Welcome to Ekko. We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal information. This Privacy Policy applies to the Ekko mobile and desktop applications and all related services (collectively, the "Service"). By using Ekko, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Service. 1. Information We Collect 1.1 Account Information When you register for a Ekko account, we collect: • Phone number or email address (used for account verification) • Display name and profile photo (optional) • Username • Date of birth (where required for age verification) 1.2 Messages and Content Ekko is designed with privacy as a priority. Here is how we handle your communications: • End-to-End Encrypted Messages: Private messages, voice messages, and calls between users are end-to-end encrypted. This means only you and the recipient(s) can read or hear them. Ekko cannot access this content. • Media Files: Images, videos, documents, and other files you send through the Service are transmitted securely. Media stored on our servers (e.g., in cloud storage or group chats) is encrypted at rest. • Non-Encrypted Communications: Certain features — such as public channels, bots, or unencrypted cloud backups — may not be end-to-end encrypted. We will clearly indicate when a conversation is not encrypted. 1.3 Usage and Device Information We automatically collect certain technical information when you use the Service: • Device type, operating system, and version • App version • IP address • Crash reports and diagnostic logs • Feature usage patterns (e.g., which features you use most) 1.4 Calls Voice and video calls are end-to-end encrypted. We do not record or store the content of your calls. We may collect metadata such as call duration and frequency to improve call quality. 1.5 Location Data Ekko collects precise location data when you choose to use the Share Location feature within a chat room. Specifically: • What we collect: Your exact GPS coordinates (latitude and longitude) at the time you share your location. • When we collect it: Only when you actively tap "Share Location" in a conversation. We do not collect location data in the background or without your explicit action. • Who can see it: Your location is shared only with the participants of the chat room or conversation in which you share it. It is transmitted using the same encryption protections as other messages. • How long we store it: Shared location messages are subject to the same retention rules as other messages — stored on your device and, where applicable, on our servers for cloud sync. You may delete a shared location message at any time. • Device permission: This feature requires you to grant Ekko location permission on your device. You can revoke this permission at any time via your device settings (Settings → Apps → Ekko → Permissions → Location). Revoking permission will disable the Share Location feature but will not affect other Ekko functionality. We do not use your location data for advertising, profiling, or any purpose beyond delivering the Share Location feature to recipients you choose. 2. How We Use Your Information We use the information we collect to: • Provide, operate, and maintain the Ekko Service • Verify your identity and prevent unauthorized access • Enable communication between users (messages, file sharing, calls) • Improve app performance, reliability, and security • Detect and prevent spam, abuse, and violations of our Terms of Service • Send you important service-related notifications (e.g., security alerts, policy updates) • Comply with legal obligations We do not use your private message content for advertising purposes. 3. How We Share Your Information We do not sell your personal data. We may share information only in the following circumstances: 3.1 With Other Users Information you make public — such as your username, profile photo, and online status — is visible to other Ekko users. 3.2 With Service Providers We work with trusted third-party service providers who assist us in operating the Service (e.g., cloud infrastructure, analytics, fraud prevention). These providers are contractually bound to process data only on our behalf and in accordance with this policy. 3.3 For Legal Compliance We may disclose information if required by law, court order, or governmental authority. We will notify you of such requests where legally permitted. 3.4 Business Transfers In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy. 4. Data Retention We retain your personal data for as long as your account is active or as necessary to provide the Service. Specifically: • Account information is retained until you delete your account. • Messages: End-to-end encrypted messages are stored on your device. Server-side copies (for cloud sync or multi-device access) are deleted in accordance with your settings or upon account deletion. • Logs and diagnostics are retained for up to 90 days. You may delete your account at any time via Settings → Privacy & Security → Delete Account. Upon deletion, your personal data is removed from our systems within 30 days, except where retention is required by law. 5. Your Rights and Choices Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your account and associated data. • Portability: Request an export of your data in a machine-readable format. • Objection / Restriction: Object to or request restriction of certain processing activities. • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact us at privacy@Ekko.app. 6. Privacy Settings and Controls Ekko gives you meaningful control over your privacy:

Setting	Options
Only allow adding me by QR Code or ID	On / Off
Blocked Users	Manage blocked list

7. Children's Privacy Ekko is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children below these ages. If we become aware that a child has provided us with personal data without parental consent, we will promptly delete it. If you believe a child has created an account, please contact us at privacy@Ekko.app. 8. Security We implement industry-standard technical and organizational measures to protect your data, including: • End-to-end encryption for private communications • Encryption at rest and in transit for stored data • Two-factor authentication (2FA) support • Regular security audits and penetration testing • Access controls limiting employee access to personal data No method of transmission or storage is 100% secure. We encourage you to use a strong passcode, enable 2FA, and keep your app up to date. 9. International Data Transfers Ekko operates globally. Your information may be processed and stored in countries other than your own. Where we transfer personal data across borders, we implement appropriate safeguards (e.g., Standard Contractual Clauses) to ensure your data receives adequate protection consistent with this policy and applicable law. 10. Third-Party Links and Integrations Ekko may contain links to third-party websites or support integrations with third-party bots and services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you connect with. 11. Changes to This Policy We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the app or by email at least 30 days before the changes take effect. Continued use of Ekko after the effective date of any changes constitutes your acceptance of the updated policy. 12. Contact Us If you have questions, concerns, or requests related to this Privacy Policy, please contact us: Email: contact@loftysofty.com Mailing Address: Unit 82A, Bury St. Edmunds, England, IP28 7DE

Stay connected, wherever you are.