Privacy Policy

Echo Away is run by 陳怡如, an individual trading as Cindyenglishlabspace ("we"). This page explains what we collect when you use Echo Away, why, and what you can do about it. Questions: cindy@cindyenglishlabspace.com.

Who is responsible for your data

陳怡如, an individual trading as Cindyenglishlabspace is the data controller for personal data collected through Echo Away, meaning we decide how and why it is used. Paddle acts as a separate controller for the payment data it collects at checkout.

Your voice stays on your device

Recordings you make are kept in your browser's memory only while the practice screen is open. They are never uploaded to us or anyone else. The match score is worked out on your device too.

What we collect

• Account details from Google sign-in: your name, email address and a user ID.
• Practice progress: which lines you have recorded and the topic and line you were last on, so you can pick up where you left off on any device.
• Subscription status from our payment provider: whether you are on a trial or paid plan, and when the current period ends. We never see your full card details.
• Technical data: error reports when something breaks, and the usual request details (such as IP address) that any website receives.

On your device we store your sign-in session and your chosen playback speed. We don't use advertising or tracking cookies.

Why we use it (legal basis)

• To provide the service you signed up for (performance of a contract): your account details, practice progress and subscription status.
• To keep Echo Away working and secure (our legitimate interests): error reports and technical request data.
• To meet legal duties (legal obligation): payment and tax records kept by Paddle.

How we keep it secure

Data is sent over encrypted connections (HTTPS) and stored with our hosting providers, who encrypt it at rest. Access rules make sure each account can only read its own progress, and only we can access the systems that run Echo Away. Card details are handled by Paddle and never reach us. No system is perfectly secure, but if a breach affects you we will tell you and the relevant authorities as the law requires.

Who we share it with

We use these services to run Echo Away. Each only gets what it needs:

• Supabase, through Lovable Cloud: stores accounts, progress and subscription status.
• Google: sign-in.
• Paddle: our reseller and Merchant of Record. Paddle handles checkout, payments, tax and invoices under its own privacy policy.
• Cloudflare: hosting.
• Google Fonts: serves the fonts the app uses.
• TTSMaker and NewsData.io: generate practice audio and supply news headlines. They receive no personal data from you.

We don't sell your data.

How long we keep it

We keep your account and progress while your account exists. You can reset your progress from the Topics screen at any time. To delete your account and everything linked to it, email us and we will do it within 30 days. Payment records are kept by Paddle as the law requires.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing cindy@cindyenglishlabspace.com. If you are unhappy with our answer, you can complain to your local data-protection authority.

Children

Echo Away is not meant for children under 13, or under 16 in the EU and UK, without a parent's consent.

Changes

If we change this policy, we'll update the date at the top. For significant changes we'll let you know in the app.