Privacy Policy

Last updated: July 22, 2026

Echo ("the app") is an iOS game published by bhbs (dev.bhbs.Echo). This policy describes how the app handles gameplay progress, account authentication, settings, and anonymous gameplay analytics.

Summary

Echo creates an anonymous guest account and stores campaign progress and gameplay events on Echo's server. A passkey can protect that progress for recovery on another Apple device. Echo does not include advertising or cross-app tracking.

Information the App Processes

To provide gameplay and preserve your preferences, Echo processes:

• Selected, unlocked, and completed stages
• An anonymous player identifier and progress revision
• Public passkey credential information when you protect an account
• Audio volume and mute settings
• Anonymous app-open, stage-run, first-choice-reached, result, play-time, and distance events
• App version, event timestamps, local calendar date, and time-zone offset

Echo does not request your name, email address, contacts, location, photos, camera, or microphone.

Data Stored on Your Device

Progress and audio settings are stored inside Echo's iOS app sandbox. Unsent analytics events are temporarily queued there until delivery. An opaque session token is stored in the device Keychain. The passkey private key remains managed by Apple's passkey system and is not sent to Echo's server.

Deleting Echo removes its sandboxed data according to normal iOS behavior. Deleting game data from Settings → Account also deletes the cloud record and starts a new anonymous guest.

Network Use

Echo uses echo-api.bhbs.dev to authenticate, synchronize campaign progress, and receive anonymous gameplay events. Analytics records use the random identifier assigned to the anonymous guest account; Echo does not send advertising or device identifiers. Records are stored in append-only daily logs.

Deleting game data records an account-deletion event and prevents further events from that account. Earlier anonymous analytics rows remain in the append-only log and are excluded from normal player analytics. They cannot be used to restore the deleted game account.

What We Do Not Collect

• No email address, password, or editable profile information
• No location, contacts, photos, camera, or microphone data
• No advertising identifiers, device fingerprints, or cross-app identifiers
• No purchases or payment information handled by the app

Children

Echo is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this policy when app behavior changes. The "Last updated" date at the top will reflect the latest revision.

Contact

Questions about this policy: [email protected].