Privacy Policy

• Eko collects account data and the productivity content you create or import.
• Optional permissions and integrations are used only for the features you enable.
• Eko uses third-party processors for hosting, authentication, email delivery, AI, subscriptions, notifications, integrations, weather, and web search.
• Eko does not sell your personal information, use it for third-party advertising, or track you across apps and websites.
• You can disconnect integrations and delete your account from inside the app.

Account and Authentication Information

When you create or access an account, we collect information such as:

• Name, email address, and account identifiers
• Sign-in method, such as email/password, Sign in with Apple, or Google sign-in
• Session tokens and authentication records needed to keep you signed in securely
• Subscription entitlement status, plan, billing store, and renewal or expiry state

Productivity Content

Eko stores the content needed to provide the app, including:

• Tasks, habits, notes, calendar events, reminders, recurrence rules, and completion history
• Assistant conversations, AI-generated suggestions, pending proposals, and approved actions
• Assistant memories or profile facts you ask Eko to remember, such as routines or preferences
• Feedback, bug reports, support context, screenshots, photos, and other attachments you submit
• Shared text, web links, or images sent to Eko through the app or share extension

Optional Integrations and Permissions

If you enable optional features, Eko may collect or process:

• Google Calendar: connected account email, OAuth tokens, calendar list, calendar events, event metadata, locations, reminders, and sync status.
• Todoist: connected account email or profile details, OAuth tokens, task content, due dates, priorities, projects, sections, recurrence, and sync status.
• Apple Health (iOS): read-only workout details used to auto-complete a selected habit, such as workout UUID, type, start time, end time, and date. If you separately enable sleep context for briefs, Eko may read last-night sleep duration, sleep stages, and a derived sleep score.
• Health Connect (Android): with your permission, read-only exercise sessions and sleep data, used only to auto-complete a selected workout habit and to compute the sleep score shown in your Morning Brief. Eko does not write to Health Connect and does not sell or share this data with third parties. You can revoke access anytime in Health Connect settings.
• Screen Time / Family Controls: app-limit configuration is stored on device using Apple's opaque token model. Eko does not receive the names of apps you select.
• Location: when you grant When In Use location access, Eko may send current coordinates to fetch local weather for Morning Brief and assistant planning.
• Microphone and photos: voice recordings, transcripts, and images you choose to send to Eko AI.
• Notifications and Live Activities: push tokens, Live Activity tokens, device platform, timezone, and notification preferences.

Usage, Diagnostics, and Security Data

We collect limited operational data to run and improve Eko, including:

• Device platform, app version, locale, timezone, and feature state
• Error logs, performance data, request timing, and abuse-prevention signals
• AI request and response traces used for reliability, debugging, safety review, and cost monitoring
• Feedback ratings and reports, including reports of offensive or unsafe AI output

We collect information in three main ways:

• Directly from you when you create content, sign in, configure settings, contact support, or submit feedback.
• From your device when you grant a permission, such as notifications, location, microphone, photos, HealthKit (iOS), Health Connect (Android), or Screen Time.
• From connected services when you choose to link them, such as Google Calendar, Todoist, Apple, Google, RevenueCat, or app-store billing services.

We use information to:

• Provide, sync, display, and update your tasks, habits, notes, calendar, and reminders
• Generate AI assistant replies, proposals, briefs, recaps, research notes, and memory suggestions
• Send notifications, schedule reminders, and update Live Activities you enable
• Process subscriptions, restore purchases, enforce Pro feature access, and prevent entitlement abuse
• Operate optional integrations, including two-way Google Calendar sync (which can create, update, and delete events in your connected Google Calendar), Todoist sync, Apple Health habit auto-complete, weather context, and Screen Time blocking
• Debug issues, respond to support requests, improve reliability, and maintain service security
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not use your information for targeted advertising and do not share it with advertising networks.

