Privacy Policy

1. Introduction

ECHO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

2. Information We Collect

2.1 Account Information

Email address (EWU student email required)
Student ID
Display name
First and last name
Gender
Contact information (optional)

2.2 Profile Information

Division, district, and thana (location)
Transportation preferences
Preferred partner gender
Weekly schedule information

2.3 Usage Data

Travel history and connections
Nudge requests sent and received
Notification interactions
App usage patterns

2.4 Device Information

Push notification tokens
Device type and operating system

3. How We Use Your Information

To provide and maintain our services
To match you with potential travel companions
To send notifications about nudge requests and travel connections
To improve and personalize your experience
To ensure safety and security within the platform
To communicate with you about your account and our services

4. Information Sharing

We prioritize your privacy. Your information is shared only in the following circumstances:

With Matched Users: When you accept a nudge request, your contact information and display name are shared with the requester
Profile Visibility: Your schedule and location information are visible to other users for matching purposes
Service Providers: We use third-party services (Supabase, Expo) for app functionality, who are bound by privacy agreements
Legal Requirements: We may disclose information if required by law or to protect safety

We do NOT sell your personal information to third parties.

5. Privacy Controls

You have control over your privacy settings:

You can choose who sees your schedule information
You can set gender preferences for matching
You can control contact information sharing
You can delete your account at any time

6. Data Security

We implement industry-standard security measures to protect your data, including encryption, secure authentication, and access controls. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your information as long as your account is active or as needed to provide services. When you delete your account, we remove most of your personal information immediately.

Data Retained After Account Deletion

For student safety and accountability, we retain minimal information even after account deletion:

Student ID: Retained for accountability and safety reporting
Account deletion timestamp: Record of when the account was deleted
Minimal travel connection records: Basic information about travel companions for incident reporting

Why: This prevents students from deleting accounts to escape accountability for incidents. If an incident occurs during travel, we need to identify who was involved for safety reporting and legal compliance. This information is only accessed for safety incidents or legal requirements.

8. Your Rights

Access your personal data
Correct inaccurate data
Request deletion of your account and data
Opt-out of certain communications
Export your data

9. Children's Privacy

ECHO is designed for university students. We do not knowingly collect information from individuals under 18 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: support.echo@akhlak.dev