🎯 EchoType Privacy Policy

1. Introduction

EchoType ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application EchoType (the "App").

By using our App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information You Provide

• Display Name: Optional username for leaderboards and game features
• Game Preferences: Settings, difficulty levels, and customization choices
• Support Communications: Messages you send to our support team

2.2 Automatically Collected Information

• Game Performance Data: Typing speed, accuracy, completion times, scores, and progress
• Device Information: Device model, operating system version, unique device identifiers
• Usage Analytics: App interactions, session duration, feature usage patterns
• Technical Data: App crashes, error logs, performance metrics
• Network Information: IP address (for security and analytics purposes only)

2.3 Information from Third-Party Services

We use Firebase services (Google) which may collect additional technical information as described in Google's Privacy Policy.

3. How We Use Your Information

3.1 Service Provision

• Provide and maintain the App functionality
• Save and sync your game progress
• Display leaderboards and enable competitive features
• Deliver achievements and reward systems
• Process in-app purchases and virtual currency

3.2 Communication

• Respond to your support requests
• Send important service announcements
• Notify you of app updates or new features

3.3 Analytics and Improvement

• Analyze usage patterns to improve the App
• Fix bugs and optimize performance
• Develop new features based on user behavior
• Conduct security monitoring

4. Information Sharing and Disclosure

4.1 Public Information

• Leaderboard data (display names and scores) is visible to other users
• Achievement and progress information may be shared in social features

4.2 Service Providers

We share information with trusted third-party service providers:

• Google Firebase: Authentication, database, analytics, and cloud functions
• Apple App Store: Purchase processing and app distribution
• Analytics Services: Anonymized usage statistics for app improvement

5. Data Security

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict authentication and authorization protocols
• Regular Audits: Periodic security assessments and vulnerability testing
• Secure Infrastructure: Industry-standard cloud security through Google Firebase

6. Data Retention

• Active Users: Data retained while you actively use the App
• Inactive Users: Personal data deleted after 24 months of account inactivity
• Analytics Data: Anonymized and aggregated data retained for up to 36 months
• Support Communications: Deleted after 3 years unless ongoing legal matters exist

7. Your Privacy Rights

You have the right to:

• Access: Request copies of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request removal of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain types of data processing

8. Children's Privacy

EchoType is suitable for users of all ages. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn we have collected such information, we will delete it immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and European Union, through our service providers. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Sending a notification through the App
• Updating the "Last Updated" date at the top of this policy

12. Jurisdiction-Specific Rights

European Union (GDPR)

EU users have additional rights including the right to withdraw consent and lodge complaints with supervisory authorities.

California (CCPA/CPRA)

California residents have the right to know about personal information collection, deletion rights, and opt-out rights.

Other Jurisdictions

Users in other regions have rights as provided by applicable local privacy laws.