Apps HubTim Wu Haotian
EchoVault app icon

EchoVault

Local-first voice notes that become searchable actions.

PubliciOS
View on App Store (opens in a new tab)

EchoVault Privacy Policy

Last updated: 2026-05-14 · Legal owner: WU HAOTIAN · Support: gosingk@gmail.com

Information Used

EchoVault may use voice recordings (temporarily stored on-device during recording, deleted after processing unless saved as Pro audio replay), transcripts (generated on-device via Apple's on-device Speech framework or via Xiaomi MiMo cloud ASR when Cloud Insights is enabled; stored locally), locally extracted reminders and calendar candidates (generated on-device via rule-based processing, sent to Apple Reminders or Calendar only with your explicit confirmation), Pro subscription state and feature toggles (managed via Apple In-App Purchase), Cloud Insights audio and transcript text (only when a Pro user has accepted the in-app consent screen that names the third-party processor; the audio recording is transmitted to Xiaomi MiMo, a cloud AI service operated by Xiaomi Corporation in the People's Republic of China, for speech-to-text transcription — the resulting transcript is then used for on-device task extraction) to provide the app features described on this page.

Storage

EchoVault is designed around local device storage. Audio recordings are stored temporarily on-device during recording. After transcription, raw audio is automatically deleted unless you choose to save it as a Pro audio replay feature. Transcripts and generated action candidates are stored in the app's private sandbox on your device. Saved audio remains on your device only and can be deleted at any time from within the app or via iOS settings. EchoVault does not sync session data to any cloud backup from the app side; standard iOS device backups may include app data depending on your device backup settings.

Permissions

Microphone access records voice notes. Audio is captured locally and processed on-device by default. Speech recognition supports transcription using Apple's on-device SFSpeechRecognizer when available — no audio or transcript is transmitted during recognition. Calendar and reminders access is used only after you confirm individual action items.

Sharing

Audio and transcripts are never sold. By default, all processing is on-device and nothing leaves your phone. Cloud Insights is opt-in and off by default for every user, including paying subscribers. The first time a Pro user enables Cloud Insights, the app shows an in-app consent screen that names the third-party processor (Xiaomi MiMo, operated by Xiaomi Corporation in the People's Republic of China), describes exactly what is sent (audio recording for speech-to-text transcription, and the resulting transcript for task extraction), and links to Xiaomi MiMo's privacy policy. No audio or transcript leaves the device until you accept that screen. Once accepted, the audio file is sent over HTTPS to apps.timwuhaotian.dev, which proxies it to Xiaomi MiMo for ASR; the resulting transcript is then used on-device for task extraction. Audio is not retained on the EchoVault proxy after the response is returned, and the request is sent to Xiaomi MiMo without any user account or device identifier. You can turn Cloud Insights off at any time in Settings; doing so stops all transmission immediately and returns the app to fully on-device processing. EchoVault does not use any third-party analytics, tracking SDKs, or advertising frameworks. See the Third Parties section below for details on the only external service that may receive data.

Third Parties We Share Data With

Xiaomi MiMo (Xiaomi Corporation, People's Republic of China) — Receives the audio recording and plain-text transcript of a session only when you (a) hold a Pro subscription, (b) have accepted the in-app Cloud Insights consent screen, and (c) explicitly record a session with cloud enabled. Purpose: run speech-to-text transcription (ASR) and optionally a large language model inference for task extraction. The audio file is sent over HTTPS to apps.timwuhaotian.dev, which proxies it to Xiaomi MiMo's ASR endpoint; the transcript is then used for on-device task extraction. Audio is not retained on the EchoVault proxy after the response is returned, and no account or device identifier is sent with the request. Because Xiaomi MiMo processes the request in China, audio and transcript data leave your country during processing. Xiaomi MiMo's privacy policy: https://privacy.mi.com/all/en_US/

Support

For privacy questions, contact gosingk@gmail.com. This policy is maintained by WU HAOTIAN.