KeyEcho Privacy Policy
Last updated: 2026-09-08
KeyEcho listens for keystrokes only to play a sound and never records, stores or sends what you type; the only record we hold is the purchase row that lets us resend your license key.
Seller: WaveApp LLC
Checkout: Stripe Managed Payments · Sold through Link, LLC
Contact: hi@keyecho.app
Product domain: keyecho.app
1. What never happens
- What you type is never stored, sent or logged. The app watches which key went down or up, from a fixed list, so it can play that key's sound slice, and forgets it at once.
- No microphone. The app plays audio and never records any.
- No account, no password. The app sends no usage analytics and no crash reports, and the app itself is open source, so you can check.
- No ads, no sale of data.
2. Data we touch
2.1 On your computer
Data: your selected pack and volume, the sound packs you downloaded or imported, and your license key.
Used to: play sounds and unlock the packs you bought.
Kept: until you delete a pack or uninstall the app.
2.2 What the app fetches
Data: at every launch the app fetches a fixed update manifest from keyecho.app; installing an update asks you first. When Settings opens it fetches the pack catalog; a pack preview streams from cdn.keyecho.app; opening the License dialog checks your key against our server; buying and restoring poll our server. Each request carries your IP address to reach us, and a key check or a paid-pack download carries the key itself. Nothing about your typing is ever sent.
Used to: keep the app current and deliver the packs you bought.
Who: WaveApp LLC and its hosting and security providers in the United States; GitHub provides app downloads and update information.
Kept: our server's access log for 30 days, and nothing else.
2.3 Your purchase and license key
Data: the email address you bought with, the purchase identifier, the packs you bought, the purchase type and time, the Stripe checkout session identifier, and when the key was emailed. Your key encodes the purchase identifier and your email address in readable form; treat it like a password and share it with nobody.
Used to: issue the key, email it, show it on the success page, and resend it from the restore form. Anyone who types an address into the restore form triggers a resend to that address and learns nothing.
Who: Stripe takes the payment and holds the card details; we never see your card number. Resend delivers the email. A storage provider holds the paid packs.
Basis: performing the purchase contract.
Kept: while KeyEcho is on sale, so restore keeps working, and deleted when you ask; deleting the record also ends key restore. Encrypted backups keep a copy for up to three months (7 daily, 4 weekly and 3 monthly snapshots), used only for disaster recovery. Stripe keeps its own payment record under its terms.
2.4 Support email
Data: what you write to hi@keyecho.app, and your address.
Used to: answer you.
Kept: 12 months after the thread closes.
2.5 The website
keyecho.app uses PostHog for page, sound-test, preview, offer, checkout, purchase and JavaScript-error analytics. Events exclude email, amount, device details, user agent, IP address and location; page addresses keep only path and campaign tags. PostHog keeps an anonymous identifier in a first-party cookie. Session recording is off. Security access logs keep IP addresses and request paths for 30 days.
3. Processors
- Stripe — checkout, payment and refunds (United States).
- Resend — the license-key and restore emails (United States).
- PostHog — website analytics and error capture (United States).
- Hosting and security providers — delivery, storage and protection of site traffic and paid packs (United States).
- GitHub — the app downloads and the updater manifest (United States).
Nobody else receives data from KeyEcho. We do not sell data and we show no advertising. Data from the EU or the UK reaches the United States under the transfer safeguards each processor provides.
4. Your rights
If you are in the EU, the UK or another place with data-protection rights, you can ask us to show, correct, delete, restrict, export or stop using data about you. You can also complain to your local supervisory authority. Write to hi@keyecho.app from the address you bought with; we answer within one month.
5. Children
KeyEcho is not directed at children. The only personal data we hold is the email address of a buyer, and we delete it on request.
6. Changes
If a change would affect what data we touch, we update this page before it takes effect and say so in this list.
7. Contact
hi@keyecho.app — WaveApp LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA