Privacy Policy

Echoo is a secure voice and video communication application. We collect only minimal technical data required for the service to function. We do not require phone numbers or real names. If you provide an email when registering, we store it for password recovery and account-related notifications only; registration with username and password only is also supported. We do not collect full legal name, passport details, or geolocation for this purpose. We do not track you for advertising or sell your data. People you save in the app are information you enter yourself; the app does not read your phone’s address book.

We store only the minimal technical data needed to operate the service:

• Username and account identifier
• Password (stored only as a cryptographic hash; we cannot recover it)
• Email — only if you provided it at registration (used for password recovery and account notifications)
• FCM push token (for incoming-call and app notifications)
• Premium subscription expiration date (if applicable)
• Temporary WebRTC session data (removed after the call; related server-side auxiliary data is retained for up to 24 hours)

We do NOT store:

• × Call recordings
• × Message content
• × Call history
• × Your phone’s address book / device contact list
• × Media files

Messages and local app settings remain on your device; the server processes only the limited account-related data described above.

Data may be processed on servers located in secure infrastructure to provide the service.

Echoo may request the following device permissions:

• Microphone — required for voice calls
• Camera — required for video calls
• Notifications — required for incoming call alerts and app notifications

The app does not request access to your phone’s contacts / address book.

• To provide voice and video calling
• To deliver incoming-call and app notifications
• To manage your account and Premium status
• To prevent abuse and ensure security

We use:

• WebRTC encryption (DTLS + SRTP) for all audio and video
• Passwords stored only as cryptographic hashes
• No permanent server storage of call audio/video, message content, or call history
• Temporary WebRTC-related data deleted within up to 24 hours
• On Android, Firebase Analytics collection is disabled in the app configuration

You can delete your account in the app Settings.

If you have questions, you can contact us at:

support@contactechoo.online