Messages that leave no trace.
A device you control completely.
Messages are encrypted on your device before they leave it. Our servers process ciphertext they cannot decode. Signal Protocol. True E2EE.
One tap. Four seconds. Permanently and irrecoverably.
Separate contacts into independent encrypted boxes. Each box is its own communication channel — siloed, private, no cross-contamination.
Set conversations to auto-delete after 24 hours, 7 days, or 30 days. Per-chat overrides. Messages destroy themselves on both ends.
No phone number. No email. No name. You activate with a one-time code from your administrator. There is no account to trace you back to.
Each access code binds permanently to one physical device via hardware fingerprint. No cloning. No sharing. One code, one machine, always.
Currently available on Android. iOS coming soon. You'll need an administrator-issued access code to activate.
Echo is built on Swiss infrastructure and governed by Swiss law — one of the strongest privacy jurisdictions in the world.
Echo's entire server infrastructure is hosted exclusively in Switzerland. Switzerland operates outside EU and US jurisdiction, is not a member of the Five Eyes, Nine Eyes, or Fourteen Eyes intelligence-sharing alliances, and enforces some of the most stringent data protection laws in the world under the Swiss Federal Act on Data Protection (nDSG). No foreign government authority can compel Echo to hand over user data through standard international channels.
Echo servers are deployed on dedicated hardware within Swiss data centres operating under ISO 27001 certification. All data at rest is encrypted using AES-256. All data in transit is protected by TLS 1.3 with forward secrecy. Our infrastructure uses zero-knowledge relay architecture — messages pass through our servers in encrypted form that we cannot decrypt under any circumstance, including legal requests.
Message encryption is handled entirely on the user's device using the Signal Protocol. Public keys are exchanged directly between devices. Our servers never hold private keys, never participate in the key exchange, and have no mechanism to decrypt message content.
Upon activation, the application immediately terminates all active connections, purges all local message stores, destroys local encryption keys, and sends a signed destruction command to our servers. Server-side, all records associated with the device are permanently deleted within four seconds. No backup exists. No recovery is possible.
Echo does not collect personal data. We do not ask for, store, or process your name, email address, phone number, date of birth, or any other personal identifier. Message content is encrypted on your device before transmission. Our servers relay encrypted payloads we cannot read, decipher, or access under any circumstance.
Encrypted messages in transit are stored on our servers only until successfully delivered. Following delivery, they are purged. If a device is offline, messages are held in encrypted form for up to 30 days, then permanently deleted.
This website does not use cookies, tracking scripts, or any form of behavioural analytics. No data is collected during your visit to this page.
This Privacy Policy is governed by Swiss law. Any disputes shall be subject to the exclusive jurisdiction of the courts of Zurich, Switzerland.
Access to Echo requires a one-time access code issued by an authorised administrator. The service is not publicly available. You must be at least 18 years of age to use Echo. Access codes are personal, non-transferable, and bound to a single physical device upon activation.
You may use Echo solely for lawful private communications. You agree not to use Echo to conduct or facilitate any illegal activity, harass or harm any individual, distribute malware, or attempt to reverse-engineer or tamper with the Echo application or its infrastructure.
Echo Technologies reserves the right to terminate or suspend access to any device at any time for violation of these terms or suspected illegal activity. Termination results in permanent destruction of all associated data. You may terminate your own access at any time by activating the killswitch.
These Terms are governed exclusively by Swiss substantive law. Any dispute shall be submitted to the exclusive jurisdiction of the courts of Zurich, Switzerland.