fine print
Privacy, plainly
1What you write stays yours
Entries live in a Postgres database where row-level security — not interface logic — decides who can read a row. A query for entries you shouldn't see is declined by the database itself, regardless of who asks it or through what clever route.
2Nothing is public by default
Every notebook is private from the moment it's created. Sharing is an explicit, reversible act: linking one notebook to one small group. Unlink it and visibility is revoked immediately for everyone in that group.
3Accounts are an email — or a Google sign-in
If you use Google sign-in, we receive your email address and the name on your Google profile — nothing else. Google shares no contacts, no browsing history, and nothing you have written. We store your email address, a display name, and the authentication record Supabase keeps. No trackers, no analytics beacons, no advertising identifiers — this is a journal, not an audience.
4Invites are narrow
Invite links are revocable, can expire on their own, and open exactly one group. A member removed from a group loses access to its shared notebooks the moment they're removed.
5No advertising, no data sales
Echoes is paid for by subscriptions, not by your attention. We do not sell, rent, or share your entries or your identity with third parties, full stop. There is nothing in the product that would even make that possible — the database policies above are the enforcement, not a promise.
6This page is a placeholder
Echoes is an MVP build; this text is honest but not legal counsel. Before relying on it for anything real, Stillwater Studio will have it reviewed by someone qualified.
placeholder copy — not legal counsel · terms