Echo Terms of Service

1. Who we are

This is an agreement between you and Controverse Labs LLC, a Massachusetts limited liability company (Massachusetts identification number 002007256; organized 15 October 2026), with its mailing address at 68 Harrison Ave, Ste 605 PMB 231072, Boston, MA 02111 ("Echo", "we", "us"). It covers your use of the Echo app and the website echomessenger.app.

Echo is a messenger. It is not a backup or data-custody service, a wallet or an exchange. Echo has no token, no coin and nothing to trade. Echo's servers run on the Internet Computer, a decentralized hosting network. That is a fact about where our software runs, not an invitation to buy anything.

Controverse Labs LLC may also make other apps. Data from Echo is never shared with, combined with, or made available to any other Controverse Labs product.

By creating an account or using Echo, you agree to these Terms and to our Privacy Policy at echomessenger.app/privacy.

2. Who can use Echo

You must be 13 or older to use Echo. That includes Child accounts inside a Family, which are for teens aged 13 to 17 (§10). Echo is not for children under 13. If you are under 13, please do not use Echo. If we learn that an account belongs to someone under 13, we will delete it.

What we ask, and what we keep. When an account is created, we ask one question: whether the person is 13 or older. We keep only the yes and the moment it was given. We never ask your age or your date of birth, and there is nowhere in Echo to enter one. That record is not shown on your profile or to other users.

You may not use Echo if you are in, or ordinarily resident in, a place we are legally prohibited from serving (§12), or if you are on a US sanctions list. By using Echo you confirm neither is the case.

3. Your account and your Echo Key

Your Echo account is a display name you choose and an Echo Key we assign when your account is created. Your phone also creates your account's secret key, which stays on your phone (§4). Apart from the 13-or-older question, that is all we ask for.

We do not ask for, and do not have, your email address, phone number, real name or a password.

Your Echo Key is pseudonymous, not anonymous. It is an identifier, like a locker number rather than a name tag, and it is meant to be shared with people you want to hear from; it is not a password and unlocks nothing. We see which Echo accounts talk to each other and when. An Echo account is not tied to your phone number, email or legal name, and Echo never asks for them. But an account can be linked to the person behind it: through the display name you choose (and names others give you), a purchase, which Apple or Google knows the buyer of (§6), your device's notification token, the internet address networks see when you connect, and anything you send us in a support chat or a report. The Privacy Policy §3 lists them all.

Your display name is not private. It is shown to the people you talk to, and anyone who has your Echo Key can look it up. If you use your real name, that is what we hold.

Some names are reserved. "Echo Support" and similar official names are refused to every account except our own verified support account (§14). That stops anyone impersonating us.

4. Recovery, and what "we cannot get it back" means

Echo's recovery uses a recovery code plus a PIN, both of which stay with you.

• Echo never sees, stores or transmits your PIN.
• There is no reset and no operator override, and Echo holds no copy of your account key that it can open without your PIN.
• If you set up recovery, what we hold is an encrypted backup of your account key that your PIN opens, plus what is needed to find it. That backup is only as strong as your 8-digit PIN: someone who obtained a copy could in principle try every possible PIN on their own computers (Privacy Policy §20). Keep your recovery code private and don't reuse your PIN.

Your account key stays on your phone. On current versions of Echo it is not included in iCloud or computer backups, so restoring a phone backup does not bring your account with it. To move Echo to a new phone, you need your recovery code and your PIN, or your recovery phrase if you saved one. If you have not set up a way to recover your account, Echo reminds you until you do.

If you lose your device, your recovery code and your PIN, your account is gone for good. Echo has no reset, and does not try to open recovery backups, for you or for anyone else. This is by design.

You are responsible for keeping your device, recovery code and PIN safe.

5. No guarantee of availability

Echo is new and still changing. Features may change, move or be removed. There is no uptime commitment and no service-level agreement: Echo may be unavailable, and messages may be delayed or fail. Do not rely on Echo as the only place you keep anything important. A paid subscription buys access to paid features as they exist, when they work; it does not change this section.

