Echoly — Privacy Policy

Last updated: 2026-05-08

TL;DR. Echoly does not collect, store, or sell any personal data. Your Kyma API key stays on your own device. Audio you choose to translate is sent directly to AI providers (Kyma and, for Realtime tier, OpenAI) for the sole purpose of producing the translation, then discarded. We have no servers, no analytics, no tracking.

What Echoly is

Echoly is a Chrome extension that captures audio from a YouTube video you are watching and produces a live translated voice-over in your chosen language. It runs entirely in your browser. There is no Echoly-operated backend.

What data is processed

Your Kyma API key. Stored locally in chrome.storage.local with TRUSTED_CONTEXTS access level so that page scripts on youtube.com cannot read it. The key never leaves your device except as the Authorization: Bearer header on requests you initiate to api.kymaapi.com (and, for Realtime tier, a short-lived ephemeral token to api.openai.com).
YouTube audio. When you press Start, Echoly captures the audio of the video element on the active tab via the standard HTMLMediaElement.captureStream() API. Audio is streamed to your selected provider (see "Third-party processors" below) for transcription, translation, and synthesis. Echoly itself stores no audio at any time.
Overlay layout. Position and size of the in-page panel are stored in your browser's localStorage for the youtube.com origin. Cosmetic only. No personal information.
Settings. Tier, language, voice, and volume preferences are stored in chrome.storage.local. They never leave your device.

What data is NOT collected

No telemetry, analytics, crash reports, or usage statistics.
No browsing history, video titles, URLs, or YouTube account information.
No personal identifiers, IP logging, cookies, or fingerprints.
No advertising, ad targeting, or third-party trackers.

Third-party processors

When you press Start, audio you select to translate is sent to one of the following providers under your own Kyma account:

Kyma API (api.kymaapi.com) — gateway. Forwards your audio to the underlying providers below and bills your Kyma balance. See Kyma's privacy policy.
Standard tier uses, via Kyma: Groq (Whisper transcription), Google (Gemini translation), and MiniMax (text-to-speech).
Realtime tier uses, via Kyma: OpenAI Realtime (one combined translate-and-speak model). After Kyma mints an ephemeral token, your browser opens a peer-to-peer WebRTC connection directly with api.openai.com for the duration of the session.

Each provider processes your audio per its own privacy terms. Echoly is not a party to those terms — your Kyma account and your direct relationship with each provider are.

Data retention

Echoly retains nothing on its side. Provider-side retention follows each provider's policy; for transcription and TTS the audio is processed in-memory and not retained. Sessions automatically end after 60 minutes; closing the tab also ends the session.

Permissions

activeTab, scripting — to inject the overlay panel into the YouTube tab when you press Start.
storage — to remember your Kyma key and preferences across sessions.
Host permissions for youtube.com, api.kymaapi.com, api.openai.com — to capture YouTube audio and reach the AI providers listed above.

Your rights and choices

Stop a session at any time with the Stop button or by closing the tab.
Remove your Kyma key from the popup at any time, or uninstall the extension to wipe all locally stored data.
Use Echoly without an account; it has none.

Children

Echoly is not directed at children under 13. The extension processes no personal information that would identify a user of any age.

Changes to this policy

If we materially change how Echoly handles data we will update this page and bump the date at the top. Continued use after a change constitutes acceptance.

Contact

Questions or requests: sonxpiaz@gmail.com