PRIVACY POLICY

Last Updated: December 28, 2025

1. Introduction
Welcome to Echo ("we," "our," or "us"). We operate the website wibe.one and the Echo mobile application (the "App").

At Echo, we believe that your digital memories should be as secure as your physical ones. Our mission is to anchor digital secrets to the real world while preserving your absolute privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our mobile application.

By using Echo, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the application.

2. The Core Philosophy: Privacy-First Architecture
Unlike traditional social networks, Echo is designed as a decentralized, privacy-first tool.
- Local Encryption: When you create an "Echo" (a memory file), the encryption process happens locally on your device.
- User-Controlled Sharing: We do not host a central feed of your memories. You share your encrypted .echo files directly with friends via third-party platforms (like WhatsApp, Telegram, or iMessage).
- No "Backdoor" Access: We do not have the private keys to decrypt your user-generated content. Only the recipient, standing at the physical location you specified, can unlock the file.

3. Information We Collect
We collect information in two categories: Information You Provide and Automatically Collected Information.

A. Information Required for App Functionality (Permissions)
To provide the core features of the App, we request access to specific permissions on your mobile device. You can revoke these permissions at any time in your device settings, but doing so may break app functionality.

Location Data (GPS & Compass):
Why we need it: This is the core engine of Echo. We use your precise location to allow you to "anchor" memories to specific coordinates and to unlock memories when you are near them.
Storage: We process location data in real-time. We do not track, log, or sell your movement history to third parties.

Camera & Photos:
Why we need it: To allow you to take photos or select images to encrypt inside an Echo file.
Storage: Images are encrypted immediately into the .echo file. We do not upload your raw photos to our servers.

Microphone:
Why we need it: To allow you to record voice logs for your time capsules.
Storage: Audio is encrypted locally. We do not listen to or upload your recordings.

Storage / File System:
Why we need it: To save the encrypted .echo files to your device so you can share them, and to open files you receive from others.

B. Automatically Collected Data (Analytics)
While we do not look at your content, we may collect metadata to improve app stability and performance. This includes:
- Device Information: Device model, operating system version, and unique device identifiers.
- Usage Data: Crash reports, launch times, and performance metrics (e.g., "App crashed on startup").
- Log Data: Internet Protocol (IP) address, browser type, and timestamps.

4. How We Use Your Information
We use the collected data for the following purposes:
- To Facilitate the Service: Calculating the distance between your device and the target coordinates of an Echo file.
- To Improve the App: Analyzing crash logs to fix bugs (e.g., "Why does the app crash on Android 12?").
- To Enforce Security: Verifying that the device is actually at the location (preventing GPS spoofing where possible).

5. Data Sharing and Third Parties
We do not sell your personal data.

However, we may share generic, aggregated data with trusted third-party service providers to help us operate the app:
- Analytics Providers: We may use services like Google Analytics for Firebase or Mixpanel to monitor infrastructure usage. These services may collect your IP address or device ID.
- Map Services: To display radar or map interfaces, the app may query standard map SDKs (like Google Maps SDK or Mapbox). These providers have their own privacy policies regarding location data processing.
- User-Initiated Sharing: When you send an .echo file via a third-party app (e.g., WhatsApp, Telegram), that file is subject to the privacy policy and transmission security of that third-party app. Echo is not responsible for the data once it leaves our application.

6. Data Security
We implement industry-standard encryption protocols (AES-256) to protect your generated files.
- At Rest: Your memories are encrypted on your device storage.
- In Transit: Since you control the file transfer (via chat apps), security depends on the channel you choose.
However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

7. Children’s Privacy
Echo is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we will immediately delete this from our records. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

8. Your Data Rights (GDPR & CCPA)
Depending on your location, you may have the following rights:
- The Right to Access: You have the right to request copies of your personal data (if we store any).
- The Right to Erasure: You have the right to request that we delete your personal data.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
Since Echo is a local-first application, most of your data (photos, voice logs, location history) resides mostly on your device. You can exercise your "Right to Erasure" simply by uninstalling the app and deleting your local .echo files.

9. Data Deletion & User Rights
Since Echo is a peer-to-peer application, we do not store your personal data on our servers. All data (location logs, audio files, and shared memories) is stored locally on your device.
- To delete your data: You may delete individual memories within the app's Archive or uninstall the application to remove all data permanently.
- To request assistance: If you have questions regarding your data or wish to submit a formal deletion inquiry, you may contact us at info[at]wibe.one. We will respond to all requests within 30 days.

10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us
If you have any questions about this Privacy Policy, please contact us:
By Email: info[at]wibe.one