6. Subscriptions, cancellation and refunds

What you can buy. Echo Pro and Echo Family are monthly subscriptions, bought inside the Echo app through Apple's App Store on iPhone. On Android they will be sold through Google Play; until then, the Android app does not sell subscriptions. There is no free trial. The price is shown on the screen where you buy, in your currency, before you confirm, and that screen is the authoritative price. We do not print prices here, because the store sets the final price in your currency, including local taxes.

Family. Echo Family covers the person who buys it (the Admin) plus 5 seats, so 6 people in all. A family can add up to 4 more paid seats, for 10 people on the plan. Family members who have their own Pro subscription don't use a seat, and a family can have up to 50 members in total. Each extra seat adds to the monthly price: in the app, a bigger family moves to a larger Echo Family plan, and the store shows that plan's price before you confirm.

The store is the merchant. Your payment details go to Apple or Google and never to Echo. The store's terms govern the payment.

Renewal. Please read this twice. Subscriptions renew automatically each month until you cancel. You are charged for each new month at the then-current price unless you cancel before the current period renews, as the store's rules describe (Apple asks for at least 24 hours before the period ends). The price, the period and the fact that it renews are shown before you confirm.

Cancelling. Cancel at any time in your Apple ID's subscription settings on iPhone, or in Google Play's subscriptions on Android; Echo's Settings will take you there. Cancellation takes effect at the end of the period you already paid for. You keep paid features until then and are not charged again.

Echo cannot cancel your subscription for you. The store took the payment, so you cancel with the store.

Refunds.

• iPhone: Apple handles refunds, and Echo cannot issue them. Use Apple's "Report a Problem" (reportaproblem.apple.com).
• Android: you can request a refund through Google Play, or contact us at support@echomessenger.app and we will look at your request.

If you are refunded, paid access ends.

Restoring. If you reinstall Echo or move to a new phone, you can restore your subscription from inside the app. It re-checks your purchase with the store and does not charge you again. A subscription bought on iPhone is restored on iPhone, and one bought on Android on Android.

If a payment fails. The store may retry for a short time. If it keeps failing, paid access ends and your account moves to the Free plan. Your messages and contacts are not deleted.

Price changes. If a price goes up, you will be told in advance, as the store's rules require, and you can cancel before it applies. A price change never applies to a period you already paid for.

What a refund does not undo. Messages that have already vanished, been deleted or expired stay gone. No billing action brings them back.

Where your local law gives you more (for example, rights to cancel or to a refund that cannot be waived), your local law wins.

7. Encryption, and exactly what we can see

Echo's tagline is "Private by nature. Not by policy." That is only worth something if we are precise about the limits, so here they are.

Message content is end-to-end encrypted. Your messages, the media you send, the emoji you react with, your profile photo, and the titles and notes of family calendar events are encrypted on your device before they leave it. Whether a build encrypts is fixed when the build is made. It cannot be turned off remotely, for one conversation or for one person. Before every iOS and Android release ships, our own release checks inspect the built app to confirm the encrypted send path is present and no unencrypted send path is left in it. These are checks we run ourselves, not an independent audit.

One-on-one messages sent since 12 October 2026, and family chats, groups and family calendar entries sent since 25 October 2026 — Echo cannot read them. Each one is locked with a key built from two halves: one made on the devices in the conversation, which Echo has never been able to open, and one Echo holds. No change to our servers, no court order and no change of ownership can unlock what you have already sent — with one exception: if you set up a recovery backup, it is only as strong as your recovery code and 8-digit PIN, and someone who obtained a copy of it, including by compelling us, could try every PIN (§4). For new messages, the only thing we could attempt is giving your app the wrong key for a contact, or adding someone to a family or group. Your app tells you if a contact's key ever changes, and comparing a safety number lets you verify the first one yourself. In a family or group, every member's app shows who joined before sharing anything with them, and a newcomer cannot open anything sent before they joined. Sealed Chats set up since 25 October 2026 are locked the same way, with the passphrase you each set on top. This protection depends on the Echo app on your phone being genuine. And it covers what is on our servers, not what you choose to send us: if you report a message, your app sends us a readable copy of that message for a person to review (§11).

