EchoMom
Effective date: July 30, 2026
EchoMom helps parents and care teams track child care through voice, chat, events, insights, and personalized media. This policy explains what we collect, how we use it, and when we share it.
EchoMom: Care Companion is the product brand for the application and service. It is provided and licensed by 17838832 Canada Inc., doing business as LaunchFury. EchoMom is not a separate legal entity.
When you start a voice feature, iOS uses Apple speech recognition and Android uses Google/Android speech services to turn speech into text. EchoMom receives the recognized text so it can help with EchoMom chat, care logging, and related responses.
We share information only with service providers needed to operate EchoMom, such as hosting, authentication, AI support, limited public web search, storage, payment, notification, support, and security services. Providers may include OpenAI, DeepInfra, SunoAPI.org, the Brave Search API, Apple speech recognition on iOS, and Google/Android speech services on Android. We do not sell personal information.
Parents and legal guardians can update, export, or ask us to delete account and child information, subject to legal, security, and operational requirements.
We collect information you provide directly and information needed to run the service.
We use information to provide recognized voice input, AI-assisted chat, care, allergen, and teeth tracking, possible-allergen suggestions and symptom alerts, summaries, reminders, milestones, insights, personalized media, family sharing, support, billing, security monitoring, abuse prevention, legal compliance, and optional pseudonymous usage analytics to understand and improve the service.
We use song playback and feedback signals, including plays, likes or ratings, replay or skip behavior, and duration of plays or completion percentage, to build user taste profiles. Those profiles help EchoMom prioritize songs and styles that show indications of liking and reduce suggestions that show signs of dislike or low interest.
Email correspondence and notifications may use your account name, caregiver name, and child profile name so messages clearly identify the account, sender, recipient, or child they concern. Memory Spark reminder emails do not include saved memory answers; they link back to EchoMom so you can answer in the app.
Usage analytics is optional and pseudonymous, not anonymous. When enabled, EchoMom sends a limited set of app events to Google Analytics for Firebase. Events may identify an action category, such as the type and status of a care event, notification type, agent opening, song playback, and whether access is as a parent or caregiver or to an owned or shared child. We do not send EchoMom account or child identifiers, names, notes, recognized voice text, chat requests, song titles, or playlist names. Firebase assigns an app-instance identifier and may also process device and app information, approximate location derived from a masked IP address, session and app-lifecycle events, notification interactions, and purchase or subscription events. You can turn analytics off at any time in EchoMom's privacy settings.
When you invite a caregiver, request access, invite someone to EchoMom, or ask someone to share a child profile back with you, EchoMom uses information such as the sender's and intended recipient's names and email addresses, the child's name, profile image, and age when applicable, the relationship, requested permissions, account role, invitation status and timestamps, and a secure invitation token. We use this information to deliver or support the invitation by email, in the app, or through a link you choose to share; show an invitation preview; confirm the intended recipient; grant the requested access only after acceptance; and notify the inviter when an invitation is accepted.
Invitation and caregiver-request links are sensitive access links. Before sign-in, anyone with a valid link may be able to see an invitation preview that includes names, the intended recipient's email address, a child profile's name, image, or age, the relationship, and requested permissions. Share these links only with the intended recipient. If you use your device's Share action, the message and link are provided to the device's share sheet; the app, service, and recipient you select may independently process and retain them under their own terms and privacy policy.
When you open the referral feature, EchoMom creates a stable referral code for your account. If a new account uses that code, we record the account-to-account attribution, code used, attribution and conversion status and timestamps, and the new signup's IP address and user agent. We use subscription or payment status and limited payment-provider transaction metadata to verify conversions, prevent duplicate or abusive claims, calculate and deliver bonus songs or free months, issue a qualifying refund or banked credit, and send reward notifications.
A person who opens or enters a referral code may see the referrer's name, generally only the first name before signup. Referrers see aggregate join, conversion, and reward counts and generic reward notifications, not the referred person's identity, child or care information, or detailed subscription or payment information. Referral codes and links do not themselves contain child profile or care information. Joining or sharing the referral program is optional.
EchoMom uses speech recognition only when you actively use a voice feature. Apple provides speech recognition on iOS, and Google/Android speech services provide speech recognition on Android. EchoMom receives recognized text from the app, and that text may be sent with relevant care context to trusted AI providers so the app can answer questions, log events, summarize care history, and generate helpful follow-up messages.
Recognized voice text, chat messages, EchoMom responses, and related metadata may be stored so your family can see prior interactions and so EchoMom can maintain useful care context.
EchoMom and its agent responses are not an emergency service and are not a substitute for medical advice, diagnosis, or treatment. Parents and legal guardians are solely responsible for their child's health and medical decisions. For medical concerns, contact a qualified clinician or emergency services.
