Introduction
KnixLab ("we," "our," or "us") built the DayEcho app as a free, ad-supported journaling application. This Privacy Policy explains how we collect, use, and protect information when you use our mobile application.
By using DayEcho, you agree to the practices described in this Privacy Policy.
About DayEcho: DayEcho is a privacy-first, fully offline mood journal and daily reflection app. All your journal entries are encrypted and stored exclusively on your device. We have no ability to access, read, or recover your data.
Information We Do NOT Collect
DayEcho is designed with privacy at its core. We do NOT collect, transmit, or store any of the following on our servers:
- Journal entries or mood reflections
- Mood ratings or emoji selections
- Tags or categories you create
- Dates or times of your entries
- Your name, email, or personal identifiers
- Biometric data (fingerprint/face data)
- Your PIN or security settings
- Backup files you create
- Location data
- Contacts, photos, or files on your device
Zero Server Storage: ALL journal data is stored exclusively on your device in an encrypted local database. We have no servers that receive or store your personal content.
Data Stored on Your Device
DayEcho stores the following data locally on your device only:
Journal Data
- Mood entries (text content, emoji, mood rating, tags, timestamps)
- All content is encrypted with AES-256-CBC before being stored
- Encryption keys are kept in your device's secure enclave (Android Keystore / iOS Keychain)
App Settings
- Theme preference (light/dark/system)
- Dashboard widget configuration
- Security settings (hashed PIN, biometric preference, auto-lock timeout)
- Home screen widget data (hydration count, breathing state)
Backup Files
- When you export a backup, it creates an encrypted .dayecho file
- This file remains on your device unless you choose to share it
- We have no access to your backup files
Important: None of this data leaves your device unless you explicitly export and share a backup file.
Data Security
We take the security of your data seriously. DayEcho implements multiple layers of protection:
AES-256-CBC Encryption
All journal content and tags are encrypted at rest using industry-standard AES-256-CBC encryption.
Per-Entry Random IVs
Each encrypted record uses a unique random initialization vector for maximum security.
Secure Key Storage
Encryption keys are stored in platform-provided secure enclaves (Android Keystore / iOS Keychain).
PIN Protection
Optional PIN lock with SHA-256 hashing — your original PIN is never stored.
Biometric Authentication
Optional fingerprint or face authentication for quick, secure access.
Auto-Lock
Configurable auto-lock timeout to protect your journal when you step away.
Advertising (Ad-Supported App)
DayEcho displays advertisements provided by Google AdMob. Google AdMob may collect certain information automatically, including:
- Device Identifiers: Advertising ID for ad personalization
- IP Address: For approximate location and ad targeting
- Device Information: Device type and operating system version
- Ad Interaction Data: Impressions, clicks, and engagement with ads
- Approximate Location: General location derived from IP address (not precise GPS)
This data is collected and processed by Google in accordance with Google's Privacy Policy.
We do not have access to or control over the data collected by Google AdMob, except through content rating controls we have set (G-rated, family-safe ads only).
Opt Out of Personalized Ads: Android: Settings → Google → Ads → "Opt out of Ads Personalization"
Third-Party Services
DayEcho uses the following third-party service:
We do not use any other third-party analytics, crash reporting, tracking, or data collection services. Your journal data is never sent to any external service.
App Permissions
DayEcho may request the following permissions:
Biometric Authentication (Optional)
Used for the app lock feature. Biometric data never leaves your device and is processed entirely by the operating system.
File Access (Optional)
Used only when you choose to import or export a backup file. We do not scan or access any other files on your device.
Internet Access
Used exclusively for loading advertisements via Google AdMob. No user data is transmitted over the internet.
No Internet Required for Journaling: All core features — writing entries, viewing insights, mood tracking, home screen widgets — work completely offline.
Data Retention and Deletion
- All data is stored on your device only
- You can delete individual journal entries at any time
- You can delete ALL data from Settings → Delete All Data
- Uninstalling the app removes all stored data from your device
- We retain no copies of your data on any server
Your Rights
You have complete control over your data:
- Access: All your data is on your device — you have full access at all times
- Portability: Use the Backup feature to export your data as an encrypted .dayecho file
- Deletion: Delete individual entries or all data from Settings
- Ad Preferences: Opt out of personalized ads via your device settings
- No Account Required: DayEcho works without registration or sign-in
Children's Privacy
DayEcho is not directed at children under the age of 13. We do not knowingly collect personal information from children.
Google AdMob ads served in DayEcho are configured with the "max ad content rating" set to General (G), ensuring only family-safe advertisements are displayed.
If you are a parent or guardian and believe a child has provided personal information, please contact us and we will take steps to address the concern.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date and will take effect immediately.
Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.