In short
No servers for your notes. No accounts. Your recordings, transcripts and notes stay on your devices and, if you turn on sync, in your own private iCloud. Speech is transcribed on your device. AI is optional: only after you agree is the relevant text sent directly from your iPhone to the AI provider you choose, with your own API key. We never receive your recordings, notes or keys.
01Who we are
EchoAloud is published by LittleBigLab (“we”). This policy explains what happens to your information when you use EchoAloud on iPhone and Apple Watch, and on Mac when the Mac app becomes available. Questions: support@littlebiglab.app.
02What stays on your devices
Recordings, transcripts, organized text, summaries, Chat conversations, to-dos, translations and insights are stored on your device. Speech recognition and translation use Apple’s on-device technology; some languages need a one-time model download from Apple. Recordings made on Apple Watch stay on the watch until Apple’s system transfers them to your iPhone. If you back up your device to iCloud or a computer, those backups may include app data.
03Optional AI features
AI organization, Chat and insights use an AI provider you choose, with your own API key. The providers offered depend on your region and may include DeepSeek, Qwen, Doubao, Kimi, GLM, MiniMax, OpenAI, Claude, Gemini, Mistral and Grok.
When you connect a provider, you are asked to agree before anything is sent. After that, the app sends only the text needed for each task (for example a transcript, your additions, a question you ask in Chat, earlier messages in that conversation and the notes selected to answer it) directly from your iPhone to that provider. Insights may be prepared automatically in the background when you have new notes. Original audio is never sent. Recordings saved with “Keep my words only, no AI”, and thoughts kept away from AI, are never used. As with any internet request, the provider can see technical details such as your IP address.
Each provider processes this text under its own privacy policy and API terms, which are linked in the app. Depending on the provider and endpoint, processing may take place outside your country, including in the United States or China. Retention and model-training practices are set by the provider and your agreement with it. We cannot retrieve or delete data a provider has already received.
You can stop AI at any time by turning AI off in Settings → AI. This stops further requests, including automatic insights; requests already sent cannot be recalled. Recording and on-device transcription keep working without AI. When you connect or check a provider, the app sends a short fixed test message, which may incur a small charge from your provider; it does not read your notes.
04API keys
Your API key is stored only in your iPhone’s Keychain, separately for each provider and endpoint. It is sent only to the provider it belongs to, never to us, and is not included in sync or exports. AI usage is billed by your provider to your own account; EchoAloud does not sell AI credits.
05Optional iCloud sync
If you turn on Sync to Mac, supported text records are encrypted on your device before they are uploaded to the private CloudKit database in your Apple Account, and they are decrypted only on your own devices. The encryption keys are shared through iCloud Keychain. Recordings and API keys are not synced. We cannot read synced data. Apple processes service metadata under its own privacy policy. Turning sync off stops future uploads; it does not delete records already in your iCloud.
06Free trial and purchases
EchoAloud is free to download and includes a 3-day free trial. The full version is a one-time in-app purchase. Payments are handled entirely by Apple; we never see your payment details. To show your trial and purchase status, the app reads your App Store transaction information (such as your original download date) from Apple on your device. It is not sent to us.
07What we don’t do
EchoAloud has no ads and no third-party analytics, advertising or crash-reporting SDKs. We don’t track you across apps or websites, we don’t sell or share your data, and we don’t build profiles. If you choose to share analytics with app developers in your device settings, Apple may give us aggregated, anonymous statistics such as crash counts, under Apple’s privacy policy. This website uses no cookies, trackers or third-party resources.
08Contacting support
If you email us, we receive whatever you include and use it only to reply. Please don’t send API keys or private recordings. You can ask us to delete your messages at any time.
09Keeping and deleting your data
Your notes stay on your device until you delete them or remove the app. Deleting a thought in EchoAloud removes its content and related recordings; with sync on, the deletion reaches your other devices when they sync. Exports, shared files and device backups are separate copies that you manage. Removing the app or turning off sync does not clear your iCloud, your other devices, a provider’s records or your exports. Because we keep no central database of your notes, we cannot delete them remotely for you.
10Children
EchoAloud is not directed to children under 13, and we do not knowingly collect personal information from children.
11Your rights
Depending on where you live (for example under the EU or UK GDPR, or California law), you may have the right to access, correct or delete your personal data, or to object to its processing. Most of your data never reaches us, so you control it directly in the app. For anything you have sent us, email support@littlebiglab.app. Where we rely on your consent, such as sending text to an AI provider, you can withdraw it at any time. For data held by Apple or your AI provider, contact them directly. You also have the right to complain to your local data protection authority.
12Security
EchoAloud relies on Apple’s security features, including the Keychain and on-device encryption for sync. No method is perfectly secure, but we design EchoAloud to keep as little as possible off your devices.
13Changes to this policy
If our practices change, we will update this page and its effective date. If a change affects what is sent to third parties, we will ask for your consent again in the app where required.