Legal

Privacy Policy

This privacy policy explains what EchoKindred collects, how it is protected and used, and how you can export or delete it.

Effective Date: November 22, 2025 | Last Updated: September 26, 2026

1. Data We Collect

We collect personally identifiable information (name, email, payment data) necessary to provide subscription access. We also store the digital content you provide (stories, vault entries, successor details).

2. Data Security and Encryption

Your Online Accounts vault is built for operational locators: institution names, account hints, last-four masks, password-manager or paper-location notes, and who to call first. We recommend you do not store full passwords, PINs, one-time recovery codes, Social Security numbers, or complete account numbers in EchoKindred. Keep those in a dedicated password manager or offline with your papers. Free-text notes and optional hint fields are encrypted with 256-bit AES at rest and protected with TLS in transit. Decryption is limited to systems that serve your own authenticated session, and to heirs you authorize under your continuity plan after release. Vault content is never sold, used for ad targeting, or used by EchoKindred to train AI models. Story and legacy content are stored securely and accessed only by you and those you authorize. See Security for the plain-English store / do-not-store list.

3. GDPR Compliance and Your Data Rights

We adhere to the General Data Protection Regulation (GDPR). You can request access, correction, deletion, portability, or restriction of your data at any time by contacting us.

  • •Right to Access: You may request a copy of all data we hold.
  • •Right to Erasure: You may request account deletion. We schedule permanent deletion after a 30-day cancellation window (see Data Retention below).
  • •Consent: We process data only with explicit user consent.
  • •Portability and Objection: You may export your data or object to specific processing where applicable.

4. Data Retention and Deletion

  • Active Accounts: We retain your data for as long as your account is active or as needed to provide services.
  • Deleted Stories: When you delete a story, it is moved to "Recently Deleted" where you can recover it for 30 days. After 30 days, it is permanently deleted.
  • Account Deletion: When you request account deletion in Settings, we schedule permanent deletion in 30 days. During that window you can cancel by signing back in. After the window closes, we permanently delete account content from our primary systems. Limited copies may remain briefly in encrypted backups or logs until those systems rotate, and we may retain records required for legal, tax, fraud-prevention, or dispute purposes.

5. Cookies and Tracking

We use essential cookies and local storage (including Supabase Auth) for sign-in and core product functionality.

We also load limited third-party measurement and reliability tools on the site: Google Analytics (gtag.js) for aggregated traffic and product usage, the Meta (Facebook) Pixel for conversion measurement when configured, and Sentry for error monitoring when configured. These tools may set cookies or similar identifiers and receive technical data such as page URLs, device and browser details, and error diagnostics. We do not sell your personal information.

We use the Meta Pixel to measure ad performance: page views and account sign-ups. We do not send your personal content, stories, or estate data to Meta.

6. Third-Party Sharing

We do not sell your personally identifiable information. We share data with processors that help us run EchoKindred, under contracts that limit their use of your data to providing their services to us. Current categories include:

  • •Payments: Stripe processes subscription and gift checkout.
  • •Hosting and database: Firebase Hosting serves the app shell; Supabase provides Auth, Postgres, Edge Functions, and Storage.
  • •Communications: SMS carriers and Twilio deliver optional text messages when you enable them.
  • •AI capture helpers: Google Gemini (and related model providers we configure) may process text or audio you submit for polish, transcription, or filing suggestions.
  • •Analytics and reliability: Google Analytics, Meta Pixel (when configured), and Sentry as described above.
  • •Legal: We may disclose information when required by valid legal process.

8. SMS and Phone Number Information

When you provide and verify your mobile phone number, EchoKindred may use it to send you SMS confirmations when you save stories and optional weekly memory prompts, if you enable these settings in your account. We process your phone number and SMS preferences solely to deliver these messages and to comply with legal and carrier requirements.

EchoKindred does not sell your phone number or share it with third parties for their own marketing purposes. We may share information with service providers (such as SMS carriers and messaging platforms) solely to deliver SMS messages and support our services, pursuant to appropriate data protection agreements.

SMS Terms

By enabling these options, you agree to receive SMS confirmations when you save stories and optional weekly memory prompts from EchoKindred. Message frequency varies. Msg&data rates may apply. Reply STOP to opt out, HELP for help. Terms: echokindred.com/terms Privacy: echokindred.com/privacy.

9. Contact Information

For questions about this Privacy Policy or to exercise your data rights, contact us:

privacy@echokindred.com

Ready to preserve your legacy?

Start in minutes.

No credit card required. Cancel anytime.