Privacy Policy
What we collect
- Email address — only when you create an account.
- User content you create in the app: notes, workflows, entity records, chat messages, calendar events.
- Authentication identifiers — a tenant ID and a user ID issued by our authentication service. We do not collect or use Apple's IDFA or device advertising identifiers.
- Diagnostic data — crash reports and performance metrics, anonymized, used to improve stability.
What we do not collect
- Location data.
- Health data.
- Browsing history outside the app.
- Third-party advertising identifiers.
- Contact list or address book.
Where data is stored
Personal data such as your notes, workflow drafts, and OAuth tokens for connected accounts is stored on your device and in your iCloud private database when iCloud is enabled. Multi-tenant data such as your entity records, CRM, and synced mail is stored on our self-hosted backend infrastructure that we operate ourselves; we do not use AWS, Azure, Google Cloud, or any third-party cloud provider for this storage.
Third-party services
If you connect Gmail, Outlook, Google Calendar, or Google Photos via OAuth, those services receive only the tokens you explicitly grant during their consent flow. We never see your account passwords. You can disconnect any connected service at any time in the app's Settings.
Sharing and sale of data
We do not sell your data. We do not share your data with advertisers, data brokers, or third parties for marketing purposes. Data leaves our infrastructure only when you explicitly request it (for example, when sending an email through your connected mail account).
Data retention and deletion
We retain your data for as long as your account is active. To request deletion of your account and all associated data, email support@synccy.com. We will process the deletion request within 30 days.
Children
Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.
Changes to this policy
If we materially change this policy, we will update the "Last updated" date above and, where required by law, notify you in the app.
Waitlist data on this website
When you join the waitlist on platform.synccy.com, we collect:
- Your email address.
- Submission timestamp.
- Hashed IP address (sha256 with a server-side salt, never plain IP) for GDPR-compliant consent record.
- User-agent string, for fraud detection.
- Consent text version you agreed to.
Waitlist data is held by our own waitlist service, in a PostgreSQL database on hardware we operate in the EU. This website stores none of it itself: the form hands the submission straight to that service. We do not share it with any third party, and it is deleted on request to support@synccy.com or with the one-click unsubscribe in any email we send.
The form is protected by Cloudflare Turnstile, which is what keeps bots off it. Turnstile sees your IP address and a challenge token at the moment you submit — not your email address. It is the only third party involved in a signup; the whole list is on Subprocessors.
Who we are
Platform is built and operated by an individual developer in the Netherlands, through his registered sole proprietorship (eenmanszaak). That sole proprietorship is the controller for everything described on this page:
Jarrel Pothoff, sole proprietorship
Chamber of Commerce (KVK) number: 42143146
VAT identification number: NL005530542B66
Registered address: Anjertuin 58, 2643 NB Pijnacker, the Netherlands
“SyncTogether” and “synccy” are project and domain names. Neither is a company, and neither is the controller.
Your rights
Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. One email does all of it: support@synccy.com. If you are not satisfied with the answer you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Contact
Questions about this policy, and every data-protection request: support@synccy.com. See also Subprocessors for who else receives anything, Trust for what we do and do not have, and Terms.