Privacy Policy
Effective October 24, 2026
The short version
- We use your information to run Echo for you: to understand you, remember what you're working toward, and help you get there.
- We never sell your information, and we don't show ads or use your data to target them.
- Your conversations help train Echo's AI models so it gets better at helping you, and you can opt out at any time.
- Data from your Google account is used only to provide the features you turned on, and follows Google's Limited Use rules.
- You can see, export, and delete your data, and disconnect any service, at any time.
- 1. Who we are
- 2. What we collect
- 3. How we use it
- 4. AI models and training
- 5. Google user data
- 6. How we share it
- 7. Text messaging
- 8. How long we keep it
- 9. Your choices and rights
- 10. Security
- 11. Children
- 12. Where data is processed
- 13. Changes
- 14. Contact us
1. Who we are
Fulfilled ("Fulfilled," "we," "us") builds Echo, an AI that helps people pursue their dreams and goals. This policy explains how we handle information when you use Echo by text message, use the web app at app.fulfilled.so, visit fulfilled.so, or otherwise use our services (together, the "Services"). Our Terms of Service also apply.
2. What we collect
Information you give us
- Account information: your phone number, and your name or email if you share them.
- Your conversations with Echo: the messages you send and the photos, voice notes, videos, documents, and links you attach, along with Echo's replies and reactions.
- Your plans: the dreams, milestones, notes, to-dos, and calendar events you create, or ask Echo to create, and their progress.
- Settings and preferences: such as your time zone, language, and how you like Echo to reply.
- Messages to us: when you contact support or send feedback.
You decide what to tell Echo. Some of it may be sensitive, such as your health, relationships, finances, or beliefs. We use it only to provide the Services to you, as described in this policy.
Information from services you connect
If you connect another service, such as Google Calendar or Google Tasks, we receive the information you authorize. Section 5 describes exactly what we access from Google and how we use it.
Information collected automatically
- Message metadata: such as when messages were sent, delivered, and read, and which message you replied to.
- Technical information: such as IP address, browser and device type, and logs of requests to our servers, which we use to run, secure, and fix the Services.
- Cookies: the web app uses a cookie to keep you signed in, and stores display preferences (such as theme) in your browser. We don't use advertising cookies or third-party trackers, and fulfilled.so has no analytics.
3. How we use it
- To provide Echo: to understand your messages, remember your context and goals across conversations, plan with you, keep your calendar and to-dos in sync, and carry out the tasks you ask for.
- To keep things working: to diagnose problems, measure reliability, and improve the quality of Echo's help. Authorized members of our team may review conversations and Echo's actions when you ask for help, to investigate a problem or a safety or abuse report, or to check quality. Access is limited to people who need it.
- To communicate with you: to send sign-in codes, service notices, and replies to your requests.
- To keep the Services safe: to prevent fraud, abuse, and security incidents, and to enforce our Terms.
- To meet legal obligations.
We may create de-identified or aggregated statistics (for example, how many people completed a milestone this month) that can't reasonably be linked back to you, and use them to understand and improve the Services. We won't try to re-identify them.
4. AI models and training
Echo uses large language models to understand and respond to you. To answer a message, we send the relevant content, such as your message, recent conversation, and the parts of your plans that matter, to the model provider that powers that reply (see Section 6). We use these providers' paid business services, under terms that do not allow them to use your content to train their own models.
How your data helps Echo improve
By default, we use your conversations with Echo, your plans, and your feedback to improve Echo, including to train and evaluate the AI models that power it. This is how Echo learns what good help looks like. Before using content for training, we take steps to remove information that directly identifies you, such as your name, phone number, and email address. These models are used to provide Fulfilled's services, and we don't sell or license your content to others for their models.
You can opt out at any time by telling Echo or emailing hello@fulfilled.so. After you opt out, we won't use your conversations or plans for training from then on, including content from before you opted out. Models already trained can't be un-trained. Opting out doesn't change how Echo works for you.
Data we receive from Google is never used for training (see Section 5).
5. Google user data
If you connect your Google account, you choose which access to grant on Google's consent screen. Echo requests:
| Access | What we use it for |
|---|---|
| Your email address and Google account ID | To identify which Google account is connected. |
| Your list of calendars (read-only) | To let you choose which calendars Echo shows and plans around. |
| Events on your calendars | To show your schedule alongside your plans, and to create, change, or remove events when you or Echo, at your request, schedule something. |
| A calendar created by Fulfilled | To create and manage a dedicated Fulfilled calendar for the time you set aside for your goals. |
| Your Google Tasks | To keep your Google Tasks and your Fulfilled to-dos in sync. |
Fulfilled's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing features you see in Echo and the web app.
