Privacy Policy

App and developer

This policy applies to Echo Memory, an Android game published by DolfinMind, including application package com.dolfinmind.echomemory.

Data collection and sharing

Echo Memory has no advertising, analytics, tracking, or social features. The app automatically creates a pseudonymous Supabase account identified by a random UUID; it does not ask for a name, email address, phone number, or social login. Supabase stores training lives, diamonds, regeneration time, the last daily reward date, and an event ledger for session starts, rewards, refills, and diamond credits. This data is required to operate the shared economy and prevent duplicate or unauthorized credits.

When you use Google Play Billing, the app sends the random Supabase account UUID as an app-scoped account identifier and sends the selected product plus Google Play purchase token to Supabase over HTTPS. A protected server function asks the Google Play Developer API to verify the product, purchase state, and account identifier before granting diamonds or Echo Pro. Supabase stores only a one-way hash of the purchase token together with product, order, test/live, fulfillment, and entitlement status; it does not store the raw token after verification.

Permitted direct-sale builds use a separate random installation ID. When a direct build opens Lemon Squeezy checkout, activates or validates a license, or synchronizes a purchase, it sends the relevant installation/account ID, product, checkout/order status, and license proof over HTTPS to DolfinMind's payment service, Supabase, and Lemon Squeezy. This data is used only for app functionality, payment processing, customer support, fraud prevention, security, and entitlement management. It is not sold or used for advertising.

The app does not read or transmit a hardware advertising ID, contacts, precise location, photos, microphone data, or card details. Google Play processes payments in the Play build. Lemon Squeezy processes payments on its hosted checkout in permitted direct builds. Their respective privacy terms apply.

Data stored on your device

Scores, streaks, play statistics, tutorial completion, daily-challenge status, preferences, random identifiers, and cached entitlement state are stored locally. Direct-build license keys are stored in Android platform secure storage. Game scores and training statistics are not sent to DolfinMind, Google Play, or Lemon Squeezy.

Retention and deletion

Use Delete my data in the app's Settings screen to delete the anonymous Supabase account and cascade-delete its lives, diamonds, economy events, and purchase-credit links, then clear local app data. Clearing app storage or uninstalling clears local data but does not by itself send a deletion request to the servers.

Payment, refund, token-hash, license-fingerprint, entitlement, and financial audit records may be retained by DolfinMind, Google Play, and Lemon Squeezy as needed for accounting, security, customer support, fraud prevention, dispute handling, and legal obligations. DolfinMind's payment backend stores a pseudonymized installation subject and a one-way license fingerprint, not the full license key.

For an applicable access or deletion request, contact DolfinMind using the address below. Some payment records may need to be retained where required by law.

Security

Gameplay and scoring run locally after an online life check. Network traffic uses HTTPS, Supabase database access is restricted by per-user authorization rules, Google Play proof is checked on a protected server before fulfillment, raw purchase tokens are not persisted, installation IDs are pseudonymized by the direct-payment backend, license keys are protected with platform secure storage, and full card data never passes through the app or DolfinMind's server.

Children's privacy

Echo Memory is not specifically directed to children under 13. Echo Pro should be purchased or activated by an adult where local law requires parental consent.

Changes to this policy

If a future release changes online services or data practices, DolfinMind will update this policy and the Google Play Data safety declaration before that release.

Contact

For questions about Echo Memory or this policy, contact DolfinMind at dolfinmind@gmail.com.