Privacy Policy

About this policy

Kindling Wood Studio provides Echofirm and is responsible for the personal information processing described in this policy, which applies to the Echofirm app and our public website

For privacy questions and requests, contact support@kindlingwoodstudio.com

1 Information stored on your device

Echofirm does not require an app account; your affirmations, categories, favorites, personal moments, recordings, selected background images, practice records, statistics and preferences are stored on your device

We do not upload this content to our servers or use it for advertising or AI model training; the app does not provide cloud transcription or cloud synchronization of your personal content

Widgets and notification previews can display your selected words outside the app; you can control this display through widget, reminder and system lock-screen settings

2 Device permissions

• Microphone access is requested when you choose to record; recordings are stored locally
• File and image selection accesses the items you select for import or use in the app
• Notification permission supports local reminders; Android exact-alarm permission, where used, supports scheduled reminders
• The device time zone is used to schedule reminders at the intended local time

You can manage permissions in system settings; disabling a permission can prevent the related feature from working

3 Crash and error diagnostics

Echofirm uses Google Firebase Crashlytics to report crashes and selected non-fatal errors and to improve app reliability; diagnostic reporting is enabled in the release app

Diagnostic data includes crash traces, error type, the affected operation, app version and state, operating system, device model, timestamps and installation identifiers, including Crashlytics installation UUIDs and Firebase installation IDs; the service provider also processes technical network information needed to deliver and secure its services

Our custom error reports remove raw exception messages and do not attach your affirmations, recordings, images, database query parameters or purchase credentials; native crash reports can contain technical information generated by the operating system and the diagnostic SDK

The app does not use Firebase Analytics, advertising identifiers, advertising profiling or cross-app tracking, and we do not sell personal information or share it for cross-context behavioral advertising

There is no in-app switch to disable diagnostic reporting; microphone and notification permissions do not control it; you can contact us to exercise the privacy rights described below

4 Purchases and paid access

Apple App Store or Google Play processes payments and maintains store purchase records; we do not receive your full payment-card details or your store account password

On iOS: the app uses Apple StoreKit 2 on your device to read verified purchase entitlements, including product identifiers, transaction identifiers, transaction proofs and entitlement status, to provide, update and restore paid access; Apple purchase proofs are not sent to our Google Play verification service

On Android: the app sends the product identifier and Google Play purchase token to our verification service hosted on Cloudflare; the service checks purchase status with Google Play and processes transaction and order identifiers, subscription expiry, renewal, cancellation, refund and revocation information to provide or restore access and prevent misuse

Our Android verification service stores purchase tokens, product identifiers, purchase status, expiry, verification times and purchase-notification metadata in a Cloudflare D1 database; Google Play purchase notifications keep these records up to date when a purchase changes; these records are not linked to an Echofirm app account

The app stores purchase proofs and access information in platform secure storage for access checks, retries and restoration; secure-storage entries, particularly iOS Keychain entries, can remain after the app is reinstalled

5 Website hosting and service security

Cloudflare hosts our website and Android purchase verification service; it processes request information such as IP addresses, requested URLs, request times and response status for service delivery, security and troubleshooting; the verification service also uses IP addresses to limit abusive requests

Our application error logs record the failure stage and status rather than purchase tokens or request bodies; hosting and security logs can contain technical request metadata

The website does not use advertising or analytics scripts, forms or application-level tracking cookies; language selection uses ordinary page links and does not store a language preference; Cloudflare security services process technical information under its privacy policy

6 Backups, sharing and support

A manual backup exports a ZIP file containing your local database, relevant settings and recordings; the database can also contain your custom images; this ZIP is not password-encrypted, so anyone who obtains it can read its contents; you choose where to save it and whom to share it with; importing a backup can replace existing local data as explained in the app

System backups and device transfers can copy app data according to your device settings; Android backup rules exclude secure-storage preferences but do not exclude all app content; deleting the app does not delete separately saved backups or exported files

When you share content or open an email using an app or service you select, that provider handles the information according to its own policy; opening a support email does not send it automatically

If you contact us, we receive your email address, message and attachments; we use them to answer your questions, investigate the issue and handle your request; please provide only the information needed for that purpose

7 Recipients and international processing

We use Google/Firebase for crash diagnostics, Google Play for Android transactions and purchase verification, Apple for App Store transactions and device services, and Cloudflare for hosting, service security and the Android purchase database

These providers process information to provide the services described in this policy and can process it in the United States and other countries outside your country of residence; their privacy information is available at Firebase Privacy and Security, Google Privacy Policy, Apple Privacy Policy and Cloudflare Privacy Policy

We disclose information where required by law or where necessary to address a specific security incident, prevent fraud or protect legal rights; any such disclosure is limited to the relevant purpose

8 Retention and security

Local content remains on your device until you delete it, clear app data or remove the app, subject to system backup and secure-storage behavior; you must delete exported files and backups separately

Purchase proofs and access information are kept on the device for access checks and restoration; Android purchase records are retained to maintain purchase entitlements, process purchase changes and address billing, fraud and dispute issues, including where those purposes continue after a subscription ends; requests to delete these records are handled under section 9, subject to applicable legal requirements

Firebase retains crash traces and associated installation identifiers for 90 days before beginning removal from its live and backup systems; hosting and security logs follow the service provider's applicable retention settings; store purchase records are retained under Apple or Google's rules

Support correspondence is retained for the time needed to resolve your request and meet relevant legal, security and dispute-handling requirements

We use encrypted network connections, platform secure storage for purchase credentials and access controls for service data; Echofirm does not separately encrypt all local content or exported backups; no storage or transmission method can provide absolute security

9 Your choices and privacy rights

You can edit or delete local content, manage device permissions and previews, and choose whether to purchase, export, share or contact support; because we do not hold your local content on our servers, we cannot recover or remotely delete it; there is no Echofirm app account to delete

Subject to applicable law, you can request access to or a copy of your personal information, correction, deletion, restriction, portability or an explanation of processing; you can also object to processing, withdraw consent where processing relies on consent, and complain to your local data-protection authority

Send requests to support@kindlingwoodstudio.com; we may request information reasonably needed to identify the relevant record and verify your request; do not send your store password, full card details or private keys; we respond within the applicable legal time limit and explain any lawful limits on a request

Deleting our verification record does not delete a store transaction, cancel a subscription or issue a refund; manage those matters through Apple or Google Play; requests concerning records held independently by those providers should also be directed to them

For users in the EEA and UK, processing necessary to fulfil a requested purchase or related support request is based on performance of a contract; necessary service security and reliability processing is based on legitimate interests where permitted, and you have the right to object; legal obligations and consent apply where required by law

Users in mainland China retain the rights to be informed, decide, restrict or refuse processing, access, copy, correct and delete personal information under applicable law; consent, separate consent and cross-border processing requirements apply where required; device permission does not constitute consent to unrelated processing

We do not use personal information for automated decisions that produce legal or similarly significant effects and do not unlawfully discriminate against users who exercise their privacy rights

10 Children, updates and contact

Echofirm is not directed specifically to children; we do not knowingly solicit identifying information from children; if you believe a child has provided personal information to us, contact us so we can review and address it under applicable child-protection requirements

We update this policy and its effective date when our practices change; where required by law, we provide additional notice or obtain consent for material changes

Contact: Kindling Wood Studio, support@kindlingwoodstudio.com; the English and Chinese versions describe the same data practices, and your mandatory legal rights apply regardless of the language selected