Privacy Policy

Who we are

EchoToCrowd is operated by Xylos Interactive Inc. ("EchoToCrowd," "we," "us"), a corporation registered in Ontario, Canada. This policy explains what personal information we collect through the EchoToCrowd app and website, why we collect it, and the choices you have.

Information we collect

Account information

When you sign in with Google or Apple, we receive your name, email address, and a unique identifier from that provider. We do not receive or store your password for those accounts.

Date of birth

We collect your date of birth to confirm you meet our minimum age requirement (see our Terms of Service). We store this to enforce that requirement going forward.

Location

We collect your device or manually-entered location so we can show you broadcasts posted nearby and determine how far your own broadcasts reach. Your precise coordinates are stored so distance calculations work correctly, but other users never see your exact location — only an approximate distance (e.g. "3.8 km away") or the general area label you choose to display.

Content you create

This includes broadcasts, replies, private messages, profile photos, and any other images or files you upload. Uploaded images are automatically scanned by AWS Rekognition for content moderation and by AWS GuardDuty for malware, and broadcast text is automatically screened using OpenAI's moderation tooling, before or shortly after being made visible to others — see "Automated moderation" below.

Payment information

If you subscribe to a paid tier, payments are processed by Stripe. We do not receive or store your full card number — Stripe handles that directly. We do receive confirmation of your subscription status and tier from Stripe.

Identity verification

Some account tiers require identity verification through Stripe Identity, which may involve submitting a government-issued ID and a live photo. This verification is processed by Stripe on our behalf under their own privacy practices; we receive confirmation of your verification result, not a copy of your ID.

Usage information

We collect standard technical information such as device type, app version, and general usage patterns to keep the service running and improve it.

Automated moderation

To help keep EchoToCrowd safe, images you upload are automatically analyzed by AWS Rekognition, and broadcast text is automatically analyzed by OpenAI's moderation model, to detect content that may violate our community guidelines. Content flagged with lower confidence may be sent for human review by an EchoToCrowd administrator; content flagged with high confidence may be hidden or blocked automatically pending review. These automated systems process content but do not make final account-level decisions like suspension — a human administrator reviews flagged reports before any account action is taken.

How we use your information

• To operate core features: matching broadcasts to your location and interests, delivering messages, and displaying your profile to others as you've configured it.
• To verify your age and identity where required.
• To process payments and manage subscriptions.
• To detect and act on content that violates our community guidelines.
• To communicate with you about your account, security, or changes to our services.
• To comply with legal obligations.

Who we share information with

We share information only as needed to operate the service:

• Other users see what you choose to share in your profile and broadcasts, plus approximate distance — never your exact coordinates.
• Service providers we rely on to run EchoToCrowd, including Amazon Web Services (hosting, storage, image moderation, malware scanning), OpenAI (text moderation), Stripe (payments and identity verification), and Google (authentication).
• Legal authorities, where required by law or to protect the safety of our users.

We do not sell your personal information.

Your choices

• You can edit or remove most profile information at any time in the app.
• You can block or report other users.
• You can request deletion of your account and associated data by contacting us at the address below.
• You can opt out of appearing in other users' broadcasts discovery via your profile settings.

Data retention

We retain your information for as long as your account is active, and for a limited period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Content removed for moderation reasons may be retained longer for audit and safety purposes.

Children's privacy

EchoToCrowd is not intended for anyone under 16, and we do not knowingly collect information from anyone under that age. See our Terms of Service for details.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you through the app or by email before they take effect.

Contact us

Questions about this policy or your data? Reach us at privacy@echotocrowd.com.