Everything older — Echo does not read it, and this is what that rests on. One-on-one messages sent before 12 October 2026, family chat, group and calendar entries sent before 25 October 2026, and Sealed Chats set up before 25 October 2026 keep the encryption Echo always used. (A Sealed Chat set up before 25 October 2026 keeps its original key even if it is unsealed and sealed again — re-sealing changes the passphrase, not the key — so it stays in this group.) Our servers hold no key that opens them and release keys only to members of a conversation. But the key that unlocks them is one our own server code stands between, so a future version of that code could release it — and a recovery backup, if you set one up, reaches these messages too (§4). We have not done that and do not intend to. Three things back this, and the last two you can check yourself: our servers release a conversation's key only to its members, with no exception for us, for parents or for anyone else; a fingerprint of the exact code our servers run is public and changes whenever that code changes; and every conversation has a safety number you and your contact can compare. Since 25 October 2026, "cannot" covers family chats, groups, the family calendar and new Sealed Chats as well as one-on-one chats. Nothing sent before that date is moved by it.

What we can see anyway. Encrypting what is inside an envelope does not hide the envelope. To deliver messages, our servers hold, in readable form:

• which accounts talk to each other: the Echo accounts in every conversation, your contacts (and any nicknames) and your family and group memberships. An account is not tied to a phone number, email or legal name, but it can be linked to the person behind it (§3);
• when: when messages are sent, delivered, read and edited;
• delivery and read status;
• your display name and Echo Key, and your contacts';
• the last day your account was active (the day only);
• the shape of a message: whether it is text, a photo or a voice note, how long a voice note is, and which message it replies to;
• family, group and sub-chat names, roles (including whether an account is a Child) and parental-control settings;
• the dates and times of family calendar events, and who has responded (but not the title or note).

Encryption does not shrink this list. The Privacy Policy sets it all out in full.

Two exceptions, both started by you. If you chat with Echo Support, we read what you write there, because you wrote it to us (§14). And if you report a message, your app sends us a readable copy of that message, as it appears to you, so a person at Echo can review it (§11). That applies only to what you choose to report, and it is how a report can work at all when we do not read the conversation ourselves.

What encryption does not do. It does not hide the information in the list above. It does not stop someone photographing their screen. It does not protect a copy your phone puts in a cloud backup. It does not give "forward secrecy" (the keys that protect a message today could, in principle, be re-derived later, which is also what makes account recovery possible). And it does not make Echo unhackable. No system is, and we will never say Echo is.

8. Messages that delete themselves

Echo has two kinds of disappearing messages, and they behave differently.

Vanish removes messages from your own copy of a conversation after a timer you set. It does not reach into the other person's phone: they keep their copy. On our servers, the encrypted content of a Vanish message is deleted once the other person's app has received it and your timer has run out, or 7 days after you sent it if their app never receives it, whichever comes first. Vanish does not remove the message from the other person's device.

Mutual Vanish is the both-sides version, and it is a paid feature. The message stays sealed until the recipient opens it. When the timer ends, it is deleted from both phones and from our servers. If it is never opened, it is deleted after 7 days.

By using Echo, you agree that Echo may delete message content from the Echo app on your device when a timer ends, including messages other people sent you with a timer on. Echo does this, not the other person, and it only ever removes content inside Echo, never your photos, files or anything else on your phone. You will always be told that a message will delete itself before you open it.

Timers outlive the sender's account. If someone who sent you a disappearing message later deletes their account, it still disappears on schedule.

What this cannot do. It cannot stop a screenshot or a photo of the screen; Echo has no screenshot detection. It cannot reach a backup your phone made before the timer ended. It cannot reach a copy kept with a report (§11).

