Privacy Policy.

01Who we are and how to reach us

This policy covers the Echo app and its accompanying services (the “Service”), developed and operated by BetterYou Technologies Ltd., company no. 516458957, of 146 Begin Road, Tel Aviv (“BetterYou”, “we”). BetterYou is the owner and controller of the database. This policy covers Echo and its related services only; other BetterYou products are governed by their own terms and policies.

For any question, request, or complaint about privacy, contact us at team@betteryou.tech.

02What the Service is — and what it is not

Echo is a body-awareness and wellness app — awareness of your body and of what happens in your physiology while things happen. Throughout your use of it, physiological and textual data is processed: Echo reads the measurements your own wearable device already records, which reach Echo through the health-data connection you approve on your phone; during a session, the camera can read further measurements from your face using remote photoplethysmography (rPPG) — a technique that detects the tiny color changes in your skin caused by your pulse; an artificial-intelligence system accompanies you in a guiding conversation; and the system processes the measurements and what you wrote in order to mark points in time that deserve attention, help you put them into your own words, and build from them a summarizing personal picture and tailored content. It helps you notice and reflect.

Echo also offers Guided Support, an optional feature you turn on: members of our team, bound by confidentiality, may work behind the scenes in your sessions — reviewing conversations during or after a session, guiding how Echo responds, or composing parts of Echo’s responses. It runs only with your separate, explicit consent, and Sections 06 and 07 describe it in full. Guided Support does not add safety monitoring. Even with Guided Support on, no one is watching for emergencies or crises; the involvement is not continuous and must never be relied on in an emergency.

Part of the product’s purpose is for that picture to be yours outside the app too: you can export a weekly report as a file and share it yourself with the person or organization you chose. Export happens only on your initiative: BetterYou does not transfer the report — or any other personal data — to any third party for sharing purposes, neither automatically nor in any other way, and no third party is registered to receive data from the system. The processing done by the subprocessors that operate the Service for us, and disclosures we are legally required to make, are detailed in Sections 07 and 11. Export details — in Section 06.

Echo is not a medical, diagnostic, or treatment service, does not provide mental health services, and is not a medical device. Its measurements are not medical measurements, and nothing in it is medical or mental-health advice — everything in the Service is for informational purposes only. Echo phrases things as invitations to notice (“we noticed that…”) — not findings and not diagnoses. The system cannot detect emergencies or acute distress, does not alert anyone to them, and is not built to respond to them — in those situations, contact emergency services and qualified professionals. Full details — in the Terms of Use.

03What we collect — and why

Sensitive data: some of this is health-related data, which data-protection law treats as especially sensitive. That is why we minimize it, encrypt it, restrict access to it, and weigh it in every design decision.

04What we do not collect and do not do

• No video recordings. The camera reads measurements from the live image in real time (rPPG) and nothing is kept.
• No voice storage and no voice-characteristics analysis. Voice sessions are transcribed; the recording is not retained and there is no acoustic analysis of any kind.
• No location collection. Neither precise nor approximate. We do not derive location from your IP address.
• No selling or renting of data. To anyone, ever.
• No transfer of data to third parties for sharing purposes. No third party is registered to receive data, and there is no automatic outbound flow — a report leaves only when you export it. The subprocessors that operate the Service for us — in Section 07.
• No ads and no sharing with advertisers.
• No model training on your content — unless you turned on the anonymous-contribution toggle.
• No human monitoring and no emergency detection. Guided Support adds human involvement for quality (Section 07), not monitoring — no one is watching for emergencies, and it must never be relied on in one.

Processing note: some data is held briefly in intermediate stores while it is being processed, and is deleted once processing completes.

05The basis for processing — consent, and what happens without it

Using the Service is voluntary, and no law requires you to give us data. The basis for processing is your consent, given when you join and through the choice toggles; security and integrity processing is part of operating the Service you asked for.