- We don't transfer it to others except as needed to provide those features (for example, to the AI model provider that answers your question about your schedule), to comply with law, or as part of a merger or acquisition with notice to you.
- We never use it for advertising, never sell it, and never use it to train or improve generalized AI or machine learning models.
- No person on our team reads it unless you give us permission (for example, when you ask for help), it's needed for security or to investigate abuse, it's required by law, or it's aggregated and anonymized for internal operations.
You can disconnect Google at any time in the web app's settings or at myaccount.google.com/permissions. Echo then stops accessing your Google account. To remove data we already copied from Google, delete it in the app, delete your account, or contact us.
6. How we share it
We don't sell your information, share it for targeted advertising, or provide it to data brokers. We share it only in these cases:
Service providers
These companies process information on our behalf, under contracts that limit their use of it to providing their service to us:
| Purpose | Providers |
|---|---|
| Cloud hosting, databases, and file storage | Amazon Web Services, Cloudflare, Railway |
| Delivering text messages | Sendblue, and the mobile carriers and messaging networks (such as Apple iMessage) that carry them |
| AI models that power Echo's replies | Google (Gemini), OpenAI |
| Web search and reading web pages, when Echo looks something up for you | Brave Search, Tavily (these receive the search query or page address, not your account information) |
People and services you ask Echo to work with
When you ask Echo to do something that involves someone else, such as booking, contacting, or coordinating with a person or business, Echo shares the information needed to do it.
Legal, safety, and business transfers
We may disclose information if we believe in good faith that it's required by law or legal process, or needed to protect someone's safety, prevent fraud or abuse, or protect the rights of Fulfilled or others. If Fulfilled is involved in a merger, acquisition, or sale of assets, your information may transfer as part of it, and it will remain subject to this policy's promises unless you agree otherwise.
7. Text messaging
We use your phone number to talk with you as Echo, to send sign-in codes, and to send service messages. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, except the service providers that deliver our messages. Reply STOP at any time to stop messages, or HELP for help. Message and data rates may apply.
8. How long we keep it
Echo's value comes from knowing your story over time, so we keep your conversations, plans, and settings for as long as your account is active, unless you delete them sooner.
When you delete your account, we delete your information from our active systems within 30 days. Copies in our backups are removed as those backups expire, within a further 7 days. We may keep a limited record where the law requires it or to resolve disputes, prevent abuse, or honor your choices (for example, a record that you opted out of text messages).
9. Your choices and rights
- See and export: you can ask for a copy of your information in a portable format.
- Correct: you can edit your plans and settings in the app, tell Echo when it has something wrong, or ask us to correct your information.
- Delete: you can delete individual items in the app, or ask us to delete your account and its data.
- Disconnect: you can disconnect any connected service at any time.
- Stop messages: reply STOP to stop text messages.
Depending on where you live (for example, California, the European Economic Area, or the United Kingdom), you may have additional rights, such as to know what we collect, to restrict or object to certain uses, and to complain to your local data protection authority. To use any of these rights, contact us. We'll verify your request, usually by confirming your phone number, and respond within the time the law requires. We won't treat you differently for using your rights.
10. Security
We protect your information with encryption in transit and at rest, encrypted storage of the access tokens for services you connect, restricted access for our team, and monitoring. No system is perfectly secure, and we can't guarantee that your information will never be accessed without authorization. If a breach affects you, we'll notify you as the law requires.
AI can make mistakes. Content Echo reads, such as a web page or an email, can also contain instructions written to mislead it. We build safeguards against this, but you should review what Echo does for you, especially anything that can't be undone.
11. Children
The Services are for people 18 and older. We don't knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we'll delete it.
12. Where data is processed
We're based in the United States, and we and our service providers process information in the United States and other countries. Where the law requires it, we use appropriate safeguards for international transfers.
13. Changes
We'll update this policy as Echo changes. We'll post the new version here and update the date at the top. If a change is material, we'll tell you in advance, by text message or in the app. We will never apply a less protective change to data we already collected without your consent.
14. Contact us
Questions or requests about your privacy: hello@fulfilled.so.