Mutual Vanish is not available in any conversation with a Child account, in either direction. This is enforced on our servers, and if we can't confirm whether an account is a Child account, the message is refused.

9. Keeping what you are required to keep

If you have a legal, professional or workplace duty to keep records, that duty is yours, not Echo's. Echo is not a record-keeping system. Turn timers off if you need a record. Once a timer has removed a message, we cannot bring it back, for you or anyone else.

10. Families and Child accounts

A Family is a shared space with an Admin, Members and Child accounts. Child accounts are for teens aged 13 to 17; Echo is not for anyone under 13 (§2). The Admin creates the Family, invites people, assigns roles, manages seats, and sets parental controls for a Child.

A parent guards the door, not the room. A parent decides who can reach their child and when the child can use Echo. A parent does not read what the child says. Echo gives parents the first power and not the second.

What an Admin can do: invite and remove members (removing a teen takes them out of the Family; it does not delete their Echo account); manage roles and seats; delete the space or a chat inside it; see the family roster (display names, Echo Keys and roles); and set parental controls for a Child: quiet hours, whether media can be shared, whether link previews load, and an approved-contacts list. These controls are enforced on our servers on everything a Child does in family and group chats (sending, editing and reacting), except link previews, which are enforced on the Child's own phone and stay off if the setting can't be read.

What a parent or Admin can read: only the conversations they are a member of.

What they cannot read: any conversation they are not a member of, including a Child's other chats. The keys to a conversation are only released to its members, our servers check that first, and there is no parent, Admin or operator exception. An Admin can't see that a Child's other chats exist, can't add themselves to one, and if they are added later, still can't read what was sent before they joined.

Nobody new reaches a Child without their parent saying yes.

• A friend request sent to a Child is held for the parent, who approves or declines it. The Child cannot accept or decline it themselves.
• An invitation that would bring a Child into a new family space or group waits for a parent too. The Child cannot accept it on their own.
• A parent cannot approve a friend request past a block.
• This is about people reaching in. A Child can still send a friend request to someone whose Echo Key they already have.
• Joining a Family always takes an invitation that is accepted. No one can turn an existing adult's account into a Child account; the only way in is a Child invitation that the person accepts themselves.
• A Child can join only Chambers hosted by their own family (§15), and can join a group call only when the host and whoever invited them are already among the Child's contacts (every contact a Child has was approved by a parent).

Limits we would rather state than have you discover:

• A "Child" is a role in a Family, not a verified age. We don't check anyone's age. A teen with their own account who is not a Child in a Family has no parent attached, and none of these protections apply to them.
• The approval gate is strong, not absolute. Deciding whether an account is a Child means asking another part of our system. If that check can't complete, a friend request arrives as an ordinary request instead of being held. Echo re-checks later and moves the request to the parent if the Child hasn't acted on it.
• Quiet hours use Coordinated Universal Time (UTC), not the Child's local time.
• The approved-contacts list covers family and group chats. One-on-one chats are covered by the approval gate instead.

11. Rules, reporting and enforcement

Do not use Echo to: break the law; harass, threaten, stalk or exploit anyone; share child sexual abuse material or sexualize minors in any way; share someone's intimate images without their consent; impersonate someone; send spam or malware; evade sanctions; or interfere with Echo or other people's use of it. Our child-safety standards are published at echomessenger.app/child-safety and form part of these rules.

How we enforce this. Because message content is end-to-end encrypted, we do not scan it. Enforcement relies on reports from users, on what someone shows us in a report, and on the limited account information we can see. We may warn, restrict, suspend or close accounts that break these rules, and we may block an account from contacting others.

