Echo Note Privacy Policy

First effective: September 13, 2026
Last revised: September 13, 2026

Echo Note, provided by BabyPaunch, is a hybrid English vocabulary learning app that runs in an Android WebView. It does not require registration or sign-in. To open encrypted study content, the app uses a BabyPaunch server and the Google Play Integrity API to verify the official app and device. The app is supported by a Google AdMob bottom banner.

Study settings stored on the device

Your interface language, translation languages, bookmarks, hidden words, repeats per card, and speech speed are kept in Android WebView local storage so they remain available between sessions. Word and translation data are bundled with the app in encrypted form. Answers entered in Self Test are checked on the current screen and are neither sent to the developer nor stored separately.

Content-protection checks

To open encrypted study content, the app sends the content version, key identifier, a one-time request hash, and a Google Play Integrity token to the BabyPaunch-operated study365.space server. The server sends the token to the Google Play Integrity API and checks the request details, app package and signature, Google Play installation and licensing status, app version, and device-integrity verdict. After a successful check, the server returns the content decryption key, which the app protects with Android Keystore.

Bookmarks, hidden words, Self Test answers, and study progress are not sent in this process. The server stores a hash instead of the original one-time challenge, along with the content version, key identifier, expiry time, and use time. A challenge expires after five minutes, and records more than one day past expiry are removed. For security and request throttling, the IP address and request details such as path and time may be used in server logs and temporary rate-limit processing.

Device speech

The Android app reads words with an offline English Text-to-Speech voice installed on the device. Echo Note does not request microphone permission or record your voice. Available voices and the operation of the speech engine are governed by the device and the speech-engine provider's settings.

Advertising and privacy choices

Echo Note displays a bottom banner through the Google Mobile Ads SDK. For ad delivery, analytics, and fraud prevention, this SDK may automatically collect and share with Google an approximate location derived from the IP address, app interactions such as launches and taps, app and SDK diagnostic information, and device or other identifiers including the advertising ID and app set ID. See the Google Mobile Ads SDK data disclosure and Google Privacy Policy for details.

Where required, the Google User Messaging Platform displays a consent form before ads are requested and the app requests ads according to the permitted status. When privacy options are required, you can review or change your choice through the privacy-choice button in the global app header.

Information not directly collected

The developer does not directly collect or sell your name, email address, phone number, contacts, photos, precise location, microphone recordings, bookmarks, hidden words, or Self Test answers. Echo Note has no user account and uses no developer analytics. This policy and Google's policies apply to information processed for content-protection checks and advertising.

Permissions and network access

The app uses Android internet permission for content-protection checks, ad requests, and privacy-choice checks. Its study interface and encrypted word and translation data are bundled in the app package. It does not request permission to access contacts, photos, personal files, precise location, or the microphone.

Retention and deletion

Study settings remain only on your device. You can delete locally stored information by clearing Echo Note storage or data in Android settings, or by uninstalling the app. The developer server stores no account or study history. One-time content-protection records are removed as described above, while security logs may be kept for the period needed for operations and security. Information processed by Google for Play Integrity and advertising is retained and deleted under Google's policies and Android advertising ID settings.

Children's privacy

Echo Note is not designed primarily for children. Although the app has no feature that directly collects personal information, a parent or guardian can manage the device settings and advertising privacy choices.

Changes to this policy

If the app's features, hybrid architecture, speech engine, advertising SDKs, or applicable laws change, we will update this policy and the Google Play Data safety information to match the actual processing.

Revision history

Contact

For privacy or app questions, email [email protected]. Please do not include passwords, payment details, or unnecessary personal information.