EchoFrame: Privacy Policy

Last updated: May 3, 2026

EchoFrame ("the App", "we", "our") is an application that displays your Google Photos as a living photo frame slideshow. It is available on Apple TV, iPhone, iPad (via the App Store), and Android TV (via Google Play). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

Account Information

When you sign in with your Google account, we receive:

Your Google account name and email address (used to display your account and manage subscriptions across devices)
OAuth tokens (access and refresh tokens) to access your Google Photos on your behalf

Device Information

Device identifier: used to manage your trial period and identify your device (Android ID on Android TV; vendor identifier on Apple platforms)
Device manufacturer, model, and OS version: used for analytics and crash diagnostics
IP address: captured once when the trial period starts, for abuse prevention (Android TV only)

Google Photos Metadata

            We do not store your photos. We only access photo and video metadata
            (such as media IDs, dimensions, file types, and creation dates) to display your slideshow.
            Media files are streamed directly from Google servers and cached temporarily on your device.
        

Usage Data

Slideshow events (start, slide shown, errors)
Settings changes (interval, transitions, video preferences)
Session and navigation events
Crash reports and error logs

Purchase Data

Subscription type (trial, monthly, lifetime)
Purchase tokens issued by Google Play Billing or Apple StoreKit (we do not collect or store your payment method details)

2. How We Use Your Information

Display your photos: access Google Photos to show your slideshow
Manage subscriptions: verify your trial period, monthly, or lifetime subscription
Improve stability: crash reports help us identify and fix bugs
Analytics: understand how the app is used to improve the experience
Prevent abuse: device ID and IP address help prevent trial period fraud

3. Third-Party Services

The App uses the following third-party services, each governed by their own privacy policies:

Google APIs

We use Google OAuth 2.0 for authentication, and the Google Photos Ambient API and Picker API to access your photo library. Data is transmitted securely over HTTPS.

Google Privacy Policy

Firebase (by Google)

Firebase Analytics: collects usage events and device properties
Firebase Crashlytics: collects crash reports and diagnostic data
Cloud Firestore: stores trial period records (device ID, timestamp, device model)

Firebase Privacy Policy

App Store & Google Play Billing

Subscription and one-time purchases are processed entirely by Apple (App Store) or Google (Google Play), depending on your platform. We do not have access to your payment method or billing details.

Apple Privacy Policy · Google Payments Privacy Notice

Cloud Relay Server

When authorizing on Android TV, a relay server temporarily transfers your OAuth session from your phone to your TV. This server acts as a short-lived intermediary; it does not store your tokens or personal data permanently. Session data is discarded after the authorization is complete.

4. Data Sharing, Transfer & Disclosure

            EchoFrame does not sell, rent, or trade your Google user data to any third party.
        

We do not share, transfer, or disclose Google user data to third parties except in the following limited circumstances:

Google APIs: Your Google account credentials (OAuth tokens) are used exclusively to authenticate with Google services and retrieve your photos. This data is transmitted directly between your device and Google servers.
Firebase (by Google): Anonymous usage analytics and crash diagnostics are collected by Firebase. These do not include your Google Photos content or personal Google account data.
Cloud Relay Server: During Android TV authorization, your OAuth session is temporarily relayed between devices. No tokens or personal data are stored permanently on this server. Session data is discarded immediately after authorization completes.

We do not use Google user data for advertising, data mining, or any purpose other than providing and improving the EchoFrame application. We do not transfer Google user data to any AI or ML model training systems.

5. Data Storage & Security

On Your Device

OAuth tokens are stored securely on your device (Keychain on Apple platforms; DataStore on Android)
Photo cache: up to 75 MB of image thumbnails
Video cache: temporary video segments for smooth playback
User preferences (slideshow settings, display options)

On Our Servers

Trial period records in Cloud Firestore (device ID, start timestamp, device model, IP address)
Account-level trial records (hashed email, linked devices) for cross-device trial management

All data is transmitted over encrypted connections (HTTPS/TLS).

6. Data Retention

Local data: retained until you uninstall the app or clear app data in your device's settings
Firestore trial records: retained to prevent trial abuse
Firebase Analytics data: retained per Google's default policy (14 months)
Crashlytics data: retained for 90 days

7. Your Rights

Revoke photo access: remove EchoFrame's access in your Google Account permissions
Clear local data: uninstall the app, or go to your device's Settings → Apps → EchoFrame → Clear Data (Android)
Request data deletion: contact us at the email below to request removal of your server-side data
Opt out of analytics: you can limit ad tracking in your device settings

8. Children's Privacy

EchoFrame is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us:

Email: echoframe.support@gmail.com