HarkEcho
Privacy Policy
Information We Collect
Account information — your email and sign-in are handled by Supabase Auth; HarkEcho's own servers never see your password directly. Task content — the titles, notes, priorities, and due dates you create. Voice recordings — if you use the Pro "Voice Dump" feature, your recording is sent to OpenAI's Whisper-1 API for transcription into text; the audio itself is held only for as long as that transcription takes and is then deleted, so we never store your recordings — only the resulting text becomes tasks. Push notification device tokens — registered with Apple's APNs so we can deliver reminders and full-screen alarms. Subscription and purchase data — verified through Apple's App Store Server API (StoreKit 2) so we know which features you're entitled to.
How We Use It
We use this information to show and manage your tasks, to schedule reminders and full-screen alarms that help you follow through, to transcribe voice recordings into tasks (Pro Voice Dump only), and to check your subscription tier so the right features are unlocked. We don't use your task content or account data for advertising.
Third-Party Services We Use
HarkEcho relies on a small, fixed set of external services: Supabase (account authentication and data storage), OpenAI's Whisper-1 API (voice-to-text transcription for Pro Voice Dump only), Apple's Push Notification service — APNs (delivering reminders and full-screen alarms), and Apple's StoreKit / App Store Server API (processing and verifying subscription purchases). We don't use any other third-party service — no advertising network, no analytics SDK, no data broker.
Where Your Data Is Processed
HarkEcho's service providers — Supabase, OpenAI, and Apple — process and store data on servers in the United States. If you use HarkEcho from outside the United States, including from the European Economic Area or the United Kingdom, your information is transferred to and processed in the United States. By using the app you consent to that transfer.
How We Protect Your Data
All traffic between the app and our servers travels over encrypted HTTPS connections, and your sign-in session is stored in the iOS Keychain rather than in ordinary app storage. Access to stored data requires your authenticated account. No system is perfectly secure, and we don't claim otherwise — but we don't hold data we don't need, which is the protection we rely on most.
What We Don't Do
We don't sell your data. We don't run third-party advertising or analytics tracking anywhere in the app. We don't collect or dial a phone number — HarkEcho's "full-screen alarms" are an on-device synthesized voice, triggered by a push notification, not a real telephone call, and no telephony provider is involved.
Data Retention & Deletion
Your task data and account information are retained for as long as your account exists. You can permanently delete your account and its associated data at any time from Profile → Delete Account, right inside the app — no support request needed.
Your Rights Over Your Data
You can view and correct your task content at any time inside the app, and you can permanently delete everything from Profile → Delete Account without contacting us. If you'd like a copy of the data we hold about you, or you want to object to or restrict how we process it, email support@harkecho.app and we'll respond. If you're in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
Children's Privacy
HarkEcho is not directed at children, and we don't knowingly collect information from children. This is a plain statement of intent, not a formal certification of compliance with any specific children's-privacy regulation.
Changes to This Policy
If HarkEcho's data practices change in a way that affects this policy, we'll update this screen. Continuing to use the app after an update means you've seen the current version.
Contact
Questions about this policy or your data? Email us at support@harkecho.app.