. Information We Do NOT Collect

We want to be clear about what we do not collect:

Precise or approximate geolocation
Phone contacts or address book
Phone number
SMS, call log, or phone state
Photos or media from your gallery (we only access photos you explicitly upload)
Device advertising identifiers
Health, fitness, or biometric data
Financial information (credit card numbers, bank accounts)
Background location or activity recognition

4. How We Use Your Information

To provide the EchoVaani service — generating AI-powered conversations and voice responses.
To personalise each persona with the memories, personality, and voice you provide.
To create and manage your account and authenticate your identity.
To process and manage your subscription via Whop.
To send you account-related emails (verification, password reset, subscription updates).
To enforce subscription tier limits and prevent abuse.
To improve service reliability, fix bugs, and diagnose technical issues.
To comply with legal obligations and respond to lawful requests.

We do not sell your personal data, use it for advertising, or share it with data brokers.

5. AI-Generated Content & Voice Processing

5.1 Voice Cloning

When you upload voice samples or record audio through your device's microphone, the audio is transmitted to Cartesia AI for voice cloning. Your audio is processed under Cartesia's data processing terms. We store only the resulting voice model identifier — not the raw audio files — after cloning completes successfully.

5.2 AI Conversations

When you chat with an AI persona, your messages and persona context are sent to Groq (running Llama 3.3 / Meta AI models) for AI response generation. Conversations are stored in our database to provide chat history and continuity.

5.3 AI Content Disclaimer

All conversation responses are AI-generated and do not represent the actual thoughts, opinions, or communications of the person memorialised. AI responses are generated based on the memories and personality traits you provide and may contain inaccuracies.

6. How We Share Your Information

We share your data only with the following third-party service providers, solely for the purposes described:

Service	Data Shared	Purpose
Groq	Chat messages, persona context	AI conversation generation & speech-to-text
Cartesia AI	Voice audio samples	Voice cloning & text-to-speech synthesis
Supabase	All user data (encrypted at rest)	Database hosting & file storage
Whop	Email address, subscription status	Payment processing & subscription management
Google (Sign-In)	OAuth token (if using Google Sign-In)	Authentication
Koyeb / Vercel	Application traffic (encrypted in transit)	Application hosting & CDN

We do not sell, rent, or trade your personal data. We do not share data with advertisers, data brokers, or any parties not listed above.

7. Data Storage & Security

Your data is stored in a Supabase PostgreSQL database. We implement the following security measures:

Encryption in transit: all data is transmitted over HTTPS/TLS. We enforce HSTS headers.
Password hashing: passwords are hashed with bcrypt and never stored in plaintext.
Authentication: JWT-based token authentication with expiring tokens.
Access control: photos and avatars are stored in Supabase Storage with restricted access policies.
No tracking: we do not use third-party analytics, advertising SDKs, or tracking pixels.

8. Data Retention & Deletion

We retain your data for as long as your account is active. When you take any of the following actions, data is deleted accordingly:

Delete a persona: the persona's associated memories, voice model, chat history, and uploaded photos are permanently deleted.
Delete your account: all your data — personas, memories, voice models, conversations, and account information — is permanently deleted. This action is irreversible.

How to Delete Your Data

You can delete your account and all associated data through any of these methods:

In the app: go to Profile → Settings → Delete Account.
By email: send a request to privacy@echovaani.life from the email address associated with your account. We will process the deletion within 30 days.

After account deletion, we may retain anonymised, aggregated usage statistics that cannot be linked back to you.

9. Device Permissions

EchoVaani may request the following device permissions:

Microphone: to record voice samples for voice cloning. Audio is only recorded when you explicitly tap the record button. We do not access the microphone in the background.
Internet: required for all app features (authentication, AI processing, data sync).
File upload: to allow you to upload photos (persona avatars) and pre-recorded audio files.

All permissions are optional and requested only when you use the relevant feature. The app remains functional without microphone access (you can upload pre-recorded audio instead).

10. Cookies & Local Storage

We use browser localStorage to store your authentication token and cached user preferences (theme, last-used persona). We do not use third-party tracking cookies, analytics scripts, advertising pixels, or fingerprinting technologies.

11. Children's Privacy

EchoVaani is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we learn that we have inadvertently collected data from a child under 13, we will promptly delete that data. If you believe a child under 13 has provided us with personal information, please contact us at privacy@echovaani.life.

12. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate data.
Right to deletion: request permanent deletion of your data (see Section 8).
Right to data portability: request your data in a machine-readable format.
Right to withdraw consent: withdraw consent for data processing at any time by deleting your account.
Right to object: object to certain data processing activities.

To exercise any of these rights, contact privacy@echovaani.life. We will respond within 30 days.

For California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, email privacy@echovaani.life.

For EEA/UK Residents (GDPR)

We process your data based on your explicit consent (provided when you create an account) and our legitimate interest in providing the service. You may exercise your GDPR rights by contacting us at the email above.

13. International Data Transfers

Your data may be processed in servers located outside your country of residence, including in the United States (where our hosting and AI providers operate). By using EchoVaani, you consent to the transfer, processing, and storage of your data in these locations. We ensure appropriate safeguards are in place with all our service providers.

14. Legal Basis for Processing

We process your personal data on the following legal bases:

Consent: you provide consent when creating an account and using features like voice cloning.
Contract performance: processing is necessary to deliver the EchoVaani service you subscribed to.
Legitimate interests: service security, abuse prevention, and technical improvements.
Legal obligations: compliance with applicable laws and regulations.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through an in-app notification at least 7 days before the changes take effect. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of EchoVaani after the effective date of any change constitutes acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, contact us:

Email: privacy@echovaani.life
Website: echovaani.life

We will respond to all privacy-related enquiries within 30 days.