Echo

本地优先

无需注册账号。私人日记默认不上传服务器——回响、图片、待办、信件、重要日及各项设置 均存放在应用私有目录，仅本应用可访问。 只有在你主动选择「发布到发现」时，才会将本条回响的公开摘要上传到云端（见下文「发现」）。

存储内容

• 回响：正文、心情天气、时间、本地关键词与摘要
• 图片：你选择添加的副本（应用私有目录）
• 草稿：未完成的写作
• 待办：内容、状态、提醒与重复规则
• 给未来的信：正文、日期与开启状态
• 重要日：名称、日期、备注与提醒
• 回响之树：进度等本地状态
• 设置：纸色、照片墙材质等偏好

发现（Discover）

「发现」是可选的公开社交功能。只有你点击「发布到发现」时，才会上传内容；未发布的私人日记始终保留在本机。

• 上传内容：回响正文摘要、心情、模糊地点标签（不含精确 GPS）、你选择的图片/音频/视频副本
• 展示信息：你在设置中填写的昵称与头像；若未设置则显示匿名昵称与默认头像
• 设备标识：为区分用户与传递互动，会为每台设备生成匿名设备 ID（UUID），不关联手机号或邮箱
• 互动数据：他人对你发布内容的点赞与评论会保存在云端，并同步到你的「我的」动态
• 存储位置：Cloudflare Workers / D1 / R2（由开发者运营），用于公开展示与互动
• 你的控制：可随时取消发布、删除自己的评论；可举报或屏蔽其他用户；屏蔽名单在设置中管理

社区规范见服务条款 · 发现与社区规范。

我们不会

• 出售或出租你的个人数据
• 将日记用于广告或用户画像
• 未经你操作上传私人日记（发布到发现除外，且须你主动确认）
• 向第三方共享可识别身份的私人记录

可能使用的权限

• 通知（可选）：待办、未来来信、重要日提醒
• 相册 / 相机（可选）：添加图片、自定义照片墙；导出图片到相册需授权
• 位置（可选）：精确坐标仅保存在本机；发布到发现时仅上传模糊地点标签，不上传精确 GPS
• 指纹（可选）：仅用于应用锁本地验证，不上传
• 精确闹钟（可选）：用于待办准时提醒
• 网络：Google Play 购买与恢复 Echo Plus；发现功能的发布、浏览与互动；可选 Firebase Analytics（见下）

Firebase Analytics（可选）

我们可能使用 Google Firebase Analytics 收集匿名使用数据（如应用打开、会员状态 tier）， 不包含日记正文、标签、位置或发现帖内容。 数据由 Google 处理，受其隐私政策约束。你可以在系统设置中限制广告/analytics 跟踪。

Echo Plus 与付款

Echo Plus 可通过 Google Play 月付（约 $1/月）、年付（约 $9.9/年）或一次性买断（约 $29.9）解锁全部照片墙与信纸皮肤。 付款由 Google 处理；我们不收集银行卡信息。订阅自动续费，直至你在 Google Play 中取消。 核心写日记、待办、导出与应用锁功能免费。

备份

Echo 默认关闭 Android 系统自动云备份，以降低日记意外同步到云端的风险。请使用应用内「备份与导出」自行保存重要数据。

摘要与统计

日记关键词与摘要在设备端用本地规则生成，不调用外部大模型。 心情统计与待办数据同样只在本地计算，不上传。

删除数据

可在应用内逐条删除回响、待办、信件与重要日。 卸载应用会清除本机全部数据（含图片与数据库）。 卸载前请自行备份需要保留的内容。

说明更新

功能变更时可能更新本说明，重要变更会在应用内提示。 最近更新：2026 年 7 月（新增「发现」功能说明）。

Local-first

No account is required. Private journal entries are not uploaded by default. Diaries, photos, to-dos, letters, important days, and app settings are stored in the app’s private storage and are accessible only to Echo on your device. Content is uploaded only when you choose “Publish to Discover” (see Discover below).

What we store on your device

• Echoes (journal): text, mood/weather, timestamps, locally generated keywords and summaries
• Photos: copies of images you choose to add (app private directory)
• Drafts: unfinished writing sessions
• To-dos: content, status, reminders, and repeat rules
• Letters to the future: body text, scheduled date, and enabled state
• Important days: name, date, notes, and reminders
• Echo Tree: local progress and collectible state
• Settings: appearance, photo wall style, and other preferences

Discover (optional social feature)

Discover is optional. Nothing is uploaded until you tap Publish to Discover. Unpublished private entries stay on your device only.

• Uploaded content: entry summary text, mood, fuzzy place label (not precise GPS), and media you include
• Public profile: nickname and avatar from Settings, or an anonymous default if unset
• Device ID: an anonymous UUID per device to enable interactions — not linked to phone or email
• Interactions: likes and comments on your posts are stored in the cloud and synced to your “Mine” feed
• Hosting: Cloudflare Workers / D1 / R2, operated by the developer
• Your controls: unpublish anytime, delete your replies, report or block users, manage blocked authors in Settings

See Terms · Discover & community guidelines.

What we do not do

• Sell or rent your personal data
• Use your journal for advertising or profiling
• Upload private entries without your action (Discover requires your explicit consent)
• Share personally identifiable private records with third parties

Permissions we may request

• Notifications (optional): to-do, future letter, and important-day reminders
• Photos / Camera (optional): add images, customize the photo wall; saving exports to the gallery requires permission
• Location (optional): precise coordinates stay on device; Discover publishes a fuzzy place label only, not precise GPS
• Fingerprint (optional): app lock only, verified on device, never uploaded
• Exact alarms (optional): on-time task reminders
• Internet: Google Play & Echo Plus; Discover publish/browse/interactions; optional Firebase Analytics (below)

Firebase Analytics (optional)

We may use Google Firebase Analytics for anonymous usage metrics (e.g. app opens, membership tier). It does not include journal text, tags, location, or Discover post content. Google processes this data under its privacy policy. You can limit ad/analytics tracking in system settings.

Echo Plus & payments

Echo Plus unlocks all photo wall and stationery skins via Google Play monthly (~$1), yearly (~$9.9), or lifetime (~$29.9) purchase. Google processes payment; we do not collect card details. Subscriptions renew until you cancel in Google Play. Core journaling, tasks, export, and app lock remain free.

Backups

Echo disables Android auto cloud backup by default to reduce accidental journal sync. Use in-app Backup & export for copies you want to keep.

Summaries & statistics

Keywords and summaries are generated on your device using local rules—not by external large language models. Mood statistics and to-do insights are also computed locally and are not uploaded.

Deleting your data

You can delete individual echoes, to-dos, letters, and important days inside the app. Uninstalling Echo removes all on-device data, including images and databases. Please back up anything you wish to keep before uninstalling.

Updates to this policy

We may update this policy when features change. Material changes will be communicated in the app when possible. Last updated: July 2026 (Discover feature added).

For privacy questions or feedback, please contact the developer via the app store listing or email:

vivida51888@gmail.com