Privacy Policy

Last updated: 21 October 2026 · Echo+ is made by Boorio (“we”, “us”).

The short version: your messages are end-to-end encrypted and we can't read them. Your crypto wallet's keys never leave your phone. We don't sell your data, show ads, or track you across other apps.

1. Who we are

Echo+ is a chat, social video and self-custody crypto wallet app published by Boorio. Contact us at support@boorio.tech.

2. What we store, and why

Echo+ stores data in Apple's iCloud (CloudKit) servers. We use it only to run the app:

Your account: an anonymous iCloud identifier provided by Apple (we never see your Apple ID email or name), the @username and display name you choose, and your profile picture if you add one.
Your public wallet addresses (Ethereum-style and Solana), so friends can pay you. Wallet addresses are already public on blockchains.
Social content you post: videos, captions, likes, follows, comments on live streams, and tips (amount, coin and the public blockchain transaction ID). This content is public to Echo+ users.
Live streams: live video is relayed in real time by our video provider Agora and is not recorded by us.
Reports you make about other users or content, so our team can review them.

3. What we can't see

Messages, photos and videos in chats are end-to-end encrypted on your phone before upload. Only you and the people in the chat can read them.
Your wallet's recovery phrase and private keys are stored only in your phone's Keychain, protected by Face ID. We never receive them and cannot recover them.

4. Blockchain payments

When you send crypto, the transaction is broadcast to a public blockchain (for example Ethereum, Solana, BNB Chain, Polygon, Base or Arbitrum) through public network nodes. Blockchain transactions are public and permanent by design. We do not hold, control or move your funds.

5. Services we use

Apple iCloud / CloudKit: stores your account, posts and encrypted messages. Apple Privacy Policy
Agora: delivers live-stream video and audio in real time. Agora Privacy Policy
Public blockchain nodes (e.g. PublicNode, dRPC, Solana Foundation): see your public wallet address and transactions when you check balances or send.
CoinGecko: provides coin prices. It sees only which coins' prices are requested, not who you are.

We do not use advertising or analytics SDKs, and we do not sell or share your data for advertising.

6. Camera, microphone, photos and Face ID

Echo+ asks for the camera and microphone only when you record, go live or scan a QR code; for your photo library only for items you pick or choose to save; and uses Face ID only on your phone to approve payments. Photos have their location data removed before sending.

7. Keeping and deleting your data

We keep your data while your account exists. You can delete your account at any time in the app: Settings → Delete Echo+ account. This permanently removes your profile, username, profile picture, videos, live-stream records, likes, follows and the messages you've sent from our servers. Copies of messages already delivered to other people's phones stay on their phones. Blockchain transactions cannot be deleted by anyone.

8. Children

Echo+ is not intended for anyone under 17, and we do not knowingly collect data from children.

9. Your rights

Depending on where you live (for example under the UK/EU GDPR), you may have rights to access, correct, delete or export your data. Most of this you can do directly in the app; for anything else email support@boorio.tech.

10. Changes

If we change this policy we'll update this page and the date above, and tell you in the app for significant changes.