Privacy Policy
Privacy Policy
Last updated: May 2, 2026
PlotCatalyst Echo is built so that your manuscripts and notes stay on your device. The only data that leaves is what you actively choose to send — an AI rewrite request, a TTS synthesis, a Dropbox backup. This policy explains, in plain English, exactly what happens with your data.
Plain-English summary
- Your manuscripts, chapters, paragraphs, edits, and notes live on your device. They are not uploaded to any server we operate.
- We do not have user accounts. There is no login. We don't know who you are.
- When you use AI features, the relevant text is sent to an AI provider (default: the included Rork gateway; optionally OpenRouter with your own key) so it can generate a response. That text isn't kept by us.
- When you use a premium narrator voice, the relevant text is sent to ElevenLabs or Kokoro for synthesis. The same applies — used to make audio, not retained by us.
- If you connect Dropbox, your backups go to your own Dropbox account. We never see them.
- Subscriptions are processed by Apple, Google, and RevenueCat. We never see your payment details.
What we collect
PlotCatalyst Echo does not operate a user-data backend. We do not run servers that collect, store, or process your manuscripts or notes.
The only data PlotCatalyst Echo's own infrastructure touches is a small read-only configuration file (app store URLs, support links, feature flags) that the app fetches from a Supabase project to keep itself up to date. That file contains no personal data.
What we don't collect
- We don't collect your name, email address, phone number, or any account identifier.
- We don't collect or read the contents of your manuscripts.
- We don't collect or read your notes, voice recordings, or transcriptions.
- We don't track your location.
- We don't sell, rent, or share data with advertisers.
Data stored on your device
The following data is stored locally on your device using the operating system's standard secure storage (AsyncStorage, the file system, and the keychain where applicable):
- Your imported manuscripts, including chapters and paragraphs.
- Edits you've made to manuscripts (stored as overlays on top of the original imported text).
- Your notes (text and voice).
- Audio files for voice notes.
- Cached audio for TTS playback (cleared on demand from Settings).
- Your API keys (ElevenLabs, Kokoro, OpenRouter) if you've added them.
- Your settings: theme, accent, voice, playback speed, voice-notes mode and timer, etc.
- Your AI usage counter and free-tier limits.
Uninstalling the app removes all of this data. We have no way to recover it.
Third-party services
PlotCatalyst Echo uses third-party services only when you actively use a feature that requires one. We do not pre-fetch or warm up any of these services in the background.
AI text generation
When you use AI features (paragraph rewrites, redundancy variations, metadata generation, cover-image generation):
- Default: the request is sent to a Rork-operated gateway, which forwards to upstream model providers. The gateway does not retain the text of your prompts beyond what is required to fulfill the request.
- Bring-your-own-key (Premium): if you've added an OpenRouter API key, the request is sent directly to OpenRouter using your key. Their privacy practices apply — see openrouter.ai/privacy.
Either way, only the specific text you're asking the AI to act on (a paragraph, a chapter, a metadata snippet) is sent — not your whole manuscript.
Text-to-speech narration
- System voice: uses your device's built-in TTS. No data leaves your device.
- ElevenLabs: if you've added an ElevenLabs API key, the text being read is sent to ElevenLabs to synthesize the audio. Their privacy practices apply — see elevenlabs.io/privacy.
- Kokoro: if you've configured a Kokoro server (default:
https://sigil22.cloud), the text is sent there to synthesize the audio. The audio is cached locally so re-playing the same passage doesn't re-synthesize.
Speech-to-text (voice notes)
Voice notes are transcribed using a Whisper-based service routed through the Rork gateway. Audio is sent over an encrypted connection, transcribed, and the transcription is returned. The audio is not retained beyond the duration of the request. The audio file itself remains stored locally on your device.
Subscription & in-app purchases
Subscriptions are processed by Apple (iOS) or Google (Android) and entitlement is mediated by RevenueCat. We never see your payment details. RevenueCat may receive an anonymous device-level identifier to track entitlement state. See revenuecat.com/privacy.
Configuration fetch
On launch, Echo fetches a small configuration file (URL of the marketing site, support email, etc.) from a Supabase project. This is a read-only request and does not contain any personal data. Supabase's privacy policy applies: supabase.com/privacy.
Voice recordings
Voice notes you record are saved as audio files in the app's private storage on your device. They never leave your device unless you:
- Send the audio to the speech-to-text service (this happens automatically when you create a voice note, in order to produce a transcript).
- Back the manuscript up to your own Dropbox account, in which case the audio file is included.
- Export a manuscript with the "include audio file paths" option enabled — note this only includes paths and metadata, not the audio bytes themselves.
Deleting a voice note removes the audio file.
Your API keys
If you choose to use ElevenLabs, Kokoro, or your own OpenRouter key, those keys are stored on your device. They are used directly by the app to call those services on your behalf — the keys never pass through any server we operate. Deleting the app or signing out of those services in Settings removes the keys.
Dropbox backups
If you connect Dropbox, Echo authenticates via OAuth and receives an access token that lets the app read and write to a dedicated app folder in your Dropbox. We never see this token; it is stored on your device. Backups go directly from your device to your Dropbox account. Disconnect at any time from Settings → Backup → Dropbox.
Purchases & subscriptions
All purchases are handled by Apple's App Store or Google Play Store. We do not see your name, address, or payment information. Receipts are validated through RevenueCat to confirm your active entitlement (Premium or not). RevenueCat receives an anonymous app-user identifier; it does not receive personal information.
Device permissions
Echo asks for the following device permissions, only when needed for a feature you've initiated:
- Microphone — to record voice notes.
- Files / documents — to import a manuscript file you choose.
- Photos / camera roll — to set a custom cover image.
- Network — for the optional services listed above.
You can revoke any of these in your device settings at any time. Voice features will stop working without microphone access; cover uploads will stop working without photo access.
Analytics & crash reporting
Echo does not include any third-party analytics, advertising SDKs, or behavioral tracking. We do not measure where you tap, what you read, or how long you use the app. If a future version begins collecting any analytics, we will update this policy and request your consent first.
Children
Echo is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has used the app and shared personal information, contact us and we will help you delete any local data.
Your rights
Because we don't collect or store your personal data on any server we operate, there is no central record of you for us to access, export, or delete. You retain full control of your data on your device — view, edit, or delete it directly within the app, and uninstalling removes everything.
If you are an EU/UK or California resident and have questions about data we may incidentally hold (for example, anonymous purchase entitlement state at RevenueCat), email us using the address below and we will help.
Changes to this policy
We may update this policy as the app evolves. Material changes will be flagged with a notice in the app and an updated date at the top of this page. Continued use of the app after a change indicates acceptance of the updated policy.
Contact
Questions about this policy or your data? Email support@manuscript.app.