The consequence of not consenting, stated plainly: without consent to the basic processing, the Service cannot be used — there is no Echo without measurement and conversation. The anonymous-contribution toggle, by contrast, is not a condition: leaving it off takes nothing away from the Service. Exporting the weekly report is likewise an action only you initiate — and not using it changes nothing in the Service. Guided Support is the same: it is optional, and declining it — or turning it off later — takes nothing away from the Service.

06Your choices

• Sources, separately: the health-data connection to your own wearable is one you make yourself and can disconnect at any time; the camera and notifications each have their own opt-in. A source you have not connected or approved is not collected.
• Weekly report export: you can export the report from the app as a file. The report is a filtered summary, with no conversation transcripts, and the sharing itself is done by you — outside the app, with anyone you choose. What to share, when to share, and with whom is 100% your decision. We do not send it to anyone; the entire action is yours.
• The “anonymous data sharing” toggle: off by default. When on — data stripped of identifiers is used to improve the system and train our models.
• Messages from us: we use your contact details for service and account messages only; we will not send you marketing messages without your separate consent, which you can withdraw at any time.
• Guided Support: when you first set up Echo, and in any case before any Guided Support session, you are asked for a dedicated consent — a checkbox of its own, separate from every other agreement, which you can leave unchecked. Unlike anonymous data sharing, Guided Support involves your conversations as they are: they are not anonymized for the team’s review. Your choice is viewable and reversible at any time in the privacy screen, and turning it off stops the human involvement from that point on.
• Change anything, at any moment: all of these choices live in the privacy screen and can be changed immediately; a change applies from then on.

07Who can access your data

• You — all of your data is visible to you inside the app, always.
• Subprocessors — the services that operate Echo for us, contractually bound to confidentiality and to processing for our purposes only. By name, grouped by what they do:

Hosting and storage: Microsoft Azure

Our servers, databases, and file storage run there.

Language processing (AI): Azure OpenAI, Anthropic, and Google Gemini

They process content to run the guiding conversation, summaries, phrasing, and voice sessions. With these vendors, zero retention is in place: content sent for processing is not stored by the vendor.

Real-time voice infrastructure: LiveKit Cloud

Runs the live session rooms for voice conversations.

Wearable data: Google Health API

The connection through which measurements recorded by your own wearable device reach Echo. It is connected only by your own choice, through the permission you grant yourself, and disconnectable at any time in the app. Data received this way is used only to provide the Service to you: it is never used for advertising or marketing, and is never sold or shared with any third party for their own purposes.

Sign-in: Google and Apple sign-in

We verify your sign-in token directly against the provider — with Clerk as our user directory.

Support: Slack

Where our team reads and answers your in-app support messages, as described below.

Notifications: Google FCM and Apple APNs

Deliver push notifications to your device.

Error monitoring: Sentry

So we can find and fix faults.

Analytics: Amplitude

Product analytics. Analytics events are linked to your app identity — they are not anonymous — and the same events are also kept on our own servers.

AI operations: LangSmith

Manages the instructions (“prompts”) our AI system runs on and traces how the pipeline behaves. Traces are retained for 14 days and then automatically deleted.

Surveys: Typeform

From time to time the app may show a link to an optional usability and experience survey. Taking it is your choice. A random code lets your responses connect to each other over time, so we can see how the experience evolves — but the code is not linked to your identity or your account, and we do not ask for or receive identifying details in the survey. It runs on Typeform’s platform under Typeform’s own privacy terms.

