Privacy
by default.

Data minimisation, not collection

We collect only what's needed to run the product. We don't collect call logs, contact lists, social graphs, or anything from your device beyond what you explicitly share with us.

What we store

• Your email address (authentication)
• Profile information you enter (name, age, bio, tags)
• Photos you upload
• Conversations and messages
• Usage patterns (session length, features used — for wellbeing system)
• Approximate location when map is active
• Trust score signals (reply rate, reports)

What we never store

• Your exact GPS coordinates (always blurred server-side)
• Contact lists, social graphs, or other apps
• Message content for advertising purposes
• Device identifiers for cross-app tracking
• Any biometric data beyond the optional selfie verification hash

Visibility controls

You have granular control over who sees what. All visibility is opt-in — you start private and choose to expand.

Map visibility

• Off by default. You enable it when you want to.
• Location blur: 0–500m slider, you set it.
• Anonymous mode: ghost pin with no identity shown.
• Map presence auto-expires after 60 minutes idle.

Profile visibility

• Public: visible to anyone in your intent range
• Private: requires approval before anyone can message you
• ❤️ / 🔥 profiles are strictly isolated — 🔥 content never appears in ❤️ contexts

Your rights

Regardless of where you're located, SYNC gives you the following rights as a matter of policy:

• Access: Download all data we hold about you in the app (Settings → Export my data)
• Deletion: Delete your account and all associated data. 7-day cooling-off, then permanent.
• Rectification: Edit any field in your profile at any time
• Portability: Export data in machine-readable JSON format
• Objection: Opt out of any non-essential processing

Third parties

We use the following sub-processors to run the product. We have Data Processing Agreements with each:

• Supabase (database + auth + storage) — EU region
• Vercel (hosting + edge functions) — global CDN
• OpenRouter / Anthropic (AI Wingman suggestions)
• Stripe (payments) — PCI-DSS compliant
• AWS Rekognition (image moderation — no data retained)
• Sentry (error tracking — anonymised)

We don't sell your data. We don't share it with advertisers. SYNC has no ads.

Questions?

Email privacy@join-sync.info for any data-related request. We respond within 48 hours.