Privacy Policy — Echoly

Last updated: 01.08.2026

Echoly is operated by Turkey. Contact: ekinciflashex@gmail.com

This policy explains what we collect, why, and what control you have. Echoly records and transcribes audio, so we treat that data carefully.

1. What we collect

Account data. Your email address, or the identifier Apple provides when you use Sign in with Apple. If you choose Apple's "Hide My Email", we only ever see the relay address.

Audio recordings. Audio you record in the app or import from your device, but only when you ask us to transcribe it. Recordings you keep on your device without requesting transcription are never uploaded to us.

Transcripts. The text produced from your audio, including word timings and speaker segments.

Usage data. Minutes transcribed per month, timestamps, and a device identifier. We use these to enforce plan limits and prevent abuse of the free tier.

Subscription data. Your subscription status, handled through RevenueCat and Apple. We never see your payment card details — Apple processes all payments.

Technical data. Crash reports and basic diagnostics.

We do not collect your contacts, location, photos, or browsing activity.

2. Why we process it, and on what legal basis

Purpose                             Legal basis (GDPR)

Providing transcription        Performance of a contract

Managing your account      Performance of a contract

Managing your account      Performance of a contract
Billing and subscriptions     Performance of a contract
Improving reliability             Legitimate interests
Legal compliance                Legal obligation

Under Turkish law (KVKK), processing is based on the necessity of processing for the performance of a contract (Art. 5/2-c) and our legitimate interests (Art. 5/2-f).

Providing transcriptionPerformance of a contract

We do not use your audio or transcripts to train any AI model — ours or anyone else's.

3. Who we share it with

We use the following processors. Each is bound by contract to protect your data and process it only on our instructions.

Processor - Purpose - Location

AssemblyAI, Inc. - Speech to text transcription - United States

Supabase, Inc. -Database, storage, authentication - Global

RevenueCat, Inc. - Subscription management - United States

Apple Inc. - Payments, Sign in with Apple - Global

Your audio is sent to AssemblyAI to be transcribed. AssemblyAI processes it and returns the text. Transfers outside your country rely on Standard Contractual Clauses or an equivalent safeguard.

We do not sell your data. We do not share it with advertisers.

4. How long we keep it

• Audio files: kept while your account exists, so you can play back your recordings. Deleted when you delete the recording or your account.

• Transcripts: the same.

• Usage records: retained in anonymised form (no link to you) after account deletion, so per-device free-tier limits still work. These contain no personal identifiers.

• Account data: deleted when you delete your account.

Deletion is immediate in our systems; backups are purged within 30 days.

5. Your rights

You can access, correct, delete, or export your data, object to processing, or withdraw consent at any time.

Deleting your account removes your recordings, transcripts, and account data. You can do this in the app under Settings, without contacting us.

For anything else, email ekinciflashex@gmail.com. We respond within 30 days.

If you are in the EU/EEA or UK, you may lodge a complaint with your data protection authority. If you are in Türkiye, you may apply to the Personal Data Protection Authority (KVKK) after first contacting us.

6. Security

Data is encrypted in transit (TLS) and at rest. Audio files are stored privately and accessible only to you. Access controls are enforced at the database level, meaning one user cannot read another's recordings.

No system is perfectly secure, and we cannot guarantee absolute security.

7. Children

Echoly is not intended for children under 13 (or under 16 in the EEA, where required). We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

8. Recording others

Recording laws differ by country. In some places you must inform everyone being recorded, or obtain their consent. You are responsible for complying with the law where you are. Echoly is a tool; how you use it is your responsibility.

9. Changes

We will update this page and change the date above when this policy changes. For significant changes, we will notify you in the app.

10. Contact

Echoly - Türkiye - ekinciflashex@gmail.com