# Privacy Policy for Echo Trail - Trace & Learn
**Last Updated:** January 2026
## Introduction
Welcome to Echo Trail - Trace & Learn ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of children who use our app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").
By using our App, you agree to the collection and use of information in accordance with this Privacy Policy.
## Information We Collect
### 1. Authentication Information
When you sign in with Google, we collect:
- **Email address** (from your Google account)
- **Display name** (from your Google account)
- **Profile photo URL** (from your Google account)
- **Firebase User ID** (unique identifier created by Firebase Authentication)
**Purpose**: To authenticate your account and provide secure access to your data.
### 2. Educational Data
We collect and store:
- **Custom tests/challenges** you create
- **Test results and reports** including:
- Accuracy percentages
- Time taken per item
- Correct/incorrect item results
- Completion timestamps
- **Test progress** (in-progress test state)
- **Custom words** you create (text and settings)
**Purpose**: To provide educational content, track progress, and enable cloud backup of your data.
### 4. Subscription Information
For premium subscriptions, we collect:
- **Subscription status** (premium or free)
- **Subscription type** (monthly or yearly)
- **Purchase tokens** (from Google Play Billing)
- **Order IDs** (from Google Play Billing)
- **Expiry timestamps**
- **Auto-renewal status**
**Purpose**: To manage your premium subscription and provide access to premium features.
**Note**: Subscription data is stored locally on your device (device-scoped) and is not synced to cloud storage to prevent cross-user subscription leakage.
### 3. Device Information
We may collect:
- **Device identifiers** (for Google Play Billing verification)
- **App version**
- **Operating system version**
**Purpose**: To provide app functionality, process purchases, and improve app performance.
### 4. Usage Data
We may collect:
- **App usage patterns** (through Firebase Analytics, if enabled)
- **Error logs** (for debugging and app improvement)
**Purpose**: To improve app functionality and user experience.
## How We Use Your Information
We use the collected information for the following purposes:
1. **To Provide and Maintain the App**: Enable core functionality, authentication, and data synchronization.
2. **To Personalize Your Experience**: Customize content based on your preferences.
3. **To Track Progress**: Store and display test results, reports, and learning progress.
4. **To Process Payments**: Manage premium subscriptions through Google Play Billing.
5. **To Enable Cloud Backup**: Sync your data to Firebase for backup and restoration across devices.
6. **To Improve the App**: Analyze usage patterns and fix bugs to enhance user experience.
7. **To Communicate**: Send important updates about the app (if you opt-in).
## Data Storage and Security
### Local Storage
- **PaperDB**: Your data is stored locally on your device for immediate access and offline functionality.
### Cloud Storage
- **Firebase Firestore**: Your data is securely stored in Google's Firebase Firestore database.
- **User Isolation**: All cloud data is scoped to your authenticated user account. Other users cannot access your data.
### Security Measures
- **Authentication Required**: All cloud operations require Google Sign-In authentication.
- **Encryption**: Data transmitted to and from Firebase is encrypted using HTTPS.
- **Access Control**: Firestore Security Rules ensure users can only access their own data.
- **Secure Storage**: Firebase services comply with industry-standard security practices.
## Data Sharing and Disclosure
We do **NOT** sell, trade, or rent your personal information to third parties.
We may share your information only in the following circumstances:
1. **Service Providers**: With Firebase (Google) for cloud storage and authentication services.
2. **Google Play**: With Google Play for subscription billing and purchase verification.
3. **Legal Requirements**: If required by law or to protect our rights and safety.
## Children's Privacy (COPPA Compliance)
Echo Trail is designed for children ages 3-8, but we recognize that:
- **Parents/Teachers** typically create accounts and manage the app.
- **Children** use the app under adult supervision.
- We do **NOT** knowingly collect personal information directly from children under 13 without parental consent.
**Parental Controls**:
- Parents/teachers control account creation and authentication.
- All data is associated with the parent/teacher's authenticated account.
**If you believe we have collected information from a child without parental consent, please contact us immediately.**
## Your Rights and Choices
You have the following rights regarding your data:
1. **Access**: You can view all your data through the app's interface.
2. **Modification**: You can edit tests and custom words through the app.
3. **Deletion**: You can delete:
- Custom tests/challenges
- Test reports
- Custom words
- Your account (by signing out and uninstalling the app)
4. **Data Export**: You can access your data through the app at any time.
5. **Opt-Out**: You can stop using the app and delete your account at any time.
**To delete your account and all associated data**:
1. Delete all tests and reports through the app.
2. Sign out from the app.
3. Uninstall the app.
4. Contact us if you need assistance with data deletion.
## Data Retention
- **Active Accounts**: We retain your data as long as your account is active and you use the app.
- **Deleted Data**: When you delete data through the app, it is removed from both local and cloud storage.
- **Account Deletion**: If you delete your account, all associated data is permanently deleted from our systems.
## Third-Party Services
Our App uses the following third-party services:
1. **Firebase (Google)**:
- Firebase Authentication (Google Sign-In)
- Cloud Firestore (database)
- Privacy Policy: https://firebase.google.com/support/privacy
2. **Google Play Billing**:
- Subscription management and payment processing
- Privacy Policy: https://policies.google.com/privacy
3. **Google Play Services**:
- App distribution and updates
- Privacy Policy: https://policies.google.com/privacy
These services have their own privacy policies. We encourage you to read them.
## International Data Transfers
Your data may be stored and processed in servers located outside your country of residence. By using our App, you consent to the transfer of your data to these servers, which may be located in different countries.
## Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the app
- Updating the "Last Updated" date at the top of this Privacy Policy
You are advised to review this Privacy Policy periodically for any changes.
## Your Consent
By using our App, you consent to:
- The collection and use of information as described in this Privacy Policy
- The storage of your data in Firebase (Google) cloud services
- The processing of subscription payments through Google Play Billing
## Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
**Email**: paintoflower@gmail.com
**App Name**: Echo Trail - Trace & Learn
**Developer**: TeamTransform
## Additional Information for EU Users (GDPR)
If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):
1. **Right to Access**: You can request a copy of all personal data we hold about you.
2. **Right to Rectification**: You can request correction of inaccurate data.
3. **Right to Erasure**: You can request deletion of your personal data.
4. **Right to Restrict Processing**: You can request limitation of data processing.
5. **Right to Data Portability**: You can request your data in a portable format.
6. **Right to Object**: You can object to processing of your personal data.
To exercise these rights, please contact us using the contact information provided above.
## Additional Information for California Users (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
1. **Right to Know**: You can request information about what personal information we collect, use, and disclose.
2. **Right to Delete**: You can request deletion of your personal information.
3. **Right to Opt-Out**: You can opt-out of the sale of personal information (we do not sell personal information).
To exercise these rights, please contact us using the contact information provided above.
---
**Note**: This Privacy Policy is designed to comply with:
- Children's Online Privacy Protection Act (COPPA)
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Google Play Store requirements