Privacy Policy - Echo Journal
Effective date: 10 July 2026
Last updated: 10 July 2026
CKC Technologies Ltd (“we”, “us”, “our”) operates the mobile application Echo Journal (“the App”). This Privacy Policy explains what information the App collects, how it is used, and the rights you have over that information.
If you have questions, contact us at: support@ckctechnologies.com
1. Summary
– Your voice recordings, transcripts, and mood entries are stored only on your device. We never receive, read, or store them on our servers.
– We do not have user accounts. There is no sign-in, no cloud, and nothing tied to your identity by us.
– We show ads to non-paying users via Google AdMob, which collects a limited set of data described below.
– We use Apple’s In-App Purchase system to sell “Unlimited Recording”. Apple handles the payment; we never see your card details.
– The App is intended for users aged 13 and older.
2. Data collected by the App itself
2.1 Data we collect and store on your device
The following data is created by you and stored locally on your device only. It is not transmitted to us or any third party:
– Voice recordings made through the App.
– Transcripts generated on-device by Apple’s Speech framework from those recordings.
– Mood tags you select for each entry.
– App preferences (Face ID lock setting, daily reminder time, premium unlock status).
If you delete the App, all of this data is deleted with it. Deleted entries are held in an in-app Trash for 30 days before being permanently removed.
2.2 Data we do not collect
We do not collect:
– Your name, email, phone number, or postal address.
– Contact list, calendar, photos, or files.
– Your location, precise or coarse (by us — see AdMob below).
– Analytics on the content of your entries.
– Health or fitness data.
3. Data collected by third-party services
The App integrates the following third-party services. When you use the App, these services may collect data as described.
3.1 Google AdMob (advertising)
We use the Google Mobile Ads SDK to show interstitial advertisements to non-paying users. When an ad is served, Google may collect:
– Device identifiers (Identifier for Advertisers / IDFA if you granted tracking permission, or an anonymised identifier otherwise).
– Coarse location derived from IP address.
– Product interaction data (whether you saw or tapped an ad).
– Advertising data (which ads you were shown).
– Crash and performance diagnostics for the Google SDK itself.
Google uses this data to select relevant ads, measure ad performance, prevent fraud, and improve the ad network. Google is an independent data controller for this data. Their handling is governed by:
– Google’s Privacy Policy: https://policies.google.com/privacy
– Google’s Ads Data Policy: https://policies.google.com/technologies/ads
– The specific data collection list for the Google Mobile Ads SDK: https://developers.google.com/admob/ios/data-collection
Purchasing “Unlimited Recording” removes all ads and stops any data being sent to Google AdMob from the App.
3.2 Apple StoreKit (in-app purchase)
When you buy Unlimited Recording, Apple’s StoreKit processes the payment. We receive a signed receipt confirming the purchase but no personal or payment information about you. Apple’s handling is governed by Apple’s Privacy Policy: https://www.apple.com/legal/privacy/.
3.3 Apple Speech recognition
Transcription runs on-device using Apple’s Speech framework. Your audio is not sent to Apple’s servers for transcription. On older devices where on-device recognition is not available, Apple may process audio in the cloud briefly for transcription — see Apple’s Privacy Policy for details.
3.4 Apple Notifications
If you enable the daily reminder, Apple’s local notification system schedules and displays the reminder. The reminder is generated on your device; nothing is sent to Apple’s or our servers.
4. App Tracking Transparency
On first launch, iOS presents an App Tracking Transparency (“ATT”) prompt asking whether you allow the App to track you across other apps and websites. This permission governs whether Google AdMob may access the Identifier for Advertisers (IDFA):
– If you allow tracking, ads may be personalised using the IDFA.
– If you do not allow tracking, ads are still shown but are not personalised using the IDFA. Anonymised identifiers are used instead.
You can change this setting at any time in Settings → Privacy & Security → Tracking.
5. Legal bases for processing (UK GDPR / EEA users)
Where UK GDPR or EU GDPR applies, we rely on the following legal bases:
– Contract: to provide the App’s core functionality (recording, transcription, playback) — processed entirely on your device.
– Consent: for personalised advertising via AdMob (via the ATT prompt).
– Legitimate interests: for non-personalised advertising, diagnostics, and preventing ad fraud, where those interests are not overridden by your rights.
– Legal obligation: to comply with Apple’s App Store rules, tax reporting, and applicable law.
6. Your rights
Because we do not store any personal data on our servers, most data-subject requests can be fulfilled by you directly through the App:
– Access: open the App to view your entries.
– Deletion: delete individual entries, empty the Trash, or delete the App to remove all local data.
– Portability: entries can be played back and read as text within the App.
For data held by Google AdMob or Apple, please contact those parties directly.
If you are in the UK or EEA and have any concerns, you also have the right to complain to a supervisory authority — for the UK, the Information Commissioner’s Office (ico.org.uk).
7. Data retention
– Entries you create are retained until you delete them, or until you delete the App.
– Entries moved to Trash are held for 30 days, then permanently removed.
– We hold no data about you on our systems, so we have nothing to retain.
8. Children’s privacy
The App is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided information through the App, contact us and we will assist as far as possible (noting that any content lives on their device, not with us).
9. Security
Because your entries stay on your device, security depends primarily on device security. We recommend:
– Enabling Face ID lock in the App’s Settings.
– Keeping your device passcode strong and iOS up to date.
– Not enabling iCloud backup for the App if you require entries to never leave the device (iCloud backups are encrypted by Apple).
For third-party services (AdMob, Apple), refer to their security practices.
10. International transfers
Because we do not collect or transfer personal data, no international transfers occur through us. Third-party services (Google, Apple) may transfer data internationally under their respective safeguards.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Effective date” at the top will change, and material changes will be highlighted within the App or through the App Store update notes. Continued use of the App after a change indicates acceptance.
12. Contact
Questions, requests, or complaints about this Privacy Policy:
CKC Technologies Ltd
Email: support@ckctechnologies.com
This Privacy Policy is provided as a good-faith description of the App’s data handling. It is not legal advice; if you have questions about how UK GDPR, EU GDPR, or other laws apply to your circumstances, please seek independent legal advice.