Limits that keep Echo free of spam and bots. To protect everyone, Echo limits what any one account can do:

• You can start a new one-on-one chat only with someone in your contacts. Echo Support is the one exception (§14).
• You can invite only your contacts to a group. Family invitations are sent to an Echo Key.
• There are daily limits on how much one account can do, such as how many friend requests it can send. A new account has lower daily limits, about a tenth of the usual, for its first 7 days.
• A friend request that isn't answered within 30 days expires. If someone declines your request, you can't send them another one for 30 days.
• When you create an account, your phone may first solve a short puzzle. It usually takes a moment and collects nothing about you or your phone. We also limit how fast new accounts can be created, so at a very busy time signing up may take a few minutes.

Ordinary use stays well inside these limits. If you reach one, try again later. We may adjust them to keep Echo working for everyone.

Reporting. You can report a message, an account, or a person speaking in a Chamber. Reporting is the one way a message's content reaches us from a conversation we do not otherwise read, and it only happens when you choose it: your app sends us a readable copy of the message you report, as it appears to you, so a person at Echo can review it. For a photo or voice note, what reaches us is a description of the attachment, not the file itself. It sends your reason; we also record the accounts involved and the times. We keep a report for 12 months, separately from normal deletion, so it survives the message vanishing and either account being deleted. You can also block anyone at any time.

Child safety. If we become aware of apparent child sexual abuse material, we report it to the US National Center for Missing & Exploited Children (NCMEC) as US law requires, and we may restrict or end the responsible account's access to Echo. We keep the report and the account information we hold at the time we file it for at least one year, and longer when law enforcement asks us to. Our full standards are at echomessenger.app/child-safety.

Requests from law enforcement. We must comply with valid legal process for data we actually hold, and we won't pretend otherwise. What we can provide in readable form is limited to what the Privacy Policy §2b lists, reports and support chats. No one — not Echo, Apple, Google, or any government or authority — can use what Echo holds to read one-on-one messages sent since 12 October 2026, family chat, group and family calendar messages sent since 25 October 2026, or messages in Sealed Chats first set up since 25 October 2026 — with one exception: your recovery backup, if you set one up, which we can be ordered to hand over and which is only as strong as the recovery code and PIN that protect it (§4). Older messages are encrypted and we do not read them; §7 explains what that rests on, and the one way a new message could still be exposed.

12. Where Echo is not available

We do not offer Echo where US law prohibits it, including countries and regions subject to comprehensive US sanctions, and we do not offer Echo on the App Store in mainland China. Echo is not offered in the European Economic Area, Switzerland or the United Kingdom. Using Echo from a place we do not serve, or getting around a restriction, breaches these Terms. The list may change.

13. Your content, and the licence we need

Your messages are yours. We do not claim ownership of anything you send.

You give us only the limited permission we need to run the service: to store your encrypted content, carry it, and deliver it to the people you send it to. It ends when the content is deleted.

Echo is not a backup service for your photos or voice notes. Keep your own copies of anything that matters. The way our servers keep media is changing, as described in the Privacy Policy §10; we will update that section before the change takes effect.

The Echo app, name, logo and design belong to us. You may use the app for its intended purpose. You may not resell, copy, reverse-engineer or redistribute it, except where the law allows you to regardless.

14. Feedback and Echo Support

You can send us feedback from Settings → Send feedback. We read what you write. Your app version, build and platform go with it.

Attaching your Echo Key is your choice. If you attach it, we can look into your account's technical state, and when our verified Echo Support account is live, we may reply to you from it inside Echo. Until then we reply by the contact route you used to reach us. If you don't, we have no way to reply.

Echo Support is the only account that can start a chat with someone who hasn't added it, and only if you invited it by attaching your Echo Key. A support chat starts read-only: we can write to you, and you can't reply until you tap a button allowing it, which only you can tap. Echo Support can only be in that one chat with you; it cannot be added to your family, your groups or any shared chat. We read what you write in a support chat, because it is addressed to us.

The verified mark appears only next to the real Echo Support account. We will never ask for your PIN, your recovery code or your seed. Anyone who does is not us.

Feedback and support chats are not a way to send legal notices or privacy requests; use the addresses in §20.

15. Calls and Chambers

Echo offers one-on-one and group voice calls. They are audio only.

