Privacy Policy

MyEchoDay is used by employees, team leads, department heads, and administrators at organizations that have adopted it. You access MyEchoDay using an account created by your organization — the app is not open to the general public and does not offer self-service sign-up.

We collect only what the tool needs to do its job:

• Account details — your name, work email address, role, and the department or office you belong to. These are provided by your organization.
• Work records you enter — the timesheets, tasks, hours, clients or brands, work categories, and notes you log; leave requests and their dates; and review or approval activity.
• Analytics derived from your records — utilization, workload status, and related measures calculated from the work you log, used to show you and your managers a fair, accurate picture.
• Voice input you choose to use (mobile app) — if you use the “speak your day” feature, your device converts your speech to text so it can be turned into timesheet entries. See “Microphone and voice” below.
• Technical information — basic device and app information and secure sign-in tokens needed to keep you logged in and to keep the service reliable and secure.

We do not use a camera, and we do not collect your contacts, photos, precise location, or browsing activity on other apps or websites.

• To let you log work, request leave, and manage your day.
• To show you and your authorized managers accurate workload and performance information inside your organization.
• To send you work reminders and notifications related to tasks waiting on you (for example, a timesheet to submit or an approval to action).
• To keep the service secure, reliable, and working correctly.

We do not sell your information. We do not use your information for advertising, and we do not share it with advertisers.

The mobile app offers an optional way to log your day by speaking instead of typing. The microphone is used only while you are actively recording a timesheet entry, and only after you grant microphone permission. Your speech is converted to text and used to help create your timesheet entries. We do not record or listen to you in the background, and the microphone is never used except when you tap to speak.

With your permission, the app can send notifications about work waiting on you. You can turn notifications off at any time in your device settings. Reminder emails are sent only when you have open items; a clear queue means no message.

If your device supports Face ID, Touch ID, or fingerprint unlock, you can choose to use it to open the app. This check happens entirely on your device. We never receive, see, or store your biometric data — it never leaves your phone.

Your information is visible only to:

• You, and the managers in your organization whose role gives them access to your records (for example, your team lead or department head), as configured by your organization.
• Trusted service providers who help us run MyEchoDay under strict confidentiality — our cloud hosting and database provider, our email delivery provider, and an AI provider used to help turn your typed or spoken notes into structured timesheet entries. These providers process your information only on our instructions and only to provide their service.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

We keep your work records for as long as your organization uses MyEchoDay and as needed for their legitimate workforce and record-keeping purposes. If your organization stops using MyEchoDay, or asks us to remove data, we delete or anonymize it within a reasonable period, except where we must keep it to meet a legal obligation.

Information is encrypted in transit, access is restricted by role, sign-in uses secure tokens, and administrative actions are logged. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your information.

Because your organization provides MyEchoDay to you, many requests — such as correcting your name or role, or removing your account — are handled through your organization’s administrator. Depending on where you live, you may have rights to access, correct, or delete your personal information. You can exercise these rights, or ask a question, by contacting your organization’s administrator or us at the address below.

You can ask us to delete the personal information MyEchoDay holds about you. Here is exactly how:

• Email info@theechohouse.com from your work email address, with the subject “Delete my MyEchoDay data”.
• Tell us your name and the organization you work for so we can locate your account. You do not need to be signed in to make the request.

What we delete: your account details (name, work email, role) and the work records tied to your account — the timesheets, tasks, notes, and leave requests you entered, and the analytics derived from them.

What we may keep: because MyEchoDay is an employer record-keeping tool, your organization may be required to retain certain work records to meet legal, tax, or employment obligations; where that applies we keep only what the law requires and delete the rest. We confirm your request and complete deletion within 30 days.

Your organization’s administrator can also action deletion on your behalf inside MyEchoDay.

MyEchoDay is a workplace tool intended for use by employees. It is not directed to children and is not intended for anyone under the age of 16.

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you within the app.

If you have any questions about this policy or your information, contact us at info@theechohouse.com.