隐私政策Privacy Policy
最后更新：2026 年 7 月 28 日。Echo 是一款 macOS 语音输入工具，默认优先在本机完成语音识别。 Last updated: July 28, 2026. Echo is a macOS voice input tool that prioritizes local speech recognition by default.
1. 我们收集或处理的数据
为了提供语音输入功能，Echo 可能在你的设备上处理以下数据：
- 麦克风音频：用于把你说的话转成文字。
- 转写文本：用于显示、复制到剪贴板、可选保存历史，以及进行本地后处理。
- AI 指令内容：当你按下 AI 指令键时，可能包括本次转写文本、你明确要求处理的剪贴板文本、搜索摘要或屏幕可见文字。
- 个人术语词典和设置：例如快捷键、麦克风、模型路径、语言和 AI 补强偏好。
- 诊断信息：例如模型是否就绪、权限状态、错误类型和权益同步状态。诊断信息用于排障、同步订阅状态和改进稳定性，不代表默认上传你的录音或完整转写历史。
2. 本地优先处理
Echo 默认优先使用本地语音识别模型。能在本机完成的识别、后处理和设置保存，原则上不需要发送到我们的服务器。
3. 可选云端与 Pro 托管能力
如果你主动开启云端语音、AI 指令、搜索后回答或 Pro 托管能力，Echo 可能会把完成当前请求所需的音频、转写文本、必要上下文、搜索摘要、剪贴板文本或屏幕可见文字发送到 Echo 中转服务。云端音频只用于当前识别请求，不作为录音历史保存；相关文本、生成结果和请求状态可能用于完成请求、幂等返回、计量额度和防滥用。自配 API Key 仍是可选路径，使用时数据会发送给你配置的云端模型服务或兼容接口。你可以在设置中关闭相关功能。
4. AI 看屏幕与屏幕录制
仅当你主动开启“AI 看屏幕”，并通过 AI 指令明确要求 Echo 读取、解释或总结当前窗口时，Echo 才会使用屏幕录制权限。Echo 只截取当时的前台窗口，不会持续录屏，也不会在后台读取屏幕。
截图仅在设备内存中用于本地 OCR 文字识别，不会上传到 Echo、AI 服务或搜索服务，也不会保存为文件或写入转写历史。完成本地 OCR 后，截图即不再用于后续处理。
为了生成本次回答，Echo 会把本地 OCR 得到的可见文字、本次语音指令，以及可选的当前 App 名称和窗口标题发送给你选择的 AI 服务或 Echo 托管 AI 服务。处理目的仅限于完成你主动发起的当前请求。Echo 不出售这些数据，不用于广告，也不向与完成请求无关的第三方共享。相关云端服务方只作为完成请求所需的处理方，并按各自隐私政策处理必要数据；Echo 后端可能保留生成结果和请求状态，用于幂等返回、积分计量与防滥用，但不建立屏幕截图档案。
你可以随时关闭“AI 看屏幕”，也可以在系统设置中撤销屏幕录制权限。关闭后，基础本地语音输入仍可使用。
5. App Store 订阅与权益同步
App Store 版本中的 Pro 订阅通过 Apple 内购完成。Echo 可能接收并处理 Apple 交易标识、订阅状态、到期时间、退款或撤销状态，以及用于把订阅和当前设备权益关联的匿名标识。订阅入口只在 App 内由 Apple 展示，Echo 不会要求你通过邮箱验证码完成购买。
Pro 权益和积分状态以后端同步后的权益快照为准。Apple 负责处理购买、续订、取消、退款和发票；Echo 只使用必要的订阅状态来同步 App 内权益。
6. 系统权限
Echo 会请求 macOS 权限以完成核心功能：
- 麦克风权限用于录音。
- 屏幕录制权限仅用于你明确要求“AI 看屏幕”时读取当前窗口可见文字。
7. 数据保存与删除
设置、术语词典、本地模型状态和可选转写历史通常保存在你的 Mac 上。你可以在 App 内修改设置、清理历史，或删除本地应用数据。卸载 App 不一定会自动删除所有 Application Support 数据，你也可以手动清理。
如果你希望删除与 App Store 订阅权益同步相关的服务器记录，请通过本页联系方式联系我们。退款、取消订阅和账单记录仍按 Apple 的账户与商店规则处理。
8. 第三方服务
当你使用 Echo 云端语音、托管 AI、搜索后回答、Apple 订阅或你自己配置的 API 服务时，相关服务方可能会按其隐私政策处理必要数据。包括 Apple、Echo 的云端服务，以及你选择的自配 AI 服务。请同时阅读这些服务的隐私政策。
9. 儿童隐私
Echo 不面向儿童设计。若你认为儿童向我们提供了个人信息，请联系我们处理。
10. 政策变更
我们可能会根据产品功能、法律要求或 App Store 审核要求更新本政策。重大变更会在网站或 App 内提示。
11. 联系我们
如对隐私政策有问题，请联系：support@flowlab.im。
1. Data We Collect or Process
To provide voice input, Echo may process the following data on your device:
- Microphone audio, used to convert your speech into text.
