隐私政策Privacy Policy
最后更新：2026 年 7 月 12 日。Echo 是一款 macOS 语音输入工具，默认优先在本机完成语音识别。 Last updated: July 12, 2026. Echo is a macOS voice input tool that prioritizes local speech recognition by default.
1. 我们收集或处理的数据
为了提供语音输入功能，Echo 可能在你的设备上处理以下数据：
- 麦克风音频：用于把你说的话转成文字。
- 转写文本：用于显示、注入当前输入框、可选保存历史，以及进行本地后处理。
- AI 指令内容：当你按下 AI 指令键时，可能包括本次转写文本、选中文本、你明确要求处理的剪贴板文本、搜索摘要或屏幕可见文字。
- 个人术语词典和设置：例如快捷键、麦克风、模型路径、语言和 AI 补强偏好。
- 诊断信息：例如模型是否就绪、权限状态、错误类型和权益同步状态。诊断信息用于排障、同步订阅状态和改进稳定性，不代表默认上传你的录音或完整转写历史。
2. 本地优先处理
Echo 默认优先使用本地语音识别模型。能在本机完成的识别、后处理和设置保存，原则上不需要发送到我们的服务器。
3. 可选云端与 Pro 托管能力
如果你主动开启云端语音、AI 指令、搜索后回答或 Pro 托管能力，Echo 可能会把完成当前请求所需的音频、转写文本、选中文本、必要上下文、搜索摘要、剪贴板文本或屏幕可见文字发送到 Echo 中转服务。云端音频只用于当前识别请求，不作为录音历史保存；相关文本和请求状态可能用于完成请求、计量额度和防滥用。自配 API Key 仍是可选路径，使用时数据会发送给你配置的云端模型服务或兼容接口。你可以在设置中关闭相关功能。
4. App Store 订阅与权益同步
App Store 版本中的 Pro 订阅通过 Apple 内购完成。Echo 可能接收并处理 Apple 交易标识、订阅状态、到期时间、退款或撤销状态，以及用于把订阅和当前设备权益关联的匿名标识。订阅入口只在 App 内由 Apple 展示，Echo 不会要求你通过邮箱验证码完成购买。
Pro 权益和积分状态以后端同步后的权益快照为准。Apple 负责处理购买、续订、取消、退款和发票；Echo 只使用必要的订阅状态来同步 App 内权益。
5. 系统权限
Echo 会请求 macOS 权限以完成核心功能：
- 麦克风权限用于录音。
- 辅助功能权限用于把文字输入到当前输入框。
- 输入监控权限用于监听全局快捷键，尤其是按住说话模式。
- 屏幕录制权限仅用于你明确要求“AI 看屏幕”时读取当前窗口可见文字。
6. 数据保存与删除
设置、术语词典、本地模型状态和可选转写历史通常保存在你的 Mac 上。你可以在 App 内修改设置、清理历史，或删除本地应用数据。卸载 App 不一定会自动删除所有 Application Support 数据，你也可以手动清理。
如果你希望删除与 App Store 订阅权益同步相关的服务器记录，请通过本页联系方式联系我们。退款、取消订阅和账单记录仍按 Apple 的账户与商店规则处理。
7. 第三方服务
当你使用 Echo 云端语音、托管 AI、搜索后回答、Apple 订阅或你自己配置的 API 服务时，相关服务方可能会按其隐私政策处理必要数据。包括 Apple、Echo 的云端服务，以及你选择的自配 AI 服务。请同时阅读这些服务的隐私政策。
8. 儿童隐私
Echo 不面向儿童设计。若你认为儿童向我们提供了个人信息，请联系我们处理。
9. 政策变更
我们可能会根据产品功能、法律要求或 App Store 审核要求更新本政策。重大变更会在网站或 App 内提示。
10. 联系我们
如对隐私政策有问题，请联系：support@flowlab.im。
1. Data We Collect or Process
To provide voice input, Echo may process the following data on your device:
- Microphone audio, used to convert your speech into text.
- Transcript text, used for display, insertion into the active field, optional history, and local cleanup.
- AI command content, which may include the current transcript, selected text, clipboard text you explicitly ask Echo to process, search summaries, or visible screen text.
- Personal dictionary and settings, such as shortcuts, microphone choice, model path, language, and AI correction preferences.
- Diagnostic information, such as model readiness, permission state, error type, and entitlement sync status. Diagnostics help with troubleshooting, subscription sync, and reliability; they do not mean your audio or full transcript history is uploaded by default.
2. Local-First Processing
Echo prioritizes local speech recognition by default. Recognition, cleanup, and settings that can be handled on your Mac generally do not need to be sent to our servers.
3. Optional Cloud and Pro Hosted Features
If you enable cloud speech, AI commands, search-backed answers, or Pro hosted features, Echo may send the audio, transcript text, selected text, required context, search summaries, clipboard text, or visible screen text needed for the active request through Echo's relay service. Cloud audio is used for the active recognition request and is not kept as a recording history; request data and status may be used to complete the request, meter credits, and prevent abuse. Your own API key remains optional; when you use one, data is sent to the cloud model service or compatible endpoint you configure. You can turn related features off in settings.
4. App Store Subscriptions and Entitlement Sync
Pro subscriptions in the App Store version are handled through Apple in-app purchase. Echo may receive and process Apple transaction identifiers, subscription status, expiration dates, refund or revocation status, and an anonymous identifier used to associate the subscription with the current device entitlement session. Subscription entry points are shown only in the app by Apple, and Echo does not require email verification to complete an App Store purchase.
Pro access and credits are based on the entitlement snapshot after backend sync. Apple handles purchase, renewal, cancellation, refund, and invoicing; Echo only uses the necessary subscription state to sync in-app access.
5. System Permissions
Echo requests macOS permissions to provide core features:
- Microphone permission is used to record audio.
- Accessibility permission is used to insert text into the active field.
- Input Monitoring permission is used to listen for global shortcuts, especially hold-to-talk.
- Screen Recording permission is used only when you explicitly ask Echo to read visible text from the current window.
6. Storage and Deletion
Settings, dictionary entries, local model state, and optional transcript history are generally stored on your Mac. You can change settings, clear history, or delete local app data. Uninstalling the app may not automatically remove all Application Support data.
If you want to delete server-side records related to App Store entitlement sync, contact us using the address below. Refunds, cancellations, and billing records remain subject to Apple's account and store rules.
7. Third-Party Services
When you use Echo hosted speech, hosted AI, search-backed answers, Apple subscriptions, or API services you configure yourself, relevant services may process necessary data under their own privacy policies, including Apple, Echo's cloud service, and any AI service you choose for your own configuration.
8. Children’s Privacy
Echo is not designed for children. If you believe a child has provided personal information to us, please contact us.
9. Changes
We may update this policy as the product, legal requirements, or App Store review requirements change. Material changes may be announced on the website or in the app.
10. Contact
Questions about this policy can be sent to support@flowlab.im.