Last updated: October 2026
ThoughtEcho adheres to the design philosophy of Local-first and Privacy Transparency. Our core mission is to provide you with a clean and secure space for capturing inspirations.
Legal Role Disclaimer: ThoughtEcho is purely a local software tool. The developer has no technical ability to access, review, or control your data. Therefore, under applicable laws, we act neither as a "Data Controller" nor as a "Data Processor" of your data. You assume full responsibility for all data generated, stored, and transmitted through this software.
All your data assets (notes, images, audio, etc.) are stored locally on your device by default:
To provide full functionality, the app may request the following permissions. Data accessed via these permissions is processed locally and never uploaded to our servers:
The app interacts with the following third-party APIs via encrypted connections only when you explicitly trigger specific features. Please note: Whenever your device makes a request to a third party, inherent to internet protocols, the third-party service will inevitably receive your public IP address and device User-Agent.
This app acts solely as a client tool. When using AI features, selected note contexts are sent directly to the AI provider or custom endpoint you have personally configured and authorized (such as OpenAI, DeepSeek, or any other service of your choice). Since the provider is chosen by you, we strongly recommend reviewing the privacy policy of your chosen provider before use.
Additionally, the app supports local LLM services like Ollama / LMStudio. When using these local services, all data processing is done entirely on your device with no external network transmission.
Data Usage Disclaimer: ThoughtEcho is not responsible for the data processing practices of your chosen AI provider, nor the accuracy, completeness, or legality of AI-generated content. Typically, commercial API providers (unlike web interfaces) do not use your API data for model training, but please ensure you verify this with your chosen provider's latest policy.
The "Daily Quote" and similar features fetch random sentences from third-party services (such as Hitokoto, etc.). This process only involves fetching public content and does not send any personal data.
Content Disclaimer: Daily inspirations are provided by third-party APIs. ThoughtEcho is not responsible for the nature, viewpoints, or accuracy of such content.
The app supports end-to-end peer-to-peer sync within a local network. Data does not leave your private local network.
The app supports cross-device multi-way synchronization via the standard WebDAV protocol connecting to user-chosen cloud storage (such as Nextcloud, Nutstore, InfiniCLOUD, or self-hosted NAS). Architecture & Privacy Principles: ThoughtEcho acts purely as a local client communicating directly with your configured server over encrypted HTTPS. We do not provide, operate, or relay any cloud synchronization servers. Your WebDAV username and app password are encrypted and stored solely on your local device. Synced notes and attachments reside entirely in your personal storage; the developer has zero technical access to inspect or decrypt your cloud files.
The app integrates Sentry SDK to capture crash stack traces, diagnose freezes and compatibility bugs, and trace performance metrics (page load times, responsiveness). Respecting your privacy, this feature is disabled by default (opt-in). Data Scope & Redaction: Collected data includes crash stack traces, error types, OS version, device model, a randomly generated installation identifier (not linked to hardware info), and performance metrics (page load durations, sanitized database query types, network domains and paths, plus CPU profiling on iOS). Prior to transmission, SQL queries are locally stripped of user text and parameters, URL query parameters are stripped, and screenshots/screen recording are strictly disabled. It never collects note contents, rich-text Delta JSON, media attachments, or personal identity details; the diagnostics service does not store your IP address. You can toggle it at any time in "Settings â Feedback & Contact".
To understand feature popularity and prioritize future open-source development, the app integrates Aptabase, a privacy-focused open-source lightweight analytics service. This feature is disabled by default (strict opt-in). Only when explicitly enabled will it transmit counts of anonymous feature clicks and page views, OS platform and version, language/locale, app version, temporary session ID (cleared on app exit), and coarse country/region inferred by the server from transport IP (IP is not stored). Privacy Protections: Uses no cookies, performs no cross-app tracking, uses no device fingerprinting, and creates no user profiling. It never collects note contents, search terms, personal identity details, or sensitive data. You can disable it at any time in "Settings â Feedback & Contact".
ThoughtEcho is not intended for children under 14 years of age. We do not knowingly collect any personal information from children. Because the app operates entirely locally, we cannot and do not verify user ages. If a child has entered sensitive information into the app without parental consent, parents/guardians can permanently delete all related local data by uninstalling the app.
[IMPORTANT] ThoughtEcho is a completely free, open-source, purely local client software tool. Your use of this software signifies your full understanding and acceptance of all disclaimers and limitation of liability terms herein.
If you have any questions regarding privacy, please contact us via:
Email: [email protected]
Repository: GitHub Repository