When an agent response depends on current public information that is not available from EchoMom or reliable general knowledge, EchoMom may use the Brave Search API as a limited, last-resort web search service.
For that search, EchoMom sends Brave only a short, impersonal public-topic query and, when needed, limited country, language, or freshness settings. EchoMom is designed to keep child and caretaker names, email addresses, account and child identifiers, transcripts, care records, individualized symptom details, and other private family data out of the query. The agent's internal reason for searching is not sent to Brave.
Brave returns only public result titles, URLs, and snippets to EchoMom; EchoMom's search tool does not open result pages. We do not send EchoMom account, child, or device identifiers with the query. Under Brave's current Search API privacy notice, Brave may retain query logs for up to 90 days for billing, troubleshooting, abuse prevention, and legal obligations.
When you ask the EchoMom agent to take an action, it may read or change child information only within the requesting account's current permissions. For allergen tracking, the agent or service may read or update known or suspected allergens, foods or products involved, exposure dates, observed symptoms, severity, treatment or medical care, caregiver notes, and related history, and may infer possible allergens from care-log information to provide suggestions or alerts. For teeth tracking, the agent may read or update which of the 20 primary teeth are coming in or through, the dates or child ages you provide, typical eruption windows, and the teeth change history. Each change records the account that made it and when it was made.
We treat allergen and teeth records as child care and health-related information. Caregivers may view or change them only when their access permissions allow it, and known-allergen information may be shown to authorized caregivers to help coordinate care. Allergen suggestions and alerts and agent output about tooth eruption are general informational guidance, not a diagnosis or a substitute for an allergist, pediatric dentist, or other qualified clinician.
EchoMom sends an immediate or scheduled agent-generated email only when a signed-in user explicitly asks for it. By making that request, the user directs and consents to EchoMom generating, processing, and emailing the selected content to the selected recipient or recipients. The user should review the requested content and recipients before asking EchoMom to send it.
A requested email may contain sensitive child profile, care, or health-related information, including summaries, graphs, insights, analyses, reports, care events, sleep, feeding, allergens or reactions, teething, medication, bathroom, milestone, or other information from EchoMom. It may also contain AI-generated summaries or transformations of that information. EchoMom sends these emails only to the requesting user's account email or to verified caregiver accounts with active access to the child.
EchoMom processes the email content and uses Amazon Simple Email Service (Amazon SES) to send it; the recipient's email provider also processes and delivers it. Email is not end-to-end encrypted by EchoMom and may be stored, forwarded, or shown in inbox or device previews outside EchoMom. We keep limited delivery metadata, such as recipient account, relationship, content type and size, child, source, and send time, for delivery control, duplicate prevention, security, and spam-rate limits.
If you enable push notifications, EchoMom may send a short title and summarized message about care, reminders, milestones, media, account activity, or an agent response, together with a device token and routing metadata. A notification may include a child profile name or a short summary derived from child care information, but opening EchoMom is normally required to view the underlying detail.
All remote push notifications are processed through Google Firebase Cloud Messaging. For Apple devices, Google forwards the notification to the Apple Push Notification service for delivery. Google and, on Apple devices, Apple therefore process the device token and notification payload needed to deliver the alert.
Push notifications may appear on a locked screen or other device surfaces where someone nearby can see them. You can disable notification categories in EchoMom, turn off push permission, or limit lock-screen previews in your Apple or Android device settings.
Before a parent or legal guardian registers a child profile, or an authorized caregiver joins one, EchoMom asks them to accept AI data sharing for that specific account and child. We store the acceptance date for each account-child pair. For example, three caretakers on three children require separate acceptances for each caretaker and each child.
After that acceptance, EchoMom may send the following information to third-party AI or media providers when needed for AI-assisted chat, recognized voice input handling, care logging, milestone and memory support, insights, name pronunciation possibilities, or personalized songs and media.
We share information only with services required to deliver, secure, and improve EchoMom. These services may include cloud hosting, databases, storage, authentication, email and push notifications, platform speech recognition, AI personalization, limited public web search, song or media creation, payment processing, analytics, diagnostics, support, and security tools. Email delivery uses Amazon SES. Remote push delivery uses Google Firebase Cloud Messaging and, for Apple devices, the Apple Push Notification service.
Service providers process information only for the purposes needed to provide their services to EchoMom. We require service providers that process personal information for EchoMom to provide the same or equal protection required by this policy and our agreements with them. We may also disclose information when we believe disclosure is required by law, legal process, subpoena, court order, or a lawful request from law enforcement or other public authorities; to enforce our terms; or to protect the rights, privacy, safety, or security of EchoMom, our users, or others.
We do not sell personal information, and we do not share personal information for third-party advertising.
