Privacy policy
2026-10-25-privacy-v201Controller and scope
The data controller for Echoris is Belen Cuenca Avellan, Spanish tax ID (NIF) 48643590Q, with address at C. Vicente Savall 15, 03690 San Vicente del Raspeig, Alicante, Spain. For privacy enquiries or to exercise your rights, write to soporte@echorisapp.com. Some details in this policy are still being checked. Providing the service free of charge does not remove data-protection obligations.
This policy covers the website, mobile app, audio-tour marketplace, purchase library, creator tools and live local mode. External services opened outside Echoris may apply their own policies; we identify them where they act as independent controllers.
02Data we process
We may process account data such as uid, email, name, photo, language, roles and marketplace access status. We also process guide and tour data, such as public profile, bio, languages, social links, images, audio, city, price, publications and review status.
For purchases we store purchase, tour and publication identifiers, amount, currency, status, Stripe identifiers and library entitlements. For reviews we store the rating, text, moderation status and the relationship with the purchased or claimed tour.
The mobile app uses Firebase Auth to manage identity, including a guest identity with its own identifier even when you do not sign in with Google. If you choose Google, account data such as identifier, email, name and a profile-image reference supplied by the provider are used. A guest identity does not mean no personal data or guaranteed anonymity.
The mobile app uses Firebase Analytics for usage events and technical statistics, and Firebase Crashlytics for errors and diagnostics. These services may process technical identifiers, device information, app version, events, errors and traces. Verification of the full inventory of automatic fields and effective platform-specific configuration is pending.
Live mode transmits the guide's voice to participants and, when enabled, exchanges chat messages. Technical statistics are separate processing from audio and messages; describing Analytics or Crashlytics does not by itself describe the routing or retention of that content. The app also uses the local network, WiFi/hotspot and device permissions depending on the feature.
Support requests include their message, attachments and related correspondence. For creators we may process identity, tax residence and ID, payout account, activity, verification documents, agreements, sales and settlements. We do not request full payment-card details; the payment provider receives them directly.
03Processing purposes
We use data to authenticate users, create and maintain accounts, display profiles, publish tours, process purchases, deliver library access, manage refunds and settlements, moderate content, provide support, send transactional messages, ask you to review a tour you bought and retain evidence of acceptances and specific consents.
The review request is sent once per purchase, relies on our legitimate interest in showing genuine marketplace opinions, and you can object at any time: every message carries an opt-out address and one email stops them, with no effect on the rest of the service.
We also protect accounts, prevent fraud and abuse, investigate incidents, diagnose failures, maintain continuity, respond to authorities, comply with tax and accounting duties and defend claims. On mobile, authentication manages identity; Analytics provides usage statistics and Crashlytics helps diagnose failures. Live voice and chat support communication between participants and must not be confused with those technical statistics.
04Legal bases
Contract performance supports processing needed to authenticate, operate an account, deliver content, manage purchases and provide support. Legal obligation supports tax, accounting and lawful requests. Legitimate interests may support proportionate security, fraud prevention and diagnostics after balancing rights and honouring objections.
Validation of the legal bases for each mobile processing purpose, including guest identity, statistics and diagnostics, is pending. This draft does not treat all SDKs as justified by contract performance or legitimate interests. Where consent is required, both collection and withdrawal must be validated; an in-app control to disable Analytics or Crashlytics has not been verified. Accepting terms is not consent to marketing, optional tracking, device permissions or unrelated purposes.
05Providers and recipients
We work with the providers needed to deliver the service: Firebase/Google for authentication, database and storage; Stripe for payments and checkout; Resend for transactional emails; and hosting, security and observability providers. The mobile app uses Firebase Auth, Firebase Analytics and Firebase Crashlytics for the functions described; the website loads no third-party analytics or trackers. Validation of the final list of provider entities, their roles, configuration and data received is pending.
We may disclose data to public bodies, tax authorities, courts, law enforcement, professional advisers or a buyer in a corporate transaction where there is a valid basis, confidentiality duty and suitable safeguards. We do not sell personal data or let processors repurpose it incompatibly.
06International transfers
Some providers may process information outside the European Economic Area. Before enabling a transfer we verify the relevant mechanism, such as an adequacy decision, standard contractual clauses or another lawful safeguard, and assess supplementary measures where needed.
You can ask about applicable safeguards at soporte@echorisapp.com. Validation of the final provider list, locations and transfer mechanisms in the processing record and GDPR agreements is pending and required before production; this draft is not that review.
07Retention
Verification of specific retention periods and their effective application is pending for each category: registered accounts and guest identities, statistics, errors, messages, live audio, local data and backups. This draft does not confirm periodic deletion, automatic anonymisation or a single period for all data. Each provider's retention and the handling of erasure requests must also be checked.
Purchases, billing, entitlements, agreements, consents, settlements and audit records may require retention to operate the service, resolve claims and meet legal duties. Applicable periods and exceptions must be specified with professional advice; this description does not establish that an automatic deletion process already operates when each period expires.
08Security and internal limits
Sensitive operations are validated on the server. Purchases, entitlements, Stripe events, legal acceptances, authorisation flags and audit logs are server-only. Controls include authentication, roles, transport encryption, secret management, backups, traceability and review of critical operations.
Stripe webhooks are signature-verified and processed idempotently. Logs minimise personal data and redact secrets, tokens, passwords, emails and sensitive identifiers where unnecessary. No system is infallible; we assess and notify breaches where law requires it.
These server measures do not by themselves establish safeguards for every mobile data route. Full verification of voice, chat, diagnostics and provider connections remains pending; this draft does not promise end-to-end encryption for live mode.
09Children
Echoris is not directed to children who cannot validly contract or consent under applicable law. We do not knowingly request children's data outside permitted circumstances. Parents and guardians should supervise use and must not provide accounts or payment methods without authority.
If you believe we received a child's data without a valid basis, write to soporte@echorisapp.com with enough information to locate the account, without sending unsolicited sensitive documents. We will assess deletion, restriction or authorisation as appropriate.
10Your rights
You may request access, rectification, erasure, objection, restriction and portability and withdraw consent where applicable by writing to soporte@echorisapp.com. The complete technical process for deleting an account through the app or website is pending implementation; for now, request erasure by email and we will handle the request within the applicable legal period. Identify the right and account without providing unnecessary data or unsolicited sensitive documents. Signing out or uninstalling the app does not delete remote data.
We respond within the legal period and may seek clarification for complex requests or third-party rights. Some information cannot be erased immediately because of retention duties, pending claims or legal exceptions; we explain why and restrict use where appropriate.
11Complaints and supervisory authority
If you think we handled data incorrectly, contact us so we can investigate. Internal review does not limit your right to complain to the competent supervisory authority, including the Spanish Data Protection Agency where applicable, or to seek a judicial remedy.
You will not be penalised for exercising rights in good faith. We retain only what is needed to process the request, demonstrate our response and meet accountability obligations.
13Changes to this policy
We update this policy when processing, providers, rights or legal requirements change. We publish the date and version and give prominent notice before a material change takes effect. A privacy policy provides information; acceptance or consent is requested only where a specific legal reason requires it.
Previous versions and evidence of material changes are retained as needed for transparency. Questions about an update may be sent to soporte@echorisapp.com.
A question these pages don't answer?
Write to support