EchoFlag
Terms & Conditions →
EchoFlag Inc. ("EchoFlag," "we," "us," or "our") operates the EchoFlag mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. Please read this Privacy Policy carefully. By using the App, you agree to the practices described here. If you do not agree, please discontinue use of the App. This policy is effective as of June 1, 2026.
We collect only the minimum information necessary to operate EchoFlag. The information we collect depends on how you choose to use the App:
When you report anonymously, we do not collect your name, email address, or any personally identifiable information. You are assigned a randomly generated ECHO ID — a code only you know — that allows you to access your reports without revealing your identity.
If you choose to create a profile account, we collect your name, email address, and a securely hashed password. This allows you to track your reports across devices and receive status updates.
We collect the details you voluntarily submit in your reports, including descriptions, dates, locations (if you choose to provide them), and any evidence you upload. This content is used solely to process and support your report. Such content may include information relating to third parties, including minors, and may contain sensitive information depending on the nature of the report. By submitting such content, you acknowledge and consent to our collection and processing of that content as described in this policy.
We collect non-identifiable technical information such as app version, operating system, and crash logs to maintain the App's performance and security. We may also collect information such as the pages of the App you visit, the time and date of your visit, the time spent on those App pages, and the operating system you use on your mobile device in a continued effort to maintain the App's performance and security.
We use the information we collect for the following purposes only:
We may, but are under no obligation to, verify the accuracy of user-submitted reports and make no representations regarding the completeness, truthfulness, or reliability of any content submitted through the App or Service by its users.
EchoFlag uses AI assistance ("Echo AI") to help you describe and structure your report. Echo AI guides you through the reporting process and suggests follow-up questions.
Your report content is processed by Echo AI solely for the purpose of helping you complete your report. It is not stored, retained, or used by our AI providers to improve their models.
We use privacy-safe AI configurations that explicitly opt out of model training on your data. Our AI processing complies with applicable data protection laws. All AI processing is performed in accordance with this privacy policy and applicable laws.
We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:
With your consent, we may share relevant report details with the organization or institution involved in your case to facilitate potential investigation or resolution. EchoFlag, Inc. does not control and is not responsible for how such third parties use or respond to the information provided.
We may disclose information if required by law, court order, or government authority, or to protect the rights, safety, or property of EchoFlag, our users, or the public including disclosures made in good faith to prevent harm or potential harm to any individual.
We may share limited technical data with trusted service providers (such as cloud hosting and email delivery) who are contractually bound to keep your information confidential and use it only to support our services.
Your information may be processed and stored in the United States. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.
Anonymous reports are designed so that EchoFlag staff cannot identify you. Your ECHO ID is generated on your device and is never associated with your name, email, or phone number in our systems.
For profile account holders, your personal details are stored with encryption at rest. Access to your data within EchoFlag is restricted to authorized personnel only, and only when necessary to support your case.
We retain your report data for as long as necessary to fulfill the purposes outlined in this policy, including supporting active case resolution, and to comply with legal obligations.
You can stop all collection of information by the App easily by requesting deletion of your account and uninstalling the App. If you request deletion of your account or ECHO ID, you must do so in writing via email correspondence to privacy@echoflag.com. After receiving a valid written request from the user of the account, we will delete your personal information and associated data within 30 days, except where retention is required by law.
Anonymized, aggregated data (which cannot be used to identify you) may be retained indefinitely for operational and analytical purposes.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at privacy@echoflag.com. We will respond to your request within 30 days.
For residents of certain U.S. states, including but not limited to Florida, California, Virginia, Colorado, Connecticut, and Texas, you may have additional rights under applicable state privacy laws, including the right to know what personal information we collect, the right to request deletion, and the right to correct inaccurate information. We will not discriminate against you for exercising any of your privacy rights.
You are solely responsible for any content, information, or materials you submit through the Service, including any reports, allegations, or evidence relating to individuals or minors.