AI requests may include:

• Your typed or transcribed message
• Images, audio, or shared content you choose to send
• Relevant tasks, notes, habits, calendar events, memories, and recent assistant history
• Optional context you have enabled, such as weather, sleep context, or connected calendar/task data

AI outputs are suggestions. Eko may store AI conversations, traces, generated cards, feedback, and safety reports so conversations can be reopened, proposed actions can be reviewed, and the service can be debugged and improved.

• Google user data is used only to provide user-facing features you request, such as sign-in and calendar sync.
• Google Calendar data is not used for advertising.
• Google Workspace API data is not used to develop, improve, or train generalized AI or machine learning models.
• We do not allow humans to read Google user data unless you ask us for support, it is necessary for security, or it is required by law.
• We transfer Google user data only as necessary to provide Eko, comply with law, or with your consent.

Apple Health (iOS) access is optional, read-only, and controlled by you in iOS. Eko does not write to Apple Health. Workout data is used to auto-complete a habit you choose. Sleep context, if enabled, is used for Morning Brief and assistant planning.

On Android, the same features use Health Connect. Access is optional, read-only, and controlled by you. With your permission, Eko reads exercise sessions to auto-complete a workout habit you choose and reads sleep data to compute the sleep score shown in your Morning Brief. Eko does not write to Health Connect, and you can revoke access anytime in Health Connect settings.

Health and fitness data is not used for advertising, tracking, or any credit, employment, or insurance purpose.

Screen Time / Family Controls are optional and iOS-only. App selection tokens are opaque and remain on device. Eko does not receive the names of the apps or categories you select for blocking.

We share information only as needed to operate Eko, provide features you enable, process purchases, protect users, comply with law, or with your direction. Categories of recipients include:

• Cloud hosting, database, storage, and authentication providers, including Supabase
• Email delivery providers for account verification and transactional emails, including Resend (used as Supabase's email provider)
• AI processing providers used to power Eko AI features, including Google (Gemini), OpenAI, and Anthropic. Requests are routed to a provider based on the task, and data is sent via our backend.
• Connected integration providers, such as Google Calendar and Todoist
• Subscription and payment infrastructure, including RevenueCat and the applicable app store
• Notification and Live Activity delivery services, including Expo push services and Apple Push Notification service
• Weather and web-search providers, including Open-Meteo and Brave Search, when those features are used
• Professional advisers, authorities, or other parties when required by law or to protect rights and safety

Service providers are permitted to use your information only to provide services to Eko or as otherwise required by law, and must provide appropriate protection for user data.

We keep information for as long as needed to provide Eko, maintain security, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account deletion: You can delete your account in the app from Profile - Account - Delete Account. This deletes active account data associated with your Eko account and cannot be undone.
• Google Calendar: Disconnecting Google Calendar deletes the stored connection and every event that was imported from Google Calendar. Events you created in Eko are kept and simply unlinked from Google (they are no longer synced). You can also revoke access in your Google Account permissions settings.
• Todoist: Disconnecting Todoist removes the stored Todoist connection token and deletes tasks that were imported from Todoist. Tasks you created in Eko are kept and unlinked from Todoist.
• Apple Health (iOS): Disconnecting Apple Health removes the Eko connection and Health-derived workout check-ins. You can also revoke Health permissions in iOS Settings.
• Health Connect (Android): Disconnecting removes the Eko connection and Health-derived workout check-ins. You can also revoke Eko's exercise and sleep permissions anytime in Health Connect settings.
• Location, microphone, photos, notifications, and Screen Time: You can revoke these permissions in system settings. Revocation stops new collection for those features, though previously stored data remains until deleted through app controls, account deletion, or support.

Residual copies may remain for a limited time in backups, logs, or security records before they are deleted through normal retention cycles, unless we need to retain them longer for legal, security, or fraud-prevention reasons.

We use reasonable administrative, technical, and organizational safeguards, including encrypted transport, access controls, session protections, and row-level database protections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, export, object to, or restrict processing of your personal information. To exercise rights or ask a privacy question, contact [email protected].

Eko is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Eko, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy as Eko changes. When we do, we will revise the Last Updated date above. If changes are material, we will provide additional notice where required by law.

Email: [email protected]