EchoMom

Privacy Policy

Effective date: July 15, 2026

EchoMom helps parents and care teams track child care through voice, chat, events, insights, and personalized media. This policy explains what we collect, how we use it, and when we share it.

Key points

Speech recognition powers voice chat

When you start a voice feature, iOS uses Apple speech recognition and Android uses Google/Android speech services to turn speech into text. EchoMom receives the recognized text so it can help with EchoMom chat, care logging, and related responses.

Sharing is limited to required services

We share information only with service providers needed to operate EchoMom, such as hosting, authentication, AI support, storage, payment, notification, support, and security services. AI and media providers may include OpenAI, DeepInfra, SunoAPI.org, Apple speech recognition on iOS, and Google/Android speech services on Android. We do not sell personal information.

Families stay in control

Parents and legal guardians can update, export, or ask us to delete account and child information, subject to legal, security, and operational requirements.

Information we collect

We collect information you provide directly and information needed to run the service.

  • Account details such as name, email address, authentication provider, locale, settings, and billing status.
  • Child profile and care information you enter, including name, age or date of birth, gender or pronouns, nicknames, name pronunciation hints, generated name pronunciation possibilities, routines, care events, milestones, teething and tooth-eruption stages and dates, teeth change history, notes, memories, preferences, and shared-care permissions.
  • Caretaker information used for family sharing and personalization, including caretaker names, relationship to the child, account role, sharing permissions, and access context.
  • Recognized voice text, chat messages, EchoMom interactions, generated songs or media, song ideas, and responses created while using EchoMom.
  • Song playback and feedback signals, including plays, likes or ratings, replay or skip behavior, duration of plays, completion percentage, and playlist context.
  • Device, usage, diagnostic, notification, subscription, payment, and security metadata needed to operate and protect the service.

How we use information

We use information to provide recognized voice input, AI-assisted chat, care and teeth tracking, summaries, reminders, milestones, insights, personalized media, family sharing, support, billing, security monitoring, abuse prevention, legal compliance, and optional pseudonymous usage analytics to understand and improve the service.

We use song playback and feedback signals, including plays, likes or ratings, replay or skip behavior, and duration of plays or completion percentage, to build user taste profiles. Those profiles help EchoMom prioritize songs and styles that show indications of liking and reduce suggestions that show signs of dislike or low interest.

Email correspondence and notifications may use your account name, caregiver name, and child profile name so messages clearly identify the account, sender, recipient, or child they concern. Memory Spark reminder emails do not include saved memory answers; they link back to EchoMom so you can answer in the app.

Usage analytics is optional and pseudonymous, not anonymous. When enabled, EchoMom sends a limited set of app events to Google Analytics for Firebase. Events may identify an action category, such as the type and status of a care event, notification type, agent opening, song playback, and whether access is as a parent or caregiver or to an owned or shared child. We do not send EchoMom account or child identifiers, names, notes, recognized voice text, chat requests, song titles, or playlist names. Firebase assigns an app-instance identifier and may also process device and app information, approximate location derived from a masked IP address, session and app-lifecycle events, notification interactions, and purchase or subscription events. You can turn analytics off at any time in EchoMom's privacy settings.

Voice features and AI-assisted chat

EchoMom uses speech recognition only when you actively use a voice feature. Apple provides speech recognition on iOS, and Google/Android speech services provide speech recognition on Android. EchoMom receives recognized text from the app, and that text may be sent with relevant care context to trusted AI providers so the app can answer questions, log events, summarize care history, and generate helpful follow-up messages.

Recognized voice text, chat messages, EchoMom responses, and related metadata may be stored so your family can see prior interactions and so EchoMom can maintain useful care context.

EchoMom and its agent responses are not an emergency service and are not a substitute for medical advice, diagnosis, or treatment. Parents and legal guardians are solely responsible for their child's health and medical decisions. For medical concerns, contact a qualified clinician or emergency services.

Agent actions and teeth tracking

When you ask the EchoMom agent to take an action, it may read or change child information only within the requesting account's current permissions. For teeth tracking, the agent may read or update which of the 20 primary teeth are coming in or through, the dates or child ages you provide, typical eruption windows, and the teeth change history. Each change records the account that made it and when it was made.

We treat teeth records as child care and health-related information. Only caregivers with the required milestone-and-teeth access can view or change them. Agent output about tooth eruption is general informational guidance, not a diagnosis or a substitute for a pediatric dentist or other qualified clinician.

User-requested emails

EchoMom sends an immediate or scheduled agent-generated email only when a signed-in user explicitly asks for it. By making that request, the user directs and consents to EchoMom generating, processing, and emailing the selected content to the selected recipient or recipients. The user should review the requested content and recipients before asking EchoMom to send it.

