Privacy Policy

Last updated: May 9, 2026 · Effective: May 9, 2026

This Privacy Policy describes how SightEcho ("we," "us," or "our") collects, uses, and shares information when you use the SightEcho mobile application ("App"). By using the App, you agree to the practices described below.

1. Information We Collect

Account information: name and email address when you register.
Images: photos you capture or select to submit for analysis. Images are uploaded to our secure servers and processed by AI vision models.
Image metadata (EXIF): when you submit a photo, embedded EXIF metadata (which may include precise GPS coordinates and capture time) is read to provide geographic context. Only city- or region-level information is stored persistently with your analysis record; precise coordinates are not retained after processing.
Device location: when you grant location permission, the App may read your device's current GPS or network-derived location to add nearby-landmark context. As with EXIF data, only city- or region-level information is stored.
Device information: device model, OS version, and app version for diagnostic purposes.
Advertising identifier: on iOS, with your consent via App Tracking Transparency (ATT), and on Android, the device's advertising identifier (IDFA / AAID) may be processed by our advertising partner to measure and serve ads. See Section 5 below.
Purchase information: in-app purchase records processed by Apple App Store or Google Play. We do not store payment card details.
Usage data: analysis requests, feature interactions, and error logs to improve the service.

2. Camera and Photo Library Permissions

The App requests access to your device camera and photo library solely to allow you to capture or select images for analysis. We do not record video, stream the camera feed, access the camera in the background, or scan your photo library beyond the images you explicitly select. Camera and photo library access is only active when you initiate a photo capture or selection within the App.

3. Location Information

The App may use location data from two sources: (a) GPS coordinates embedded in the EXIF metadata of photos you submit, and (b) your device's current location, if you have granted the App location permission. Location data is used only to provide geographically relevant context (such as nearby landmarks or city-level travel context) for your analyses.

We do not store the precise (latitude/longitude) coordinates with your analysis record. The persisted geographic data is reduced to country, region, or city level. You can revoke location permission at any time in your device settings; doing so disables nearby-landmark context but does not affect the App's core functionality.

4. AI Processing and Data Use

To provide AI-powered analysis, your images and prompts are transmitted to Google's Gemini API operated under Google Cloud's enterprise terms. Per Google's Generative AI terms, customer data sent to the Gemini API is not used to train Google's foundation models.

We do not use your photos, prompts, or analysis results to train any machine-learning model, and we do not sell or license your content to third parties for AI training.

5. Advertising and Tracking

The App displays advertisements served by Google AdMob. To support ad delivery and measurement, AdMob may process your device's advertising identifier (IDFA on iOS, AAID on Android), coarse location, and limited interaction events.

iOS: we request your permission via Apple's App Tracking Transparency (ATT) framework before any cross-app tracking occurs. If you decline, only non-personalized ads are shown and SKAdNetwork attribution is used in lieu of IDFA.
Android: you can reset or opt out of personalized ads at any time in your device's Settings → Google → Ads.
Ad-reward credits ("watch an ad to earn a credit") are validated via Server-Side Verification (SSV); only the AdMob transaction ID and a reward signature are processed.

For more information, see Google AdMob's privacy disclosures.

6. How We Use Your Information

Provide and improve the AI-powered image analysis service.
Authenticate users and manage accounts.
Process in-app purchases and manage credits.
Deliver text-to-speech audio narrations.
Show advertisements and reward ad-watch credits (where applicable).
Diagnose technical issues and improve app performance.
Detect and prevent abuse (e.g., multiple-account credit farming, fraudulent purchases).

7. Data Sharing

We do not sell your personal data. We share data only with the following service providers, each acting as a processor on our behalf and bound by contractual confidentiality and data-protection obligations:

Google Cloud Platform: our infrastructure provider for hosting (Cloud Run), database (Cloud SQL), object storage (Cloud Storage), and text-to-speech services. Data is stored in the United States (us-central1).
Google Gemini API: images and prompts are sent for AI analysis under Google Cloud's enterprise terms (no model training on customer data).
Google AdMob: for advertising and ad-reward verification (see Section 5).
Apple App Store / Google Play: for in-app purchase verification and refund webhooks.

8. International Data Transfer

Our servers are located in the United States. If you access the App from outside the United States, including from the European Economic Area, the United Kingdom, Korea, or other regions, your data will be transferred to and processed in the United States. By using the App, you acknowledge this transfer. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) with our service providers.

9. Data Retention

Your images and analysis results are stored on our servers until you delete them from within the App or delete your account. Account data is retained for as long as your account is active and is deleted within 30 days following account deletion. Aggregated, non-identifying usage logs may be retained longer for security and analytics purposes.

10. Your Rights

Subject to applicable law, you have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. You may exercise these rights by contacting support@sightechoai.com or, for most rights, directly through the App's settings (account deletion, image deletion, ATT/ad preferences).

European Economic Area / United Kingdom: our legal bases for processing are: (a) performance of a contract (providing the Service you requested), (b) legitimate interests (security, fraud prevention, analytics), and (c) your consent (location permission, ATT, marketing communications). You also have the right to lodge a complaint with your local data protection authority.

California: we do not "sell" or "share" personal information as defined under the California Consumer Privacy Act (CCPA / CPRA). California residents have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising their rights.

Korea: we comply with the Personal Information Protection Act (PIPA). You may exercise your rights through support@sightechoai.com.

11. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us at support@sightechoai.com and we will delete it.

12. Security

We use industry-standard security measures including HTTPS encryption in transit, encryption at rest provided by Google Cloud, JWT-based authentication, signed-URL access controls for media, and least-privilege service-account permissions. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security.

13. Changes to This Policy

We may update this policy periodically. We will notify you of material changes through the App or by email. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy, please contact us at:
SightEcho
Email: support@sightechoai.com