- Transcript text, used for display, copying to the clipboard, optional history, and local cleanup.
- AI command content, which may include the current transcript, clipboard text you explicitly ask Echo to process, search summaries, or visible screen text.
- Personal dictionary and settings, such as shortcuts, microphone choice, model path, language, and AI correction preferences.
- Diagnostic information, such as model readiness, permission state, error type, and entitlement sync status. Diagnostics help with troubleshooting, subscription sync, and reliability; they do not mean your audio or full transcript history is uploaded by default.
2. Local-First Processing
Echo prioritizes local speech recognition by default. Recognition, cleanup, and settings that can be handled on your Mac generally do not need to be sent to our servers.
3. Optional Cloud and Pro Hosted Features
If you enable cloud speech, AI commands, search-backed answers, or Pro hosted features, Echo may send the audio, transcript text, required context, search summaries, clipboard text, or visible screen text needed for the active request through Echo's relay service. Cloud audio is used for the active recognition request and is not kept as a recording history; related text, generated results, and request status may be used to complete the request, provide idempotent responses, meter credits, and prevent abuse. Your own API key remains optional; when you use one, data is sent to the cloud model service or compatible endpoint you configure. You can turn related features off in settings.
4. AI Screen Reading and Screen Recording
Echo uses Screen Recording permission only after you turn on AI Screen Reading and explicitly ask Echo through an AI command to read, explain, or summarize the current window. Echo captures only the foreground window at that moment. It does not continuously record or read the screen in the background.
The screenshot is used only in device memory for local OCR. It is not uploaded to Echo, an AI service, or a search service, and it is not saved as a file or added to transcript history. After local OCR is complete, the screenshot is not used in later processing.
To generate the response you requested, Echo sends the visible text recognized by local OCR, your current voice instruction, and optionally the current app name and window title to the AI service you selected or Echo's hosted AI service. The purpose is limited to completing the current request you initiated. Echo does not sell this data, use it for advertising, or share it with third parties unrelated to completing the request. Required cloud service providers act only as processors needed to complete the request and handle necessary data under their own privacy policies. Echo's backend may retain the generated result and request status for idempotent responses, credit metering, and abuse prevention, but it does not create a screenshot archive.
You can turn off AI Screen Reading at any time or revoke Screen Recording permission in System Settings. Local voice input remains available after the feature is disabled.
5. App Store Subscriptions and Entitlement Sync
Pro subscriptions in the App Store version are handled through Apple in-app purchase. Echo may receive and process Apple transaction identifiers, subscription status, expiration dates, refund or revocation status, and an anonymous identifier used to associate the subscription with the current device entitlement session. Subscription entry points are shown only in the app by Apple, and Echo does not require email verification to complete an App Store purchase.
Pro access and credits are based on the entitlement snapshot after backend sync. Apple handles purchase, renewal, cancellation, refund, and invoicing; Echo only uses the necessary subscription state to sync in-app access.
6. System Permissions
Echo requests macOS permissions to provide core features:
- Microphone permission is used to record audio.
- Screen Recording permission is used only when you explicitly ask Echo to read visible text from the current window.
7. Storage and Deletion
Settings, dictionary entries, local model state, and optional transcript history are generally stored on your Mac. You can change settings, clear history, or delete local app data. Uninstalling the app may not automatically remove all Application Support data.
If you want to delete server-side records related to App Store entitlement sync, contact us using the address below. Refunds, cancellations, and billing records remain subject to Apple's account and store rules.
8. Third-Party Services
When you use Echo hosted speech, hosted AI, search-backed answers, Apple subscriptions, or API services you configure yourself, relevant services may process necessary data under their own privacy policies, including Apple, Echo's cloud service, and any AI service you choose for your own configuration.
9. Children’s Privacy
Echo is not designed for children. If you believe a child has provided personal information to us, please contact us.
10. Changes
We may update this policy as the product, legal requirements, or App Store review requirements change. Material changes may be announced on the website or in the app.
11. Contact
Questions about this policy can be sent to support@flowlab.im.