PrivyEcho Privacy White Paper

1. Overview

PrivyEcho is a privacy-first audio tool developed by OmniIntelliLink Pte. Ltd. (Singapore). It enables users to record, transcribe, and summarize speech entirely on their own devices using advanced on-device machine learning models. Unlike conventional cloud-based transcription services, PrivyEcho processes all sensitive content—recordings, transcripts, speaker separation, and AI summaries—locally. Nothing is uploaded or stored in external servers. This architecture ensures users maintain full control of their data at every stage.

Our approach is simple: No Cloud. No Leaks. No Listeners.

2. Privacy-by-Design Architecture

PrivyEcho was built around the principle of Privacy by Design, aligning with GDPR Article 25. Privacy is embedded into every technical layer of the product—not added later.

• Local Processing — All recording, transcription, and summarization occur entirely on-device.
• Minimal Connectivity — Internet access only for subscription verification, crash diagnostics, and updates.
• Speaker Separation — Fully local diarization module; no data leaves the device.
• Summary Generation — Local LLM runs offline; no cloud inference involved.

3. Data Flow and Local Security

PrivyEcho’s data lifecycle is fully contained within the device:

1. Recording: Audio stored locally.

2. Transcription: Whisper-based model converts speech to text offline.

3. Speaker Separation: Processed offline within app sandbox.

4. Summarization: Executed locally by the embedded model.

5. Storage: Files remain on-device until user deletes them.

All files are encrypted via iOS/macOS protections, and PrivyEcho has no technical ability to access them.

4. Minimal Server-Side Data

PrivyEcho maintains only limited server-side data: account identifiers, entitlement status, and optional anonymized crash logs. These are hosted on GDPR-compliant infrastructure such as Amazon Web Services (AWS) under strict encryption and access control.

5. Transparency and User Rights

PrivyEcho adheres to GDPR, CCPA, and other major frameworks. Users can:

• Access, correct, or delete account data
• Disable crash reporting anytime
• Withdraw consent
• Contact support@privycloudless.com for inquiries

EEA/UK users may also contact their local data authority. Responses are typically within 30 days.

6. Data Security Framework

PrivyEcho implements Technical and Organizational Measures (TOMs):

• Technical: TLS 1.3 encryption, sandboxing, and storage encryption.
• Organizational: Role-based access, privacy reviews.
• Incident Response: Immediate containment and notification if required.

Users are responsible for securing devices. PrivyEcho cannot recover deleted data.

7. Compliance and Governance

PrivyEcho complies with GDPR by:

• Ensuring data minimization (Art. 5)
• Applying privacy by design (Art. 25)
• Using GDPR-compliant processors (Art. 28)
• Implementing cross-border safeguards (SCCs under Art. 46)

User data is never used for AI training, and no behavioral analytics SDKs are integrated.

8. Updates and Accountability

We periodically review privacy practices to reflect platform, legal, or transparency changes. Each update to our Privacy Policy includes version notes in-app and online.

9. Contact and Oversight

Data Controller: OmniIntelliLink Pte. Ltd., Singapore

Data Protection Contact: support@privycloudless.com

For documentation of safeguards or compliance requests, contact us at the above email.

10. Summary

PrivyEcho represents a new standard for privacy in AI transcription tools. By keeping intelligence local and removing cloud dependency, PrivyEcho ensures maximum privacy and control.

AI can be powerful without being invasive.