Echo Motion helps you view Apple Health workout history, write personal reflections, and optionally send feedback. This policy explains what stays on your device and what is processed only when you choose a network-dependent feature.
1. Workout data from Apple Health
With your permission, Echo Motion reads workout records and available metrics from Apple Health, such as workout type, date and time, duration, energy, heart rate, distance, pace, and cadence.
This data is used to show workout statistics, trends, workout details, milestones, and reflection reminders. Echo Motion does not write to Apple Health, create a separate persistent cache of your workout records, or send workout data or workout identifiers to Firebase. The current app does not send workout data or reflections to an Echo Motion server.
2. Reflections, settings, and backups
Your reflection text, compatible archived summaries, and related timestamps are stored as app data on your device. Preferences such as language, tracked workout types, reminder settings, milestone state, backup reminder state, and update-reminder state are also stored locally. The current app does not send reflection text for remote AI processing.
A backup file is created only when you choose to export one. The file can contain reflection text, compatible archived summaries, timestamps, workout context, an encrypted reflection identifier, and, when linked, an encrypted workout identifier used for restoring the backup. You choose where to save or share it through the iOS share sheet. Echo Motion does not automatically upload or receive your backup files.
3. Earlier versions: Weekly Echo remote AI processing
The current app has removed Weekly Echo generation, subscriptions, and remote-processing consent. Existing summaries are preserved only for local backup compatibility. The following disclosures describe processing by earlier app versions and previously deployed services; they do not describe a feature available in the current app.
Weekly Echo is optional and does not run in the background. Before the first request, Echo Motion presents a separate remote-processing consent. A generation is submitted only after you review the scoped records and tap Generate. Buying or restoring a subscription, or receiving one free Preview, does not itself grant consent, upload content, or start a generation.
For each generation, the selected target week and up to four preceding completed weeks provide context. The request can include workout type, actual workout start date and time with timezone, and duration; the full text of selected reflections; and a request-local label that links a reflection to its workout context. The four preceding weeks are context only and do not limit which paid completed week may be selected. These labels exist only for that generation. The request does not include heart rate, heart-rate samples or zones, active energy, distance, pace, cadence, HealthKit UUIDs, stable local workout or reflection identifiers, backup identifiers, or device identifiers.
The app sends the request to an Echo Motion-operated server, which queues the job and sends the same scoped content to DeepSeek, a third-party AI provider, to generate the requested Weekly Echo. Echo Motion does not authorize the HealthKit-derived workout facts or reflection text to be used for advertising, marketing, profiling, or use-based data mining. DeepSeek receives no Echo Motion account, stable device identifier, HealthKit UUID, stable local record identifier, or Apple transaction proof.
DeepSeek independently handles submitted content under its applicable terms and published Privacy Policy. As of August 14, 2026, that policy described direct processing and storage of personal data in the People's Republic of China, retention that varies with the data, processing purpose, and legal requirements, possible access by DeepSeek group entities and service providers, and a right to opt out of using personal data for model training or technology optimization. Echo Motion does not have a separate zero-retention or no-training agreement for this API account, so submitted content may be retained, accessed, or used under DeepSeek's applicable policy unless an account choice or separate term provides otherwise. Echo Motion will review material changes to the provider or these disclosed practices and request new consent when they change what you previously accepted.
The Echo Motion server stores job input only in application-level encrypted transient storage. Input is deleted when the job succeeds, fails, or is cancelled, and in all cases within 24 hours of acceptance. Raw AI responses and failed drafts are not persisted. Only a validated result may be encrypted while waiting for delivery; it is deleted when the device confirms local saving and in all cases within 7 days after it becomes ready. Content is excluded from backups, point-in-time recovery, analytics, logs, application-performance monitoring, and crash reports. The server does not provide cloud Weekly Echo history or reflection sync.
To verify one lifetime Preview, paid subscription periods, earned target-week rights, one permanent Welcome Grant for each continuous paid-subscription episode, the one confirmed generation allowed for each target week, and job delivery, the server processes Apple-signed transaction proofs and may retain protected, content-free subjects, protected subscription-period and target-week keys, successful-generation counts, task status, timestamps, and stable error codes. Confirmed-week, earned-right, and unused Welcome Grant records are retained as a permanent fairness ledger; normal cancellation or expiry does not erase them, while a refund or revocation can remove only an unused right from the affected episode. Job metadata and encrypted content follow their shorter retention periods. The server does not retain original Apple transaction identifiers or signed proofs. Job access tokens are stored only as irreversible hashes. These controls do not create an Echo Motion account and are not sent to the AI provider. Family Sharing does not grant Weekly Echo access.
You can withdraw remote-processing consent in Settings. This prevents new requests and asks the server to cancel unfinished jobs accessible from this device, but it does not delete Weekly Echoes already saved locally. Statistics, reflections, backups, milestones, and local reminders remain available without Weekly Echo or a network connection.
To ask about deletion of content that may be held by DeepSeek, email support.ciphermind@gmail.com with the approximate request date and time and enough context to locate it. Because Echo Motion does not send a stable user identifier to DeepSeek and deletes its own job input after processing, the developer may be unable to identify a particular provider record. Where feasible, Echo Motion will forward the request to DeepSeek; you may also contact privacy@deepseek.com.
4. App usage and diagnostics sent to Firebase
Echo Motion uses Google Firebase Analytics and Firebase Crashlytics to understand whether important features work and to diagnose technical problems.
Firebase Analytics may receive:
- An app instance identifier used to calculate metrics such as daily active users;
- App lifecycle and session events;
- General location derived by Google from a masked IP address, not precise GPS location;
- App, device, operating system, language, and version information;
- Limited feature events, such as saving a reflection, scheduling or opening a local reminder, changing reminder settings, and starting, completing, cancelling, or importing a reflection backup;
- Notification permission status and grouped count ranges used by backup events;
- Fixed performance stage names and grouped elapsed-time ranges for HealthKit workout loading, Statistics refresh, and first display of the trend chart.
Firebase Crashlytics may receive crash stack traces, relevant application state, app, device, and operating system information, Analytics breadcrumbs before a crash, and sanitized non-fatal error stages and numeric error codes recorded by Echo Motion.
These reports never include Apple Health workout data, workout identifiers, reflection text or length, Weekly Echo request or result content, AI safety-support status, Apple transaction proofs, protected access subjects, job access tokens, notification contents, or backup contents.
5. Optional feedback through Tally
Settings includes an optional “Send Feedback” link. Depending on the app language, it opens an English or Simplified Chinese form hosted by Tally in your browser. The form contains one free-text feedback field.
Echo Motion does not prefill the form or attach Apple Health workout data, workout identifiers, reflection text, Weekly Echo content, backup contents, subscription or Preview data, app diagnostics, or a stable device identifier. The feedback text you enter is sent to Tally only when you choose to submit the form. Do not include health data or other sensitive personal information in your feedback.
Submitted feedback is processed outside Echo Motion by Tally and the form owner. Deleting the app does not delete feedback you previously submitted. To request deletion of submitted feedback, email support.ciphermind@gmail.com with the approximate submission time and enough of the response to locate it. Because the form does not require contact information, the developer may be unable to identify a submission without those details. Tally’s handling of form data is described in its Privacy Notice.
Echo Motion does not currently use Tally’s automatic submission-retention control. Submitted feedback remains in Tally until the form owner deletes it manually. Deleted submissions can remain in Tally’s Trash for up to 90 days unless the form owner empties the Trash earlier.
6. Notifications and app updates
Reflection and backup reminders are local notifications created on your device. Echo Motion does not use Firebase Cloud Messaging or a server to deliver them. You can change notification permission in iOS Settings and turn reminder features on or off in Echo Motion.
To show when a newer compatible version is available, an App Store build may query Apple's public App Store catalog with Echo Motion's numeric App Store ID at most once every 24 hours. Echo Motion does not attach workout data, workout identifiers, reflection text, Weekly Echo content, backup contents, or a stable Echo Motion identifier to this request. Apple may process ordinary connection metadata, such as an IP address, under its privacy practices. The locally stored result and whether you opened that version's update card control the Settings badge. A failed check does not block the app.
7. Advertising and tracking
Echo Motion does not show advertising, access Apple’s advertising identifier (IDFA), use advertising personalization, sell personal information, or track you across other companies’ apps or websites.
8. Retention and deletion
You can delete individual reflections in the app. Archived summaries are retained for backup compatibility. Deleting Echo Motion removes its locally stored app data and stops future collection from that installation. Backup files you exported must be deleted separately from the location where you saved them. Echo Motion's Weekly Echo transient-content limits, content-free access-control records, DeepSeek's separate retention practices, and the provider-deletion request path are described in Section 3.
User-level Firebase Analytics event data is retained for no longer than 14 months, although aggregated reports may remain available for longer. Firebase Crashlytics retains crash reports and associated installation identifiers for 90 days before removal begins. Because Echo Motion has no account and does not attach your name or email address to Firebase events, the developer generally cannot identify a Firebase record as belonging to a named person.
9. Third-party processing and international transfer
Firebase is provided by Google. Usage and diagnostic information may be processed on Google infrastructure outside your country or region. Google’s handling of this information is governed by the Google Analytics for Firebase Terms and Firebase privacy and security information.
Tally provides the optional external feedback form. Feedback you choose to submit is processed by Tally and may be processed outside your country or region as described in Tally’s Privacy Notice.
Earlier app versions used DeepSeek for Weekly Echo AI processing. Its published Privacy Policy describes direct processing and storage of personal data in the People's Republic of China and explains its retention, service-provider, security, deletion, and model-training choices. The scoped Weekly Echo content is subject to those practices in addition to the shorter Echo Motion server limits described in Section 3.
Apple Health data remains subject to Apple’s privacy practices and your device permissions. App Store catalog requests and the App Store page opened when you choose to update are also handled under Apple's privacy practices.
10. Changes to this policy
This policy may be updated when app features or data practices change. The revised policy and effective date will be published on this page.
11. Contact
For privacy questions, email support.ciphermind@gmail.com.