A requested email may contain sensitive child profile, care, or health-related information, including summaries, graphs, insights, analyses, reports, care events, sleep, feeding, teething, medication, bathroom, milestone, or other information from EchoMom. It may also contain AI-generated summaries or transformations of that information. EchoMom sends these emails only to the requesting user's account email or to verified caregiver accounts with active access to the child.

EchoMom processes the email content and uses Amazon Simple Email Service (Amazon SES) to send it; the recipient's email provider also processes and delivers it. Email is not end-to-end encrypted by EchoMom and may be stored, forwarded, or shown in inbox or device previews outside EchoMom. We keep limited delivery metadata, such as recipient account, relationship, content type and size, child, source, and send time, for delivery control, duplicate prevention, security, and spam-rate limits.

Push notifications

If you enable push notifications, EchoMom may send a short title and summarized message about care, reminders, milestones, media, account activity, or an agent response, together with a device token and routing metadata. A notification may include a child profile name or a short summary derived from child care information, but opening EchoMom is normally required to view the underlying detail.

All remote push notifications are processed through Google Firebase Cloud Messaging. For Apple devices, Google forwards the notification to the Apple Push Notification service for delivery. Google and, on Apple devices, Apple therefore process the device token and notification payload needed to deliver the alert.

Push notifications may appear on a locked screen or other device surfaces where someone nearby can see them. You can disable notification categories in EchoMom, turn off push permission, or limit lock-screen previews in your Apple or Android device settings.

AI data sharing and consent

Before a parent or legal guardian registers a child profile, or an authorized caregiver joins one, EchoMom asks them to accept AI data sharing for that specific account and child. We store the acceptance date for each account-child pair. For example, three caretakers on three children require separate acceptances for each caretaker and each child.

After that acceptance, EchoMom may send the following information to third-party AI or media providers when needed for AI-assisted chat, recognized voice input handling, care logging, milestone and memory support, insights, name pronunciation possibilities, or personalized songs and media.

  • Chat messages, recognized voice text from the app, follow-up prompts, assistant responses, and related metadata.
  • Child name, date of birth or age, gender or pronouns, nicknames, name pronunciation hints, and generated name pronunciation possibilities.
  • Caretaker names, relationship to the child, account role, sharing permissions, and access context.
  • Care events, notes, routines, sleep, feeding, health, activity, milestone progress, teething and tooth-eruption records, memories, preferences, and other information entered into EchoMom.
  • Song requests, style and theme choices, lyrics, prompts, generated media metadata, playback and feedback signals, taste profile summaries, ratings, and playlist details.
  • AI and media providers may include OpenAI, DeepInfra, and SunoAPI.org. Apple provides speech recognition on iOS, and Google/Android speech services provide speech recognition on Android.

When we share information

We share information only with services required to deliver, secure, and improve EchoMom. These services may include cloud hosting, databases, storage, authentication, email and push notifications, platform speech recognition, AI personalization, song or media creation, payment processing, analytics, diagnostics, support, and security tools. Email delivery uses Amazon SES. Remote push delivery uses Google Firebase Cloud Messaging and, for Apple devices, the Apple Push Notification service.

Service providers process information only for the purposes needed to provide their services to EchoMom. We require service providers that process personal information for EchoMom to provide the same or equal protection required by this policy and our agreements with them. We may also disclose information when we believe disclosure is required by law, legal process, subpoena, court order, or a lawful request from law enforcement or other public authorities; to enforce our terms; or to protect the rights, privacy, safety, or security of EchoMom, our users, or others.

We do not sell personal information, and we do not share personal information for third-party advertising.

Children and guardian consent

EchoMom is intended for use by parents, legal guardians, and caregivers authorized by them. When you register a child profile, you confirm that you are the child's parent or legal guardian and have authority to provide the information and consent to its processing.

Caregivers invited to a child profile can access only the children and features permitted by the account owner or guardian. Their relationship to the child may be used to support access controls, personalization, and family context.

Retention, deletion, and choices

We keep information while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, maintain security, and keep backups. You can ask us to correct, export, or delete account or child information. Some backup, security, billing, or legal records may remain for a limited period.

You can change language, notification, sharing, and usage-analytics settings in EchoMom. You can also revoke microphone, speech, or push-notification permissions and control notification previews through your device settings, but the related features will not work without those permissions.

Security and international processing

We use reasonable administrative, technical, and organizational safeguards, including access controls and encrypted transport, to protect information. No system can be guaranteed completely secure.

EchoMom and its service providers may process information in Canada, the United States, and other countries where our providers operate.

Changes and contact

We may update this policy as EchoMom changes. If changes are material, we will take reasonable steps to notify users.

For privacy questions, requests, or concerns, contact us at hello@echomom.com.