Written to protect you.
Not the company.

Echos of Mind is a private self-awareness system. It helps you observe how your emotional patterns change over time.

It is not:

• –A social platform
• –An advertising platform
• –A data marketplace
• –A diagnostic or medical tool

Your data exists only to serve you.

We do not sell it.
We do not share it for advertising.
We do not build profiles to compare you with others.

Every insight generated in this app comes from your data alone, and goes back to you alone.

3.1 Account Information

• –Name
• –Email address (for authentication only)
• –Age range (optional)
• –Gender (optional)
• –Bio (optional)

Optional fields are never required to use the app and do not affect core functionality.

3.2 What You Create

• –Journal entries (text and voice)
• –Mood check-ins
• –Reflection interactions
• –Optional notes or tags

3.3 Technical Data

• –Device information (for app functionality)
• –App logs (for stability and debugging)
• –Crash reports (if enabled)
• –IP address (collected temporarily on form submissions for spam prevention only — not stored with your personal profile)

3.4 What We Do Not Collect

• –Location data
• –Contacts
• –Browsing history
• –Any data unrelated to your awareness journey

We use your data strictly to:

• –Detect your personal behavioral patterns
• –Generate reflection prompts
• –Maintain continuity of your emotional history

We do not use your data for:

• –Advertising
• –Cross-user comparison or benchmarking
• –Behavioral targeting
• –Any form of monetization

All insights are generated by comparing your current patterns with your own past data only.

There is no population comparison.
No ranking against other users.
No external benchmarks.

A pattern is only surfaced when:

• –Multiple signals align
• –The pattern is sustained over time
• –Sufficient data exists to support it

If certainty is low, no insight is shown.
We would rather stay silent than mislead you.

Sensitive personal content — including journal entries, mood data, and reflections — is protected with end-to-end encryption.

What this means

• –Your data is encrypted on your device before it leaves
• –Encryption keys are controlled by your device or credentials
• –Our servers store your data in encrypted form — unreadable without your keys

What this means for us

• –We cannot read your journal entries
• –We cannot manually inspect your reflections
• –We do not have access to your personal content in normal operation

What this means for you

• –If your encryption keys are lost and recovery is not enabled, encrypted data cannot be restored
• –This is a deliberate trade-off for stronger privacy

No system is completely immune to all threats. Ours is designed to minimize access risk, not to claim impossibility.

Inner Circle allows you to add up to 3 trusted contacts who may be notified during periods of severe negative drift.

Default behavior: Nothing is shared by default.

When sharing occurs:

• –Only when you have explicitly set up Inner Circle
• –Only when patterns cross a threshold you have consented to
• –Only the notification — not your journal content — is shared

Sensitive content remains encrypted during all storage and transmission. Decryption only occurs within contexts you have explicitly authorized.

We use limited third-party infrastructure services strictly for app functionality:

• –Firebase — authentication, crash reporting, push notifications

Firebase is not used for advertising or behavioral profiling. Analytics are minimal. Ad personalization is disabled.

We do not use any third-party advertising SDKs.

Notifications are minimal by design.

We do not send repeated engagement prompts.
We do not use notifications to drive retention or habit loops.

You will hear from the app only when a pattern becomes consistent or something meaningfully shifts. Silence is part of how this system works.

• –Encryption in transit (HTTPS)
• –Encryption at rest
• –Secure authentication
• –Controlled and restricted backend access

Your data is stored as long as your account is active. You may delete your data at any time from within the app.

Upon deletion:

• –Data is permanently removed subject to standard backup cycles
• –No shadow copies are retained for profiling or analysis

Under India's Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• –Right to information — know what personal data is being processed and for what purpose
• –Right to correction and erasure — correct inaccurate or incomplete data, or have your data erased
• –Right to grievance redressal — raise complaints about data handling and receive timely responses
• –Right to nominate — nominate another person to exercise your data rights in the event of your death or incapacity (see §11A below)
• –Right to withdraw consent — withdraw consent at any time, without affecting lawfulness of prior processing

To exercise any right: support@echosofmind.com — we respond within 72 hours.

If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India once constituted under the DPDP Act, 2023.

You may nominate another individual (your nominee) to exercise your data rights on your behalf in the event of your death or incapacity.

To register a nominee, email us at support@echosofmind.com with the subject line "Nominate a Data Representative". We will confirm the registration within 7 days.

As required under the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address data-related concerns.

In the event of a personal data breach, we will:

• –Notify the Data Protection Board of India as required by law
• –Notify affected users by email without undue delay
• –Describe the nature of the breach, data affected, and steps being taken

You will be notified at the email address registered to your account. If you believe your data has been compromised, contact us immediately at support@echosofmind.com.

Echos of Mind is intended for users aged 18 and above. Under India's Digital Personal Data Protection Act, 2023, a "child" means a person below the age of 18 years.

We do not knowingly collect personal data from anyone under 18. Processing of a child's data requires verifiable parental or guardian consent, which this platform does not currently support.

If you believe a person under 18 has registered, contact us immediately at support@echosofmind.com and we will promptly delete that data.

Echos of Mind complies with:

• –Information Technology Act, 2000
• –Digital Personal Data Protection Act (DPDP), 2023

Users may exercise their rights under these laws by contacting us directly.

Our Play Store Data Safety declaration exactly matches this policy.

No data type is collected beyond what is listed here.
No data is shared with third parties for advertising purposes.

If we update this policy, you will be notified within the app before changes take effect.

We will never quietly expand what we collect or share.

Any meaningful change will be communicated clearly.

For any privacy-related questions, concerns, or requests: