Privacy Policy

Echo Journey™ is a reflective wellbeing and journaling tool owned and operated by HSR Legacy LLC, built by a practising psychotherapist. It is not an advertising business and your writing is not a product. This page explains, in plain language, exactly what is private, from whom, and where the limits of that promise sit.

What you share

• Your account details (such as email and sign-in information).
• Your reflections, journal entries, and check-ins.
• Optional preferences like language or notification settings.

How we use it

• To provide the service and show you your own reflections.
• To improve safety, reliability, and the quality of reflective features.
• To understand, only in aggregate, how reflection patterns evolve over time.

Who can read your journal

You can. Every entry is bound to your account at the database level, so no other member and no practitioner you have not explicitly shared with can load it. We do not sell your writing, we do not give it to advertisers, and we do not use it to train public AI models.

We want to be precise about the shape of that promise rather than sound stronger than we are. Echo Journey is not end-to-end encrypted. Your data is encrypted in transit and at rest by our infrastructure provider, and access is enforced by row-level security rules that scope every read to the account that owns it. That is an enforced access-control guarantee, not a cryptographic one: as at any hosted service, a small number of technical staff with database administration rights could in principle reach the underlying data. What we can state as fact is that there is no screen anywhere in Echo — including the founder's own dashboards — that displays a member's journal text. Those dashboards report counts and cross-population patterns only.

How Echo's AI engages with your writing

Only when you invite it. Nothing you write is scanned, interpreted, or profiled in the background. When you open a reflection with Echo, that entry is passed to the reflection engine for that conversation, which responds with CBT-style questions, mirroring, and pattern recognition. Your entries and your side of the conversation are stored in your own account so that you can return to them — that storage is what makes your journal a journal. They are not used to train models and are never shown in anyone else's Echo.

Sharing with a practitioner

Nothing is shared automatically. Connecting to a practitioner on Echo shares no content at all. For each individual entry you decide to share, Echo records a permission for that one entry, and your practitioner can open that entry and nothing else — not your other writing, not your check-ins, not your conversations with Echo. You can revoke a shared entry at any time and their access ends immediately. A practitioner's private clinical notes are theirs; your journal is yours.

Keeping your data safe

We use industry-standard practices, including encrypted connections, encryption at rest, and database-level access controls. We do not currently hold SOC 2, ISO 27001, or any other third-party security certification, and we will not imply one we do not have.

Your choices

• You can update your profile and preferences at any time.
• You can export a complete copy of your own content before you leave.
• You can deactivate your account from your Profile settings, which stops access while preserving necessary audit and security records.
• You can delete your account and content from your Profile settings.
• You can ask us what data we hold about you.

Deletion is permanent — please be sure

When you confirm deletion, it happens immediately and it is real. Your account, your entries, your reflections, and your check-ins are removed from the live database. There is no soft delete, no hidden copy, no recycle bin, no grace period, and no support request that can bring any of it back — not for you, and not for us.

Please take your export first if there is anything you want to keep. We say this gently rather than defensively: someone once deleted their account by mistake and there was genuinely nothing we could do for them. That is the cost of a deletion promise that is actually true.

We keep a minimal, non-content record that a deletion took place — date, route, and confirmation — because we are required to be able to show that your request was honoured. Our infrastructure provider maintains short-term encrypted backups for disaster recovery; these are never used to restore an individual account and age out on their own. Anonymized, aggregated, non-identifying signals that can no longer be linked to you may be retained to improve safety and reflection quality.

Not a medical service

Echo Journey™ is not a medical product, not emergency support, and not a replacement for therapy, diagnosis, or medical care. If you are in crisis, please reach out to local emergency services or a crisis support line.

Contact

Questions or requests? Contact HSR Legacy LLC through the support channels in the app and we will do our best to help.