Data Privacy
Effective 17 June 2026 · Last updated 17 June 2026
This Data Privacy notice summarises how Echo.Me handles personal data under the Nigeria Data Protection Act 2023 (NDPA). It accompanies, and should be read with, our full Privacy Policy.
1. Data controller
Echo.Me is the data controller for the personal data it processes. For any data-protection enquiry, contact [email protected].
2. What we process and why
| Account data | To create and secure your account — based on contract. |
|---|---|
| Simulation content | To run your journeys and generate guidance — based on contract. |
| AI processing | The simulation content needed for a request is sent to our AI providers (OpenAI / Anthropic) to generate guidance — based on contract. See Privacy Policy §5. |
| Shared stories | To publish content you choose to make public — based on consent. |
| Payment records | To process purchases and meet tax/accounting duties — contract and legal obligation. |
| Device & diagnostics | To keep the service secure and reliable — legitimate interests. |
3. Lawful basis
We rely on contract, consent, legitimate interests, and legal obligation, as set out in the Privacy Policy. Where we rely on consent, you may withdraw it at any time.
4. Your rights under the NDPA
You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent. Exercise these via the Data Request form. We respond within the timeframes required by law.
5. Retention
We keep personal data only as long as necessary for the purposes above or as required by law. On account deletion we anonymise identifying data and retain only what the law requires, in a non-identifying form. See the Data Request Policy.
6. Transfers & security
Where data is processed outside Nigeria, we apply appropriate safeguards. We use technical and organisational measures to protect your data, and will notify breaches as the NDPA requires.
7. Complaints
If you believe we have mishandled your data, contact us first at [email protected]. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Questions about this page? Email [email protected].