Privacy Policy for Echogram

Effective date: 7 October 2026

This Privacy Policy explains what data the Echogram mobile and TV applications (the “App”) process, where it is processed, and the choices you have. It applies to the App only. The data controller is Lior Iluz, trading as “Illuzion Apps”, Israel. You can reach us at illuzionapps@gmail.com or via our contact page.

Summary

• Echogram has no ad SDKs, no analytics SDKs, and no advertising or attribution trackers. We do not sell or rent personal data, and we show no advertising.
• Most of your data (your Telegram session, cached media, playback position, and settings) stays on your device.
• Your connection to Telegram is direct between your device and Telegram. We do not proxy it and we never receive your phone number, contacts, private messages, or the media you view.
• If you buy Echogram Premium, a small amount of data (your Telegram numeric user ID, an optional display name, and your subscription status) is stored on our backend, which runs on Google Firebase, so that Premium can be verified and synced across your devices.
• Premium subscribers also get their App settings, selected channels, collections, and playback progress synced across devices via that same backend.
• You can delete the App’s data on your device at any time, and you can permanently delete your Premium backend record from within the App (Settings → Account → Delete Account).

1. Data that stays on your device

The following is stored only on your device and is not transmitted to us, unless you are an Echogram Premium subscriber, in which case the items marked below are also synced to our backend as described in Section 3:

• your Telegram login session (managed by the official Telegram library, TDLib);
• media that has been downloaded or buffered for playback, and the App’s local cache;
• your list of selected channels, collections, playback positions, and app settings (synced for Premium subscribers, per Section 3);
• diagnostic logs kept locally to help you troubleshoot.

Clearing the App’s storage or uninstalling the App removes this data.

2. Telegram

You sign in with your own Telegram account, and the App connects directly to Telegram’s API to authenticate you and to retrieve the channels, chats, media, and metadata that your account already has access to. Two-factor authentication is handled by Telegram. Telegram receives the information it needs to provide that service, including your phone number, your IP address, and which content you request; that processing is governed by Telegram’s own Privacy Policy, not this one. We are not Telegram and are not affiliated with it. We do not receive your phone number, contacts, message content, or the media you view.

3. Echogram Premium and our backend (Google Firebase)

Echogram Premium is an optional paid subscription. Purchases, billing, renewals, and refunds are handled by the app store you bought it from (Apple App Store, Google Play, or Amazon Appstore). To verify that a subscription is valid and to keep it in sync across your devices, and to support sharing one purchase across up to six Telegram accounts in line with the stores’ own family-sharing limits, our backend, which runs on Google Firebase (Firebase Authentication, Cloud Firestore, and Cloud Functions), stores:

• your Telegram numeric user ID;
• a display name, if your Telegram account provides one, shown to the other accounts on a shared subscription in the App’s “Devices” list;
• your subscription records: which store and product, whether it is currently active, its expiry date, and the store’s purchase token or transaction identifier;
• shared-subscription membership: which Telegram user IDs are attached to a given purchase, with the dates they joined and were last active;
• mappings between a store-specific identifier (an Apple appAccountToken or an Amazon user ID) and your Telegram user ID, so that renewal and refund notifications from the stores can be matched to the right account;
• if you are a Premium subscriber, your App settings, selected channels, collections, and playback progress, so they stay consistent across the devices you use the App on.

The stores also send our backend server-to-server notifications about renewals, cancellations, and refunds for your subscription. The legal basis for this processing is performance of our contract with you (providing Premium). We do not use this data for advertising or profiling. Sync data is used solely to keep your settings, channels, collections, and playback position consistent across your signed-in devices, and is deleted along with your other backend records if you delete your account.

If you never purchase Premium, the App still contacts our backend once per session to exchange your Telegram user ID for a sign-in token; a minimal record keyed to that ID (including any display name) may be created so that a later purchase can be attached to it.

4. Crash and error diagnostics

The App uses Firebase Crashlytics to report crashes and serious errors. A crash report contains the error and stack trace, the device model, the operating-system version, the app version, and a random installation identifier. It does not contain your name, your phone number, your Telegram messages, or the media you view. This helps us find and fix defects.

5. The Movie Database (TMDB)

When you use the optional discovery and metadata features, the App requests film and television information and artwork from the TMDB API. Your device’s IP address and the search terms or titles you look up are sent to TMDB to answer those requests. This product uses the TMDB API but is not endorsed or certified by TMDB. TMDB’s use of that data is governed by TMDB’s privacy policy.

6. Local network and casting

To play media and to cast to devices such as Chromecast or DLNA receivers, the App runs a local media server on your device and communicates with players and receivers on your own local network. This traffic stays on your network and is not sent to us.

7. What we do not do

• We do not include advertising, analytics, or attribution SDKs, and we do not use Firebase Analytics or Google Analytics.
• We do not sell, rent, or trade personal data, and we do not share it for cross-context behavioural advertising.
• We do not access your contacts, your photo library, or your device location.
• We do not receive or store your Telegram phone number, credentials, message content, or the media you view.

8. Who your data is shared with

We do not disclose personal data except to the service providers that operate the App’s infrastructure, acting on our instructions:

• Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Crashlytics) for backend hosting and crash reporting;
• the app store you purchased through (Apple, Google, or Amazon) for purchase verification and renewal notifications.

We may also disclose data if required to do so by law or valid legal process, or to protect our rights, safety, or property.

9. International transfers

Our backend and crash reporting run on Google Cloud infrastructure that may be located in the United States. Where you are in the EEA or the UK, transfers of your data outside your region rely on Google’s Standard Contractual Clauses and its data-processing terms.

10. Retention

Data on your device remains until you clear the App’s storage or uninstall it. Backend records tied to your Telegram user ID are kept while your account exists; subscription records are retained for a limited period after a subscription ends for accounting and anti-abuse purposes, and are then deleted or anonymised. Deleting your account (Section 12) removes these records. Crash reports are retained by Crashlytics for up to 90 days.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Because our backend holds little more than your Telegram user ID, an optional display name, and your subscription status, most of these are satisfied by deleting your account. To exercise any right, use the in-app Delete Account option or contact us at illuzionapps@gmail.com. You also have the right to complain to your local data-protection authority.

California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information beyond the purposes described here.

12. Deleting your data

• On your device: clear the App’s storage or uninstall it.
• On our backend: in the App, open Settings → Account → Delete Account. This permanently erases the records keyed to your Telegram user ID (your user record, your subscription records, your synced settings/channels/ collections/playback data if any, your membership in any shared purchase, and the store-identifier mappings) and deletes the Firebase Authentication user. It does not cancel a store subscription (manage that in your store account) and does not affect your Telegram account.

13. Children

The App is not directed to children. You must be at least 13 years old (or the minimum age of digital consent in your country, if higher) to use the App, and at least 18 to make a purchase. We do not knowingly collect personal data from children under that age. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. If we make material changes we will update the effective date above and, where appropriate, give notice in the App. Continued use of the App after the changes take effect constitutes acceptance of the revised policy.

15. Contact

Questions or requests about this policy can be sent to illuzionapps@gmail.com or via our contact page. Data controller: Lior Iluz, trading as Illuzion Apps, Israel.