You represent and warrant that all information you submit is accurate to the best of your knowledge, submitted in good faith, and that you have all necessary rights, authority, and permissions to provide such content. You acknowledge that EchoFlag, Inc. acts solely as a reporting platform for user-submitted content that does not endorse, adopt, or assume responsibility for any statements, allegations, or representations made by its users.
EchoFlag is intended for use primarily by individuals who are at least eighteen (18) years of age. However, the App and Service may be accessed and used by minors in limited circumstances, including where a minor seeks to report misconduct, abuse, or safety concerns.
We do not knowingly collect personal information directly from children under the age of 13 without verifiable parental consent, as required under the Children's Online Privacy Protection Act ("COPPA"). EchoFlag does not knowingly permit children under the age of 13 to create accounts or access the full features of the App.
If you are between the ages of 13 and 17, you may use the Service only with the involvement of a parent or legal guardian, unless doing so would be unsafe or impractical under the circumstances.
EchoFlag reserves the right, in its sole discretion, to remove, restrict, or review any content that involves minors or that we believe may violate applicable law or this Privacy Policy. If you believe that information relating to a minor has been submitted without proper authority, please contact us immediately at privacy@echoflag.com.
The App may be used by individuals to report alleged misconduct, including conduct that may involve harm to minors or other unlawful activity. EchoFlag is not a law enforcement agency and does not undertake any obligation to investigate, verify, or take action with respect to any user-submitted report. EchoFlag, Inc. expressly disclaims any duty to monitor, screen, investigate, or take enforcement action regarding user-submitted content.
Notwithstanding the foregoing, EchoFlag reserves the right, but not the obligation, to review, monitor, and disclose any information submitted through the App to law enforcement authorities, regulatory agencies, or other third parties if we, in our sole discretion, believe such disclosure is appropriate or necessary to: (i) comply with applicable law or legal process; (ii) protect the safety of any individual, including minors; (iii) prevent or investigate potential illegal activity; or (iv) enforce our Terms and Conditions.
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.
The App does not respond to "Do Not Track" signals or similar browser-based mechanisms.
You agree to indemnify, defend, and hold harmless EchoFlag, Inc., its officers, directors, employees, agents, affiliates, and service providers from and against any and all claims, demands, damages, losses, liabilities, judgments, settlements, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:
EchoFlag reserves the right, at its own expense and discretion, to assume the exclusive defense and control of any matter subject to indemnification, and you agree to cooperate fully in the defense of such claims. This obligation shall survive the termination of your use of the Service.
These Terms and any dispute, claim, or controversy arising out of or relating to the App or Service shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law principles.
Binding Arbitration: To the fullest extent permitted by law, any dispute, claim, or controversy arising out of or relating to the Privacy Policy, Terms and Conditions, or your use of the App, including any/all claims for monetary damages, shall be resolved exclusively through final and binding arbitration administered by the American Arbitration Association ("AAA") in accordance with its applicable rules. The arbitration shall take place in Miami-Dade County, Florida, before a single arbitrator.
Limited Court Proceedings (Non-Monetary Relief Only): Notwithstanding the foregoing, either party may seek non-monetary injunctive or equitable relief in state court located in Miami-Dade County, Florida, solely for the purpose of preventing or addressing actual or threatened harm.
If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.
This Privacy Policy, together with the Terms and Conditions, constitute the entire agreement between you and EchoFlag regarding the use of the App.
In any dispute arising out of or relating to the Privacy Policy or the use of the App, the prevailing party shall be entitled to recover its reasonable attorneys' fees and costs to the fullest extent permitted by law.
EchoFlag reserves the right, but not the obligation, to review, screen, remove, restrict, or modify any content submitted through the App or service at any time and for any reason, including where we believe such content may violate applicable law, infringe upon the rights of others, create potential legal exposure, or conflict with this Privacy Policy. EchoFlag may take such action without prior notice to the user and shall have no liability for the removal or restriction of any content.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and notify you through the App. Your continued use of the App after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
If you have questions, concerns, or requests related to this Privacy Policy, please contact our Privacy team:
Email: privacy@echoflag.com
EchoFlag Inc.
We aim to respond to all privacy-related inquiries within 5 business days.