THINGECHO / LEGAL

Privacy Policy

Effective October 7, 2026

ThingEcho helps you create private records for physical objects. This policy explains what information we collect, why we use it, and the choices available to you.

Information we collect

We collect the account information you provide, such as your name and email address. When you use ThingEcho, we also store the object records, photos, notes, locations, maintenance details, tags, and other content you choose to add.

If you choose to pin a Thing using your iPhone’s current location, we save the coordinates with that Thing so you can find the pin later. You can also enter a place name without using GPS. ThingEcho does not collect your location automatically when you scan an NFC tag.

We may collect basic technical information needed to operate and protect the service, including device and browser details, IP address, sign-in events, diagnostics, and usage information.

How we use information

We use your information to provide, synchronize, secure, maintain, and improve ThingEcho; authenticate your account; respond to support requests; and communicate about material service or policy changes.

Sign-in providers

If you sign in through Microsoft, Google, or Apple, that provider may share basic account information with us, such as your name, email address, and a unique account identifier. Their handling of your information is governed by their own privacy policies.

Analytics

We use limited, cookieless Google Analytics measurement on the public home and contact pages to understand visits and which pages and buttons are useful. Analytics storage and advertising features remain disabled. We do not send contact-form contents, account identifiers, or private Thing records to analytics.

Sharing

We do not sell your personal information. We may share information with service providers that help us host, secure, analyze, and support ThingEcho, or when required by law. These providers may use the information only to perform services for us.

Data retention and deletion

We retain account information and content while your account is active and as reasonably necessary to operate the service, meet legal obligations, resolve disputes, and protect the service. You can request account deletion in the iPhone app under Account & sync → Account settings → Delete account, or contact us for access, correction, export, or deletion. We tell you when the request is received and confirm by email when deletion is complete, within 30 days. Apple subscriptions must be canceled through Apple; web subscriptions are canceled as part of our deletion process.

Security

We use reasonable administrative and technical safeguards designed to protect your information. No online service can guarantee absolute security.

Our restricted security activity log records web sign-in outcomes, sign-outs, account-name changes, account-deletion submissions, and administrator access, along with timestamps, web or mobile API source, and a hashed account reference where the identity is verified. This log does not store IP addresses, passwords, tokens, names, email addresses, or private object content. We use these records for account security and troubleshooting, not advertising. Hashing does not make an account reference anonymous.

Security activity expires from administrator views after 30 days and is removed by scheduled daily cleanup. This limited security history may remain until that cleanup even if an account is deleted. Hosting and sign-in providers may maintain separate operational logs under their own retention practices.

Children

ThingEcho is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as ThingEcho develops. We will post the revised policy here and update the effective date.

Contact

Questions or privacy requests can be sent to support@thingecho.com.