ECHOTALLY BY BRACKISH INC.
Privacy notice
What stays on your phone, and what is used for accounts and purchases.
Updated 18 October 2026 · Current Android app
Voice and counting stay local
Microphone permission is used for voice counting. Speech recognition processes microphone audio directly on your Android phone while voice counting is running in the foreground. EchoTally does not upload microphone audio or speech recordings to its activation service.
Counter names, counts, event history and saved trigger words are stored locally in the app. They are not uploaded to the activation service or backed up by your Google purchase account. Clearing app data, uninstalling or losing a phone can remove local records. A purchase restore restores paid counter capacity, not those records.
Google account information
Free counting needs no account. For paid purchases and recovery, Google sign-in supplies a stable Google account identifier and verified email address. EchoTally uses them to link your Android installation, associate paid access and credit, and restore that access on the same Android platform.
The sign-in service also keeps account-link flow information, such as the proposed account identity, confirmation state and timestamps. EchoTally requests basic identity for sign-in; it does not request access to Gmail, Google Drive or your contacts.
Activation, orders and receipts
The app uses a hashed Android device identifier and a generated installation credential to authenticate activation and recovery. The credential is kept on your phone and sent to the service over HTTPS; the service stores its hash. The raw Android identifier is not sent to the activation service.
The service stores installation and account links, signed licenses, purchased capacity, paid credit, order identifiers and status, payment references, payer notes, submitted receipt files and their metadata, approval or rejection details, timestamps and owner decision audit records. These support purchase review, licensing, recovery and duplicate-payment safeguards.
Submitted receipt files are private to owner review and are not published on this site. Uploading a receipt does not verify payment. Paid approval requires the owner to check received funds.
Cookies, security and providers
The account-link page uses a temporary, secure browser cookie and verification data to protect the sign-in flow. Rate limiting uses keyed hashes derived from a network address or request identifier. These information pages do not set account cookies or load analytics or Google sign-in scripts.
Cloudflare hosts the activation website and database. Google provides Google sign-in when you use it. These providers process requests under their own policies and may receive network information such as your IP address. Bank transfers take place in your chosen bank or payment app; EchoTally does not ask for your bank password or card credentials.
Ad-enabled Echo Tally builds use Google Mobile Ads and its User Messaging Platform. Free may show a banner on the normal counting screen while online; paid plans have no banner ads. Google may process IP addresses, device or account identifiers, app/ad interactions and diagnostic information for advertising, analytics and fraud prevention. Requests use encrypted connections. Echo Tally does not send microphone audio, counter contents or saved trigger words to the advertising service. Where required, a consent form appears before ad requests; use the app’s Ad privacy choices control to review your choices. Ad-loading failures do not prevent counting. Google privacy policy · Cloudflare privacy policy.
Retention and deletion requests
Account, license, order, payment, receipt, audit and sign-in flow records are retained by the service. A sign-in flow expires for use after 10 minutes; expiry does not automatically delete its stored record. No fixed deletion schedule or automated account-deletion feature is currently provided.
To ask about your information or request deletion, contact info@brackishinc.com. Support will need to verify the request and explain what can be removed and how it affects purchase recovery. This is a support request, not an automatic deletion action.
For a request, send only the details needed to identify your account or order. Never send passwords, sign-in codes, installation credentials or full bank account details.