⚠️ Draft document
This is a draft privacy policy currently under legal review. It will be finalised before public launch. For a product-level overview of privacy controls, see our
Privacy Controls page. Contact
privacy@join-sync.info with questions.
1. Who we are
SYNC ("we", "us") is a gay dating application operated by [Legal Entity Name], registered at [Address TBD]. We are the data controller for personal data processed through the SYNC platform (join-sync.info).
Data Protection Officer contact: privacy@join-sync.info
2. What data we collect
Account data
- Email address
- Phone number (optional, for verification)
- Apple / Google account ID (if using SSO)
- Date of birth (for age verification)
Profile data
- Name, age, bio, tagline
- Profile photos and album photos
- Tags (interests, identity, lifestyle)
- Intent mode preferences
- Profile variant content (❤️ / 🔥)
Usage data
- Messages and conversations
- Profile views (by you and of you)
- Session duration and frequency
- Features used
- Wellbeing signals (energy depletion, detox events)
Technical data
- IP address (not stored beyond 30 days)
- Device type and OS (for crash reporting)
- Approximate location when map is active (blurred to your specified radius)
Payment data
- Stripe processes card details — we receive only a token and last 4 digits
- Subscription status and history
3. How we use your data
- To provide and improve the SYNC platform
- To match you with users who share your intent and tags
- To generate AI Wingman suggestions (processed by Anthropic/OpenRouter)
- To compute your trust score
- To operate the wellbeing system
- To process payments
- To detect and prevent fraud, abuse, and policy violations
- To respond to legal requests
We do not use your data for advertising. SYNC has no ad model. We do not sell data to third parties.
4. Legal basis for processing (GDPR)
- Contract: Core service delivery (account, messaging, matching)
- Legitimate interest: Safety, fraud prevention, product improvement
- Consent: Location data, marketing communications, analytics cookies
- Legal obligation: CSAM detection and reporting, law enforcement requests
5. Special category data
Sexual orientation is special category data under GDPR. By creating a profile on SYNC — a platform for gay men — you implicitly disclose information about your sexual orientation. We process this data only for the purpose of providing the service. We apply additional safeguards: encrypted at rest, restricted staff access, not shared with third parties beyond sub-processors who are contractually prohibited from using it.
6. Data sharing
We share data only with sub-processors necessary to run the service. All sub-processors have signed Data Processing Agreements and are contractually prohibited from using your data for their own purposes.
Sub-processors: Supabase (database/auth/storage), Vercel (hosting), Anthropic/OpenRouter (AI), Stripe (payments), AWS (image moderation), Sentry (error tracking), PostHog (analytics — anonymised), Twilio (SMS verification).
7. Data retention
- Active account data: retained while your account exists
- After account deletion: 7-day grace period, then permanent deletion within 30 days
- Messages: anonymised on account deletion, not deleted (preserves recipient's history)
- IP logs: 30 days
- Payment records: 7 years (tax/legal requirement)
- Safety/moderation records: variable (may be retained longer for legal defence)
8. Your rights
Under GDPR, CCPA, and Thailand PDPA, you have the right to:
- Access your data (Settings → Export my data, or email us)
- Correct inaccurate data (edit your profile directly)
- Delete your data (Settings → Delete account)
- Port your data (JSON export available)
- Restrict or object to processing
- Withdraw consent (for consent-based processing)
To exercise any right: privacy@join-sync.info. We respond within 30 days.
9. International transfers
Data may be transferred to countries outside the EEA/UK for processing by our sub-processors. We rely on Standard Contractual Clauses and adequacy decisions where applicable.
10. Cookies
The web app uses essential cookies for authentication. Optional analytics cookies require consent. You can manage cookie preferences in the banner on first visit or in Settings.
11. Changes
We'll notify you by email of material changes to this policy. Continued use after the effective date constitutes acceptance.
12. Contact
Privacy queries: privacy@join-sync.info
If you're in the EU and believe we're processing your data unlawfully, you can lodge a complaint with your local supervisory authority.