Privacy Policy
How we protect your privacy and data
Last updated: June 20, 2026
Our Privacy Commitment
Echo Sleep is built with privacy by design. We believe that sleep apps should help you rest, not track you. This Privacy Policy explains our minimal data approach for the mobile app and the limited, aggregated analytics we use on this website.
Information We Don't Collect
Echo Sleep is designed to be privacy-first. In the mobile app, we do not collect:
- Personal identification information (name, email, phone)
- Location data or GPS coordinates
- Audio recordings or microphone access
- Sleep patterns or usage analytics
- Device sensor data
- Contact lists or photo library access
- Any data for advertising or marketing purposes
Information We May Collect
To provide a reliable service, we may collect minimal technical information:
Crash Reports
- Anonymous crash logs to improve app stability
- Device type and iOS/Android version (for compatibility)
- App version information
- No personal identifiers are included in crash reports
Optional AI Sound Generation
- The prompt you submit, its detected language and English translation, generated audio, title, and generation timestamps
- A pseudonymous Firebase user identifier used for ownership, quotas, and subscription access
- This information is collected only when you use the AI sound generation feature
Website Analytics
- This website uses Vercel Web Analytics to measure page views and site performance in aggregate
- We use this data to understand which pages are useful and to improve the site experience
- We do not use this analytics data for advertising, cross-site profiling, or to identify individual visitors
App Store Analytics
- Download counts and ratings (provided by Apple/Google)
- No individual user data is accessible to us
- All analytics are aggregated and anonymous
How Your Data is Stored
Echo Sleep keeps built-in playback and preferences local while using protected cloud services for optional AI sound generation:
- Local Data: Preferences, built-in sounds, and downloaded AI sound caches are stored on your device
- AI Cloud Library: Prompts, generated audio, titles, and generation metadata are stored in a private cloud library so saved sounds can be recovered
- No Registration Required: Firebase creates a pseudonymous identifier without asking for your name, email address, or password
- Deletion: You can delete individual generated sounds in the app. Contact support@echosleep.app to request deletion of all associated cloud data
Third-Party Services
Echo Sleep uses minimal third-party services:
Firebase Crashlytics (Google)
- Used only for anonymous crash reporting
- Helps us identify and fix app stability issues
- No personal data is transmitted
- Data is automatically deleted after 90 days
Firebase Authentication and App Check (Google)
- Creates a pseudonymous app identity used to own private generated sounds
- Verifies that backend requests come from a legitimate Echo Sleep app instance
- No name, email address, or password is required
Google Cloud Translation
- Detects the language of AI sound prompts and translates non-English prompts to English
- Prompt text is sent only when you request AI sound generation
ElevenLabs
- Processes the English prompt to generate the requested sound effect
- Echo Sleep calls ElevenLabs only from its protected backend; provider credentials are never stored in the app
Railway
- Hosts the protected Echo Sleep backend, generation metadata, and private generated-audio storage
- Audio downloads use temporary signed links
RevenueCat
- Verifies subscription entitlements used to enforce AI generation access and limits
- Subscription status is associated with the same pseudonymous app identifier
Vercel Web Analytics
- Used on this website to collect aggregated page analytics
- Helps us understand site traffic and improve content
- Configured through our Vercel hosting environment
App Store Platforms
- Apple App Store and Google Play Store handle app distribution
- Subject to their respective privacy policies
- We have no access to individual user data from these platforms
Data Security
We implement security measures to protect any data we handle:
- All data transmission is encrypted (HTTPS/TLS)
- Crash reports are anonymized before transmission
- Generated audio is stored privately and accessed through short-lived signed links
- Regular security reviews of our minimal data practices
Children's Privacy
Echo Sleep is safe for all ages:
- We do not knowingly collect personal information from children
- No name, email address, password, or explicit account registration is required
- The app can be used safely by families with children
- Complies with COPPA (Children's Online Privacy Protection Act)
Your Rights
You have complete control over your privacy:
- Right to Information: This policy explains our data practices
- Right to Control: AI sounds can be removed individually from your private library
- Right to Delete: Contact support@echosleep.app to delete all cloud data associated with your pseudonymous identifier
- Right to Opt-Out: Disable crash reporting in device settings
International Users
Echo Sleep respects privacy laws worldwide:
- GDPR: We minimize processing, disclose service providers, and honor access or deletion requests where applicable
- CCPA Compliant: No sale or sharing of personal information
- Global Privacy Standards: Designed to meet strict privacy requirements
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or for legal compliance:
- Material changes will be communicated through app store updates
- The "Last updated" date will reflect any changes
- Continued use of the app constitutes acceptance of updates
- We will not reduce privacy protections without clear notice
Contact Us
Questions about our privacy practices? We're here to help:
Email: Contact Support
Response Time: We typically respond within 24-48 hours
Subject Line: Include "Privacy Question" for faster routing
Summary
🔒 Privacy-First Design
Built-in sounds and preferences stay local. Optional AI generation sends only the prompt and necessary pseudonymous metadata to protected cloud services.
🚫 No In-App Tracking
We don't track your usage, sleep patterns, or personal behavior inside the mobile app.
📈 Minimal Website Analytics
Our website uses aggregated Vercel analytics so we can understand page traffic without adding ads or cross-site profiling.
📱 Local-First Playback
Settings and built-in sounds stay on your device; saved AI sounds use a private cloud library with local caching.
🛡️ Minimal Data
We do not request your name, email, contacts, location, microphone, or advertising identifier.