• Calls are live, not recorded. We do not record them.
• Audio is encrypted on your phone before it leaves. One-on-one calls always pass through a relay, so neither person learns the other's internet address. Group calls pass through a server that forwards each speaker's encrypted audio to the others. We do not listen to calls. Your call history stays on your phone.
• §11's rules apply to everything said on a call.

Chambers are live audio rooms, and they are audio only.

• Chambers are not recorded, and we do not listen to them.
• Who can do what. Hosting a Chamber is part of Echo Pro and Echo Family. On the Free plan you can join a Chamber you are invited to and listen. If the host has opened the mics (Open mic), you can also take a free mic, up to the number the host allows. In a Stage room, only people on Pro or Family can be brought up to speak.
• Chambers are invite-only: only people who are invited can join — or, for a Chamber started from inside a family or group, the members of that family or group. There is no joining by link. Hosts can remove and ban people.
• Fair use: a daily hosting limit. A live room costs more to run the more people are in it, so hosting comes with a daily fair-use limit. It is measured by what your rooms cost to run (how many people can speak, how many are in the room, and for how long), not by a set number of hours, and it resets each day at midnight UTC. As you get close, the host gets a heads-up. When the limit is reached, the room has about 15 minutes to wrap up and then ends, and you can't start another Chamber until the next day. Everyone hosting on the same Echo Family plan shares one daily limit. Group calls are not counted. We set the limit to leave room for ordinary use, and we may change it.
• Hosts are responsible for their rooms, and §11's rules apply to everything said in them. You can report the host, a co-host or a speaker in a Chamber. Chambers are never recorded, so a report has no audio attached: it sends us the room, the account you reported, your reason, any note you add and whether you also blocked them, and we can see that it came from you, even if you were listening hidden. We do not tell the person you reported. A report still works for 24 hours after they leave or the room ends, and it is kept like any other report (§11; Privacy Policy §11a).
• A Child can join only Chambers hosted by their own family, and can join a group call only when the host and whoever invited them are already among the Child's contacts (every contact a Child has was approved by a parent).

16. Deleting your account, and ending this agreement

You can delete your account at any time: Settings → Account → Delete account. Before you confirm, Echo shows you what goes and what stays, and asks you to type your display name. You have ten seconds to change your mind. After that there is no undo and no cool-down, because we have no email address to warn you at. The full walkthrough is at echomessenger.app/delete-account.

What is deleted: your profile, display name and Echo Key; your contacts and nicknames (from your list and theirs); friend requests and blocks; your family and group memberships, parental-control settings, seats, the calendar events you created and your responses; your recovery backup; the link between your account and your devices; your reactions (in one-on-one chats, reduced to an empty marker so the chat stays in order; in families and groups, removed); your subscription entitlement; and your 13-or-older record.

What stays, and why:

• Messages you already sent stay in the other person's app. We can't reach into someone else's phone to take them back. Our servers also keep the encrypted copies that make up the other person's side of the conversation, so it doesn't break for them.
• Shared spaces stay for their other members.
• Disappearing-message timers you set keep running, so your timed messages still disappear on the other side.
• Reports made about you or by you are kept for 12 months (longer for child-safety reports; §11).
• Billing records we are legally required to keep, which stay linked to your former account identifier.
• Feedback you sent, without your Echo Key.
• Copies outside our live service (see below), and the records Apple, Google and our service providers keep themselves.

If you have an active subscription, cancel it first. Echo cannot cancel an Apple or Google Play subscription for you, so it will not delete an account that is still being billed. It will take you to the store's settings, and you can come back when you're done.

Only you can delete your account. That is true of Child accounts too: a teen can delete their own account the same way, and a parent or Admin cannot delete it for them. An Admin can remove a teen from the Family (§10), which ends their place in the Family but leaves their Echo account in place.

Deletion on a decentralized network. When we delete a record, it is removed from the live data our service runs on. We keep a small number of recent server snapshots, replaced as we update the service, and the underlying network may hold copies we cannot reach. We cannot promise to erase every copy from every snapshot or replica, and we won't claim to. What such a copy would hold of your messages is encrypted.

If you break these Terms, we may suspend or end your access. You can stop using Echo whenever you like. Sections that by their nature should survive the end of this agreement (including §§13, 17, 18 and 20) do.

17. Disclaimers and limits on our liability

Echo is provided "as is" and "as available", without warranties of any kind, to the fullest extent the law allows. We do not promise that Echo will be uninterrupted or error-free, or that every message will be delivered.

To the fullest extent the law allows, our total liability to you for any claim relating to Echo is limited to the greater of (a) what you paid for Echo in the 12 months before the claim, or (b) US$50, and we are not liable for indirect or consequential losses.

Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot legally be limited. If you are a consumer with mandatory consumer protections where you live, those rights are not affected by anything in these Terms.

18. Governing law and disputes

These Terms are governed by the laws of the Commonwealth of Massachusetts, USA, without regard to its conflict-of-laws rules. Disputes go to the state or federal courts located in Massachusetts. There is no forced arbitration and no class-action waiver.

19. If you got Echo from Apple's App Store or Google Play

These Terms are between you and Controverse Labs LLC, not Apple or Google. Apple and Google are not responsible for Echo or its content.

If you got Echo from Apple's App Store:

• Licence. Your licence to use Echo is a non-transferable licence to use it on Apple-branded devices you own or control, as allowed by the Usage Rules in Apple's Media Services Terms and Conditions.
• Support. We alone are responsible for maintaining and supporting Echo. Apple has no obligation to provide support.
• Warranty. To the extent any warranty is not effectively disclaimed, we, not Apple, are responsible for it. If Echo fails to conform to an applicable warranty, you may notify Apple, and Apple will refund the purchase price (if any). To the fullest extent the law allows, Apple has no other warranty obligation.
• Claims. We, not Apple, are responsible for any claims by you or a third party relating to Echo or your use of it, including product liability, failure to meet legal or regulatory requirements, and consumer-protection or privacy claims.
• Intellectual property. If someone claims Echo infringes their intellectual property, we, not Apple, are responsible for dealing with it.
• Legal compliance. You confirm you are not in a country subject to a US Government embargo or designated as "terrorist supporting", and you are not on any US Government list of prohibited or restricted parties.
• Third-party terms. You must follow any applicable third-party terms (for example, your mobile carrier's) when using Echo.
• Third-party beneficiary. Apple and its subsidiaries are third-party beneficiaries of these Terms and may enforce them against you.

If you got Echo from Google Play: your download and any purchase are also subject to the Google Play Terms of Service, and Google handles payments under its own terms. Google is not a party to these Terms.

20. Changes, the rest of the agreement, and how to reach us

Changes. We may update these Terms. If a change is material, we will tell you in the app before it takes effect; that is the only channel we have, because we don't have your email. If you keep using Echo after it takes effect, the new Terms apply. If you don't agree, you can delete your account.

Transfer. We may transfer this agreement to a company that takes over Echo, as long as your rights under it and under our Privacy Policy are not reduced. You may not transfer your account.

The whole agreement. These Terms and the Privacy Policy are the whole agreement between you and us about Echo. If part of these Terms can't be enforced, the rest still applies. If we don't enforce something straight away, we haven't given up the right to.

Contact.

• Support and questions: support@echomessenger.app
• Privacy requests: privacy@echomessenger.app
• Child safety: child-safety@echomessenger.app — see our child-safety standards
• Legal notices: by post to Controverse Labs LLC, 68 Harrison Ave, Ste 605 PMB 231072, Boston, MA 02111, with a copy to privacy@echomessenger.app once that mailbox is live
• Formal legal service (service of process): through our Massachusetts registered agent, United States Corporation Agents, Inc., 1900 West Park Drive, Suite 280F, Westborough, MA 01581. The Boston address above is a mailing address only, not a registered office.