Privacy Policy
Last updated 4 November 2026
This explains what Echolune keeps, where it goes, and the choices you have. It applies to the Echolune app for Windows and its website.
Who we are
Echolune is made by an independent developer. For anything about your data, write to siddidchopra35@gmail.com. We answer requests about your data within 30 days.
What stays on your computer
Your name, Gmail address, profile picture, age range and how you heard about Echolune; your liked songs, playlists folders and pins; what you've listened to (for "Made for you" and your stats); your settings; and, if you link Spotify, your Spotify sign-in. These are kept in your Windows user folder and encrypted so only your Windows account can read them. Your Echolune password itself is never stored: only a one-way fingerprint of it.
What goes to Echolune's server (only if you sign in to an Echolune account)
Your Gmail address, your account id, when you signed in, and your library: the songs you liked in Echolune, songs you marked "Not interested", your pins, folders and the artists you follow. This keeps your library the same on every PC you sign in on. Your listening history, password and Spotify sign-in are not sent. The server is run by Supabase and its computers are in Japan. Only you can read or change your library; we can see it as the operator, and look at it only to run and fix the service.
Jam and Blend (listening together)
Only if you use them. In a Jam, the people in it see your name and what you play and add, and the server keeps what's playing until the Jam ends (a Jam nobody uses for a day is removed). In a Blend, the people in it see your name and your favourite songs (up to 50, from what you've played most in the last 4 months and your liked songs; nothing from a private session). Friends join only with the code you give them, and nobody else can see either. Leaving a Blend or ending a Jam removes your part from the server, and deleting your account takes you out of all of them at once.
Emails
Verification codes, security alerts and sign-in links for your Echolune account are sent through email services that deliver them for us. We only email you about your account and its security.
The Echolune website
The website sets no cookies and has no tracking or analytics. If you join the Echolune Plus waitlist, we keep the email address you enter and when you entered it, on Echolune's server (run by Supabase, in Japan). We use it only to tell you when Plus is available. It stays until you ask us to remove it, or until the waitlist is no longer needed. To be removed, write to siddidchopra35@gmail.com.
Services Echolune talks to
To find and play music, Echolune contacts other services, and like any website they see your internet address: Spotify (if you link it: your library, playlists and playback, under Spotify's own privacy policy), Audius (free songs), Apple's and Spotify's public charts, Deezer, ListenBrainz, MusicBrainz and Wikipedia (song and artist names, for suggestions and artist pages), and LRCLIB (a song's title, artist and length, for lyrics). When you choose a password, only the first 5 characters of a scrambled fingerprint of it are checked against known data leaks (Have I Been Pwned); your password never leaves your computer. Echolune also checks Echolune's server for updates.
What we don't do
No ads. We don't sell or rent your data, and we don't share it except with the services above, to make Echolune work. Echolune has no tracking or usage analytics. We never see your Spotify or Google password.
Your choices and rights
You can see and change your details in Settings at any time. Signing out of your Echolune account stops syncing. To delete your Echolune account and everything on the server, use Settings, Security, Delete your Echolune account (it asks for your password and, if your Gmail is verified, a code we email you). For a copy of your data, or if you can't open Echolune, write to siddidchopra35@gmail.com. To remove everything from your computer, uninstall Echolune and delete the folder %APPDATA%\Echolune. Under India's Digital Personal Data Protection Act, 2023 you can also withdraw your consent, ask for corrections, nominate someone to act for you, and raise a complaint with us first and then with the Data Protection Board of India.
How long we keep it
Your library stays on the server while you have an Echolune account. When you delete your account in Settings, every sign-in to it ends at once and it is kept for 7 more days in case it was a mistake (signing in again in that time keeps it); then it is erased from the server for good. When you ask us by email, it is erased within 30 days. Data on your computer stays until you delete it.
Keeping it safe
Data on your computer is encrypted with Windows' own protection; the server only lets each person reach their own record, and everything travels over encrypted connections. No system is perfectly safe, so please use a strong Echolune password.
Changes
If this policy changes in a way that matters, Echolune will show it to you and ask you to agree again. The date at the top says when it last changed.
Terms of Use
Last updated 4 November 2026
These terms are an agreement between you and the maker of Echolune. By using Echolune you agree to them.
Who can use Echolune
You must be at least 13 to use Echolune.
Your use
Echolune is for your own personal, non-commercial listening. Please don't copy, resell, take apart or change the app, try to get around its security or limits, overload or misuse its server, or use it to break the law or anyone's rights.
Music and other services
Echolune does not host or own any music. Songs come from services such as Spotify and Audius, and your use of them is also under their own terms. Playing Spotify songs needs a Spotify Premium account and Spotify's permission for Echolune, which Spotify can limit or end. Echolune is not made by, linked to or endorsed by Spotify, Apple, Audius, Deezer or any other service it works with; their names belong to them.
Your account
Keep your Echolune password and your Gmail safe: you are responsible for what is done with your account. Tell us at siddidchopra35@gmail.com if you think someone else has used it.
Updates
Echolune checks for updates and downloads them for you. Each update is signed by us and checked before it is installed. Some features may change or stop as Echolune improves.
Paid features
If paid features (such as Echolune Plus) are offered later, their price and terms will be shown before you pay. Echolune never sells Spotify's or anyone else's music.
No guarantee
Echolune is provided "as is". We work to keep it running well, but we can't promise it will always be available, free of mistakes, or that every song will play.
Limits on responsibility
As far as the law allows, the maker of Echolune is not responsible for indirect losses, lost data or problems caused by other services. Nothing in these terms takes away rights you have under consumer law.
Ending
You can stop using Echolune at any time. We may suspend an account that breaks these terms or harms the service or other people.
Law
These terms are governed by the laws of India, and disputes go to the courts of India.
Changes and contact
If these terms change in a way that matters, Echolune will ask you to agree again. Questions: siddidchopra35@gmail.com.