EchoMom is intended for use by parents, legal guardians, and caregivers authorized by them. When you register a child profile, you confirm that you are the child's parent or legal guardian and have authority to provide the information and consent to its processing.
Caregivers invited to a child profile can access only the children and features permitted by the account owner or guardian. Their relationship to the child may be used to support access controls, personalization, and family context.
We keep information while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, maintain security, and keep backups. You can ask us to correct, export, or delete account or child information. Some backup, security, billing, or legal records may remain for a limited period.
You can change language, notification, sharing, and usage-analytics settings in EchoMom. You can also revoke microphone, speech, or push-notification permissions and control notification previews through your device settings, but the related features will not work without those permissions.
We use reasonable administrative, technical, and organizational safeguards, including access controls and encrypted transport, to protect information. No system can be guaranteed completely secure.
EchoMom and its service providers may process information in Canada, the United States, and other countries where our providers operate.
We may update this policy as EchoMom changes. If changes are material, we will take reasonable steps to notify users.
For privacy questions, requests, or concerns, contact us at hello@echomom.com.
17838832 Canada Inc., doing business as LaunchFury, is accountable for personal information processed for EchoMom. This Policy applies to EchoMom's app, website, APIs, emails, support, and linked services. It does not apply to independent third-party services with their own policies.
We receive information directly from you; from parents, guardians, and authorized caregivers; automatically from your device and use; and from authentication providers, app stores, payment processors, and other providers when needed to deliver the service. If you provide information about someone else, you confirm that you are authorized and have given them required notices.
Where law requires a legal basis, we process information to perform our contract with you and provide EchoMom; with consent for child or sensitive information, AI features, device permissions, and optional analytics; for legitimate interests such as securing, diagnosing, and improving the service, preventing fraud, and providing support; and to comply with law and protect vital interests.
We process child, health-related, and other sensitive information only for the care, safety, and service purposes described, with parent or guardian authorization and caregiver access controls. We do not use it for targeted advertising or to determine eligibility for employment, credit, insurance, housing, or another similarly significant decision.
You may withdraw consent prospectively through available settings or by contacting us. This does not affect earlier lawful processing and may prevent features that need the information. We will seek new consent when law requires it for a materially new purpose.
The website uses strictly necessary cookies and local storage for sign-in, security, OAuth requests, language, theme, invitations and referrals, and session continuity. We do not use these technologies for third-party advertising.
You can block cookies in your browser, but sign-in and other functions may stop working. Optional app analytics and its identifiers are described above and can be disabled in EchoMom's privacy settings.
Subject to applicable law, you may request confirmation and access; a copy or export; correction; deletion; withdrawal of consent; restriction or objection; portability; and information about uses, disclosures, and providers. You may also appeal a refusal where law provides. We may verify your identity and authority, limit a request under legal exceptions, and explain a refusal.
A parent or guardian may exercise rights for their child's profile. A caregiver cannot delete the owner's family record or obtain data outside their permissions. We will respond within the applicable legal period; manifestly unfounded, excessive, or repetitive requests may be limited or subject to a fee allowed by law.
Send requests or complaints to the Privacy Officer at hello@echomom.com or our mailing address. You may also complain to the Office of the Privacy Commissioner of Canada, an applicable provincial or territorial authority, or, where applicable, your European data-protection authority. We will not retaliate for exercising privacy rights.
EchoMom is directed to adults and does not permit children to create accounts or use the service directly. Child profiles are created by parents or legal guardians, who provide the information and consent. If we learn that a child created an account or directly provided information without valid authorization, we will suspend access and delete or restrict the information as appropriate.
A parent or guardian may review, correct, export, or request deletion of child information, revoke caregiver access, and withdraw consent for future uses. They may also refuse further disclosure where law requires that choice, but some features will then be unavailable.
If you believe child information was collected without proper authorization, contact the Privacy Officer immediately.
We retain each category only while needed for the described purposes, while the account or profile is active, and for legal, tax, billing, security, fraud-prevention, dispute, and backup obligations. We then securely delete, anonymize, or isolate it. Technical records and backups may persist through limited cycles; legal records may be retained for a required limitation period.
Information may be processed outside your province or country, including in Canada and the United States, and may be subject to the laws and lawful access of those places. We remain accountable for information transferred for processing and use contracts, access controls, and other appropriate safeguards. Where an international-transfer mechanism is legally required, we use a recognized mechanism and you may ask about it.
We maintain an incident-response program. When a breach creates a risk requiring notice, we will notify affected people and authorities as required by law. We may also transfer information in a financing, merger, reorganization, insolvency, or sale of a business or assets, subject to confidentiality and use consistent with this Policy or additional notice and consent where required.
