Privacy Policy

Last updated: 3 November 2026

Questions or account deletion: bojanpejic97@gmail.com

Who is responsible

Echoes of History is operated by Bojan Pejic. For privacy questions, requests about your personal data, or account deletion, contact bojanpejic97@gmail.com. This policy covers the Echoes of History mobile app and its supporting online services.

Account and profile information

When you sign in with Google, the app sends your email address and display name to our server to create or identify your account. We also process your internal account ID, authentication tokens, preferences, and a profile image if you choose to upload one. Where email/password registration is available, we process your email, name, a password hash and verification or password-reset information; we do not need your Google password.

Listening and learning activity

We process your library selections, listening history, playback positions, completed chapters, quiz results, ratings, learning goals, streaks, badges and preferences to provide the audiobook and learning features, synchronize progress, and display your personal statistics. Some preferences, downloaded books and cached activity are stored on your device for offline use.

Device, network and security information

The app derives a device identifier from available platform information and sends it to our server when requesting keys for protected offline content. We use this for content protection, not advertising. Our server and content-delivery providers can process IP addresses, request URLs, timestamps, user-agent information, response codes and technical errors to deliver files, maintain the service and prevent misuse. Device-local storage also holds authentication or encryption information, settings and downloaded content.

Purchases and subscriptions

If you purchase through Google Play, Google handles the payment. The app sends the product ID, purchase token and application identifier to our backend to verify the purchase and enable access. We store account-linked subscription status, plan, dates and subscription history. We do not receive your full payment-card details. Google processes payment and transaction information under its own privacy policy. Deleting your app account does not itself cancel a Google Play subscription; manage or cancel it in Google Play.

Optional features and permissions

Photo or file access is used when you choose a profile picture or a supported file. Notification permission is used for reminders; reminder settings are stored locally and may be synchronized with your account. Notifications can be disabled in the app or Android settings. Background playback and downloads support listening with the screen off. If you use a sharing feature, we process the selected chapter, sharing link, any message and any recipient email you enter to provide that feature. People with the link may see the shared content and your displayed name. Do not include private information in a sharing message.

Why we use information

We use information to provide accounts, deliver and protect content, remember progress, personalize app settings, verify subscriptions, respond to support requests and keep the service secure. Where applicable, processing is necessary to deliver the service you request, meet legal obligations, or pursue legitimate interests such as security and reliability. Optional permissions and features remain under your control.

Service providers and disclosures

Information is processed by our hosting and database infrastructure, Google for sign-in and Google Play purchases, Cloudflare for media storage and delivery, and email delivery providers when an account, support or sharing email is sent. These providers receive the information needed for the relevant function. Google’s privacy policy is available at https://policies.google.com/privacy and Cloudflare’s at https://www.cloudflare.com/privacypolicy/. Information may also be disclosed when required by law or necessary to protect users and the service. The current app does not include a third-party advertising SDK or Firebase Analytics SDK. We do not sell personal information or use it for targeted advertising.

Storage and security

The app connects to the production API over HTTPS. Password-based accounts use password hashes; protected offline content uses encryption and device-local key storage. Access controls and security measures help protect information, but no system can guarantee absolute security. Hosting, Google and Cloudflare infrastructure may process data outside your country, subject to their applicable data-protection arrangements.

Retention and deletion

Account information and associated listening, learning and subscription records are kept while needed to operate your account and provide its features. You can request deletion through the account-deletion option in the app or by emailing bojanpejic97@gmail.com from the address linked to your account with the subject ‘Echoes of History account deletion’. We may need to verify account ownership before deleting data. Account deletion removes the active account and its associated service records; limited information may be retained where necessary for legal obligations, dispute resolution or security. Technical logs are retained according to operational log rotation, rather than as permanent account records. Any backup copies expire through their backup lifecycle. Google may retain its own transaction records under its policies. Local downloads and settings can remain on your device after logout; remove downloads, clear app storage or uninstall the app to remove remaining local data.

Your choices and rights

You can change your profile and preferences, disable notifications, remove downloaded content, and request access, correction or deletion of your personal information by contacting us. Depending on your location, you may also have rights to restrict or object to processing, request a portable copy, withdraw consent for optional processing, or complain to your local data-protection authority. Permission withdrawal does not undo processing already performed. We do not need access to your contact list, microphone or precise location for the audiobook service.

Children and policy changes

If you believe a child has supplied personal information without appropriate authorization, contact us so we can investigate and address it. We may update this policy when the service or its data practices change. The updated policy and revision date will be published here; material changes will be communicated where required.

Contact and account-deletion requests

Developer: Bojan Pejic. App: Echoes of History. Email: bojanpejic97@gmail.com. Public policy: https://echo.velorus.ba/static/privacy.html. To request account deletion outside the app, email the contact address above using the instructions in ‘Retention and deletion’. Never send your password or payment-card details.