Privacy Policy
Last updated: 2026-03-31
1. Who We Are
MaiEcho is an AI emotional guidance companion operated by 鍛澄心智科技有限公司 (Taiwan).
- Website: maiecho.ai
- Contact: hello@maiecho.ai
2. AI Transparency
MaiEcho uses AI technology (Anthropic Claude) to generate responses. MaiEcho is not a therapist, counselor, or medical professional. It does not diagnose, treat, or provide medical advice.
If you are in crisis:
- Taiwan: 安心專線 1925 / 生命線 1995
- International: findahelpline.com
3. Conversation Storage — Notice of Update
We are updating our privacy disclosures to more accurately describe how your conversations are processed and stored. While the updated policy is being prepared, please contact hello@maiecho.ai for questions about how your data is handled.
Optional memory across conversations (in preparation): if you choose to turn it on, MaiEcho stores brief key summaries of your conversations — not the transcripts themselves — so a later conversation can pick up where you left off. This is off by default and you can turn it off, or delete the stored summaries, at any time in Settings. Content related to crisis situations or eating disorders is never captured into these summaries. Deleting them removes them from MaiEcho's own storage; copies of conversation content already processed by our model sub-processors (OpenAI, Anthropic) under their API terms are outside the scope we are able to clear.
In the interim:
- Conversations are processed by Anthropic Claude (US) under their commercial API terms, which by default exclude API data from being used to train general models.
- Conversations are stored on our backend (Supabase, US) for service continuity. They are not used for training general models or for marketing. Specific access may occur for: safety-critical content (such as crisis detection), your support requests, or legal compliance.
- You may request deletion of your data by emailing hello@maiecho.ai. We will acknowledge requests within 5 business days and complete deletion within 14 days of acknowledgment.
4. What We Do Collect
To improve service quality, we collect anonymous usage data:
a) Session analytics:
- Session duration, message count, general topic keywords, browser language
b) Message quality data:
- The full content of each message (linked to a random device identifier, not your name or email)
c) Feedback data:
- When you give feedback (thumbs up/down), the related conversation excerpt (up to 2,000 characters) is recorded
d) Technical data:
- Response timing, error codes (no message content)
5. Third-Party Services
Your messages are processed by:
- Anthropic (AI responses, US) — does not retain or use data for training under commercial API terms
- Supabase (data storage, US)
- Cohere (knowledge search ranking, US) — receives search queries only, not full messages
- Vercel (frontend hosting) / Railway (backend hosting) — no user data stored
6. Cross-Border Data Transfer
MaiEcho is operated from Taiwan. Anonymous analytics data is processed in the United States through our sub-processors listed above.
7. What We Do NOT Do
- Sell or share your data with third parties
- Use your conversations to train general AI models. The pseudonymous quality data described in Section 4 is used to improve the service, not to train external models.
- Use advertising trackers or cookies
- Collect names, emails, or personal identifiers (unless you create an account)
8. Your Rights
- If you have an account, you can delete individual conversations or your full conversation history from the sidebar at any time.
- For account closure, full data erasure (including pseudonymous analytics), or anonymous-session data requests, contact hello@maiecho.ai.
- We respond to all requests within 30 days (deletion requests: 5 business days to acknowledge, 14 days to complete — see Section 3).
For users in the EEA: you have the right to lodge a complaint with your local data protection authority.
9. Age Requirement
MaiEcho is intended for users 18 years and older.
10. Security
- Row-Level Security (RLS) in database
- Encrypted connections (HTTPS)
- Zero personally identifiable information in server logs
- Access limited to service operation
11. Changes
We may update this policy. Changes will be posted here with an updated date.