• The BetterYou team — to run and support the Service, the team works with usage and system data: which screens were used, error reports, aggregate patterns. Access is role-based, kept to what operations and support require, and written to the audit log. The content of your conversations is not part of that and is not read by the team — the one exception is Guided Support, described below.
• Support messages — a separate channel, read by people: when you write to our in-app support, that message is meant for our team: team members read it and reply, and their replies come back to you as app notifications. Our support channel runs on Slack, a third-party service (listed above), where your support thread is held. To be precise: the commitment above is about your conversations with Echo. A support message is a different thing — you write it to us, in order for us to read it.
• Guided Support — members of our team — only if you turned Guided Support on, and only with your separate consent: members of our team, bound by confidentiality, may review your conversations (during or after a session) — as they are, not anonymized — guide how Echo responds, and compose parts of Echo’s responses, for better guidance quality and to learn how Echo’s processes should work. Every such access is written to the same tamper-evident audit log (Section 08), and what the team learns from these sessions is recorded without your identity. They are not clinicians and provide no care: they do not provide therapy, diagnosis, or medical advice through Echo; their involvement does not create a doctor-patient, therapist-patient, or any other professional relationship between you and them or between you and BetterYou, and it does not make Echo a healthcare service. Guided Support does not add safety monitoring. Even with Guided Support on, no one is watching for emergencies or crises; the involvement is not continuous and must never be relied on in an emergency.
• As required by law — if we are legally required, we will hand over the minimum required, and we will tell you unless we are barred from doing so.

Beyond this list — we do not transfer data to any third party on our own initiative. A weekly report you exported and shared went directly from you to whoever you chose, not through us; we are not a party to it and do not know who received it.

08Data security

Data is encrypted in transit and at rest; access is role-based and protected by multi-factor authentication; and every access — system, operational, and human — is written to a tamper-evident audit log, including every attempt to access conversation content and every access by the Guided Support team — so that access beyond what you have separately consented to would be detectable. A serious security incident will be reported to the competent supervisory authority and to affected users as the law requires. No system is completely immune: we commit to strong, reasonable safeguards, not to absolute immunity.

09How long we keep data — and how deletion works

• Default: your data is kept while your account is active. If an account is inactive for 24 months, we will contact you before deleting it.
• “Delete my data”: a button inside the app. It deletes the account and all the data — measurements, moments, names, map, and transcripts — irreversibly, within 30 days, including backups.
• The weekly report on our side: the report is generated on our servers and stored in your account like any other content you created — so “Delete my data” deletes it along with everything else. The export creates a file on your device that you share yourself; we do not host a copy of that exported file.
• What remains: records we are required to keep by law (to the extent such duties apply to us), and data you contributed anonymously — including survey responses linked only by a random code — which can no longer be linked to you and therefore cannot be retroactively deleted. This includes what we learn in Guided Support sessions about how Echo should work: it is recorded without your identity, contains no personal data of yours, and therefore cannot be deleted as personal data.
• What already left the app: a weekly report you exported and shared is with whoever received it — not with us. We cannot delete it, and deleting your account does not delete copies that already left. “Un-sharing” a file that has been sent is impossible.

10Your rights

Subject to applicable data-protection law, you have the right to access the personal data we hold about you; to correct data that is inaccurate, incomplete, or out of date; to delete as described above; to withdraw your consent — entirely or per toggle — at any time; and to receive a copy of your data in a usable format. Contact: team@betteryou.tech — we will respond within 30 days. Not satisfied with how we handled it? You have the right to complain to the data-protection authority with jurisdiction over you.

11Where your data is stored and processed

Your data is stored in Microsoft Azure’s Israel Central region: our databases and file storage run there. Processing (compute) runs in Microsoft Azure’s West Europe region, in the European Union — a region that provides an adequate level of protection — and some of the subprocessors listed in Section 07 process data in the United States under appropriate contractual safeguards. Where data moves between these locations, the transfer is made under appropriate safeguards, as the law requires.

12Minimum age

The Service is intended for people 18 and over and is not directed at minors. We do not knowingly collect data about minors; if we discover that we have, we will delete it.

13Changes to this policy

We will update this policy from time to time. A material change — especially one that expands collection or use — will be brought to your attention in the app in advance, and where appropriate we will ask for renewed consent. Previous versions will be kept and made available on request.