MaoEcho Privacy Policy

Last updated: May 17, 2026

This policy describes how MaoEcho collects, stores, uses, shares, and deletes account and learning data for the Android app.

Data We Collect

• Account data: email address, username, Firebase user ID, account creation time, and authentication state needed to keep users signed in.
• Learning data: selected books, reading position, learning sessions, AI narration state, follow-up questions, AI answers, notes, favorites, voice preferences, and reading history.
• Feedback and AI content reports: feedback subject, message, optional contact information, and contextual metadata when a user reports AI-generated content.
• Operational data: authenticated analytics events, Cloud Functions request state needed to operate the service, and crash reports if monitoring is configured.
• Advertising data: Google Mobile Ads may process device identifiers including the Google Advertising ID to serve and measure rewarded ads.

How We Use Data

We use data to authenticate accounts, keep users signed in, save and restore reading progress, generate AI-assisted narration and follow-up answers, handle feedback and content correction, operate rewarded ads, monitor stability, and improve product quality.

Third-Party Services

MaoEcho may use Firebase Auth, Cloud Firestore, Firebase Cloud Functions, Qwen or DashScope-compatible AI services, Google Mobile Ads, and Sentry when crash monitoring is configured. These providers process data only as needed to operate app functionality. MaoEcho does not sell personal data.

Security

Passwords are handled by Firebase Auth and are not stored by MaoEcho in plaintext. Firebase Auth, Cloud Firestore, Cloud Functions, and Qwen/DashScope API calls use encrypted HTTPS/TLS transport. Firestore access is restricted by Firebase Authentication and Firestore security rules.

Account and Data Deletion

Users can delete their account in the app from Profile > Reading and legal settings > Account actions > Delete account. The in-app deletion flow deletes the Firebase Auth account, removes the primary user profile document, clears the local authenticated session, and clears account-scoped local caches from the device.

Users who cannot access the app, or who want confirmation that retained account-linked learning, feedback, report, or analytics records have also been removed, can request deletion through the public deletion page.

Contact

Privacy and deletion requests can be sent to support@gloryevolution.com. Include the registered email address so account ownership can be verified.