Privacy Policy

Last updated: May 17, 2026

1. Who We Are and Our Commitment

EchoSoul is a platform developed by No More Alone ("we"). We solemnly commit to protecting the privacy and personal data of our users. This policy describes with full transparency how we collect, store, and process your information in accordance with the General Data Protection Regulation (GDPR) and the requirements of the Google Play Console.

2. Information We Collect

To provide you with a personalized and secure emotional companionship experience, we collect only the minimum essential data:

• Account Information: Email address, name or pseudonym, and profile picture selected during registration to identify you securely.
• Conversation History: Messages exchanged with your virtual companion, which are necessary for the AI to maintain dialogue coherence and provide you with continuous emotional support.
• Crisis Detection Data: Our system locally and ethically analyzes whether there are expressions suggesting high-risk situations or emotional crises, with the sole purpose of preventively showing you local help resources.
• Emergency Contact (Optional): If you choose to set it up, we will store the name and phone number of a person you fully trust so you can call or alert them directly from the app in difficult moments.

3. Use of Information

We process your data exclusively for the following legitimate purposes:

• Provide and personalize the interactive conversation service with the virtual companion.
• Facilitate wellness features, proactive check-ins, and emotional journals.
• Ensure your safety through the activation of ethical support workflows upon crisis detection.
• Prevent fraud, abuse, and ensure the technical stability of Supabase servers.

4. Data Encryption and Security

We implement industry-level security measures to protect your data:

• All data transfer between the application and our Supabase database is carried out through SSL/TLS encrypted channels.
• Databases use encryption at rest to prevent unauthorized access.
• The language model (LLM) processing logic runs under strict confidentiality policies without storing external copies of your chats for general training.

5. Data Transfer and Sharing

We do not sell, rent, or trade your personal data. Your data is only shared under the following strict conditions:

• Service Providers: Reliable cloud infrastructures (such as Supabase, Vercel, and n8n) to support the application's storage and workflows. These providers operate under strict personal data processing agreements.
• Legal Requirements: Only when strictly required by law or formal request from judicial authorities.

6. Your Rights and Full Control (GDPR)

As the owner of your personal data, you have absolute control at all times. You can exercise the following rights directly from the application settings:

• Right of Access and Rectification: You can view and modify your profile data whenever you wish.
• Right to Erasure (Right to be Forgotten): You can press the "Delete Account" button in your profile. This will permanently delete all your personal data, companion profiles, journals, and conversations in Supabase irreversibly within a maximum of 48 hours.
• Right to Data Portability: You can request a copy of your interactions for personal backup purposes.

7. Third-Party Links and Services

Our application may provide access to helplines and external support networks in case of crisis. We are not responsible for the privacy policies or content of such third-party external sites.

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect service improvements or regulatory changes. We will notify you of any substantial changes by posting the new version here or through a prominent notice in the application.

9. Contact

If you have questions, concerns, or wish to exercise your data rights (Access, Rectification, Erasure, and Objection), you can write to us at any time at:

📧 soporte@echosoul.app