Privacy Policy

1. What we collect

• Account basics — email, username, display name, profile photo.
• Content you create — capsules, posts, voice notes, tribe activity, messages (messages are end-to-end between participants; moderators only see metadata unless legally required).
• Mood & signals — mood check-ins, resonance/doubt signals on posts, compatibility scores used for Echo Swap.
• Device & login data — device name, platform, IP address, new-device flags, kept for security review.
• Safety data — age-assurance results, guardian links, moderation verdicts on reported content.

2. What we deliberately do NOT do

• We do not sell personal data to anyone.
• We do not upload your address book — contact discovery uses salted hashes that cannot be reversed.
• We do not build advertising profiles or track you across other apps.
• Our AI models screen content for safety; prompts and outputs are logged without your message content.

3. Legal bases (GDPR)

Contract performance (running your account), legitimate interests (safety and abuse prevention), consent (optional features such as contact discovery), and legal obligations (minor-safety requirements). Consent records with policy versions and timestamps are retained as evidence.

4. Your rights

• Export — request a machine-readable archive of your data from Settings.
• Delete — request account erasure; deletions run on a scheduled date and cover all associated tables.
• Correct / object — edit your profile anytime, or contact privacy@getechodrop.com to exercise other rights.

Requests are tracked with response-time targets and you receive confirmation when complete.

5. Minors & protection layers

Accounts pass age assurance before adult interactions unlock. Teen accounts require a linked guardian, operate under stricter interaction limits, and every media upload passes automated screening with human review of flags.

6. Retention

Content is kept while your account is active. Security logs are retained up to 90 days; safety records are retained as required by law. Deletion requests remove content irreversibly after the cooling period shown in-app.

7. Contact

Questions or requests: privacy@getechodrop.com. This policy may be updated; material changes will be announced in-app with re-consent where required.

Template notice: have this reviewed by qualified counsel before launch, and adapt jurisdictions (e.g., add CCPA section if applicable).