This might be the shortest privacy policy you've ever read - because we collect almost nothing.
Last updated: December 6, 2025 | Effective: January 1, 2024
This policy explains our practices in detail, but the summary above covers 95% of what you need to know.
We collect zero data from the EchoVaults mobile application. The app operates entirely offline, stores all data locally on your device, and makes no network requests to our servers or any third-party services.
When you visit echovaults.org, we collect minimal information necessary to operate the website:
If you email us for support, we retain your email address and the content of your message only as long as necessary to respond to your inquiry (typically 30-90 days).
We use basic website analytics to understand which pages are most helpful and how people find EchoVaults. This helps us improve our educational content about digital privacy.
We use contact information solely to respond to your inquiries, provide technical support, or send important security updates (only if you explicitly request them).
We may use collected information to prevent abuse of our website, investigate security incidents, or comply with legal obligations (though we design our systems to minimize such needs).
We do not sell, rent, or trade your information to anyone. We may disclose information only in these limited circumstances:
If required by law, court order, or government regulation (we will resist overly broad requests and notify users when legally possible).
Minimal data shared with essential service providers (web hosting, email delivery) under strict data processing agreements.
To prevent abuse, protect against security threats, or investigate potential violations of our terms.
We implement industry-standard security measures to protect any information we do collect:
Remember: The most secure data is data that doesn't exist. EchoVaults is designed so that even a complete breach of our systems wouldn't compromise your vault contents, because we never have access to them in the first place.
You have the following rights regarding any personal information we may have collected:
Request a copy of any personal information we have about you (usually none or very little).
Request correction of any inaccurate personal information we may have.
Request deletion of your personal information (subject to legal retention requirements).
Request a copy of your data in a machine-readable format (if technically feasible).
To exercise these rights, email us at privacy@echovaults.org. We'll respond within 30 days for most requests.
EchoVaults is designed for adults (18+) dealing with end-of-life planning and digital legacy concerns. We do not knowingly collect personal information from children under 13.
If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@echovaults.org and we will delete it promptly.
EchoVaults is available worldwide, but our servers are located in the United States. If you're located outside the US, please be aware that:
You have additional rights under GDPR, including the right to object to processing, restrict processing, and lodge complaints with supervisory authorities. Contact our EU representative at eu-privacy@echovaults.org.
We may update this privacy policy occasionally to reflect changes in our practices or legal requirements. We will:
Your continued use of EchoVaults after policy changes constitutes acceptance of the updated terms.
If you have any questions about this privacy policy or our data practices, please contact us:
General privacy questions:
privacy@echovaults.org
Data deletion requests:
delete@echovaults.org
Response time: We typically respond to privacy inquiries within 1-3 business days. For complex requests requiring research, we may take up to 30 days as permitted by law.