Back to home

Privacy Policy

Last Updated: April 8, 2026

1. Our Core Philosophy

At Echo (hellofrom.today), we are dealing with the most sensitive data imaginable: the voices, memories, and legacies of your loved ones. We operate on a zero-trust, privacy-first architecture. We do not sell your data. We do not use your personal stories to train public AI models.

2. Data Collection & Usage

We collect the following types of information:

  • Account Data: Email addresses, names, and authentication data (managed securely via Supabase).
  • Audio Data: Voice recordings submitted during "Story-Keeper" sessions.
  • Transcripts: Text generated from your audio recordings.

3. AI Processing (Gemini & ElevenLabs)

To provide our interactive Story-Keeper experience and voice synthesis, we utilize enterprise APIs from Google Cloud (Gemini) and ElevenLabs.

  • Zero Retention: We have executed Data Processing Agreements (DPAs) with both Google Cloud and ElevenLabs that explicitly forbid them from retaining your audio or transcripts, or using them to train their foundational models.
  • Ephemeral Processing: Audio streams are processed in memory and immediately discarded by our AI partners once the transcript or synthesized voice is generated.

4. Blockchain Storage (Solana & Arweave)

When you choose to "Seal" a memory, the encrypted data is permanently stored on the Arweave network, and a cryptographic proof of ownership (NFT) is minted on the Solana blockchain.

  • Encryption: All data stored on Arweave is AES-256 encrypted. Only users with the specific decryption keys (managed via your Echo account or self-custodied wallet) can access the raw audio and transcripts.
  • Immutability: Because Arweave is a permanent ledger, we cannot delete data once it is sealed. You must ensure you only seal data you have the right to preserve.

5. Your Rights (GDPR & CCPA)

You have the right to access, correct, or delete your personal data stored on our centralized servers (Supabase). Please note that data explicitly "Sealed" to the blockchain cannot be deleted, though we can destroy our centralized copy of the decryption keys upon request, rendering the blockchain data permanently inaccessible.

6. Contact Us

For any privacy-related inquiries, please contact our Data Protection Officer at privacy@hellofrom.today.