Privacy Policy

Last updated: May 15, 2026 · Applies to: Sync iOS App and syncappweb.com

1. Data Controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), the data controller responsible for processing personal data collected through the Sync app and website is:

• Contact email: [email protected]
• Data stored in: EU (West Europe) via Supabase on AWS infrastructure

2. Data We Collect and Why

We collect the following personal data:

• Identity data: full name, username, profile photo, age, profession and biography
• Contact data: email address used for account registration and authentication
• Location data: precise GPS coordinates, city and country (only with your explicit consent, revocable at any time from device settings)
• Profile preferences: languages spoken, hobbies and personal interests
• Activity data: plans created, plans joined, ratings given and received, badges earned, chat history
• Media content: photos uploaded to plans and profile avatar
• Technical data: IP address, device type, operating system version and access timestamps

3. Legal Basis and Purpose of Processing

• Contract performance: providing the Sync service, account management, authentication and email verification
• Legitimate interest: detecting fraud, abuse and prohibited behavior; improving service quality; ensuring platform security
• Consent: processing precise location data, sending promotional communications (opt-in only)
• Legal obligation: retaining data required by applicable law and responding to lawful authority requests

4. Data Retention

Your personal data is retained for as long as your account remains active. Upon account deletion, all personal data is permanently removed within 30 days, except where retention is required by applicable law. Chat messages shared with other users may remain on their devices after your account deletion.

5. Data Sharing and Third Parties

We do not sell, rent or trade your personal data. We share data only with:

• Supabase Inc. (data processor): database, authentication and file storage infrastructure, operating in the EU West region under a data processing agreement
• Resend Inc. (data processor): transactional email delivery service for authentication and notifications
• Competent authorities: when required by law, court order or to protect the rights and safety of our users

6. International Data Transfers

All data is stored and processed within the European Union (EU West region). No international transfers outside the EEA take place without appropriate safeguards.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: obtain confirmation of whether we process your data and receive a copy
• Right to rectification: correct inaccurate or incomplete personal data
• Right to erasure: request deletion of your data (right to be forgotten)
• Right to restriction: request that we limit how we use your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: revoke previously given consent at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

8. Security Measures

We implement appropriate technical and organizational measures to protect your data, including: HTTPS/TLS encryption for all data in transit, encryption at rest for database storage, JWT authentication with session expiration, biometric authentication (Face ID / Touch ID) with credentials stored in device Keychain, and Row Level Security (RLS) policies on all database tables.

9. Minors

Sync is not directed at persons under 16 years of age. We do not knowingly collect personal data from minors. If we become aware that a user is under 16, we will immediately delete their account and all associated data. If you believe a minor has registered, please contact us at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified to users via in-app notification or email at least 15 days before taking effect. Continued use of the app after notification constitutes acceptance of the updated policy.

11. Contact

[email protected]

Terms and Conditions

Last updated: May 15, 2026 · Applies to: Sync iOS App and syncappweb.com

1. Acceptance of Terms

By downloading, installing or using the Sync application or website, you agree to be bound by these Terms and Conditions and our Privacy Policy. If you do not agree with any part of these Terms, you must stop using the service immediately.

2. Description of Service

Sync is a social planning platform that allows users to create, discover and join local plans and events based on geographic proximity. The service is currently free for personal users. Business accounts are subject to separate commercial terms and verification requirements.

3. User Accounts and Eligibility

To use Sync you must:

• Be at least 16 years of age
• Provide accurate, current and complete registration information
• Maintain the confidentiality of your account credentials
• Accept full responsibility for all activity that occurs under your account
• Not create accounts for others without their explicit consent

4. Business Accounts

Businesses, freelancers and entrepreneurs wishing to promote their services on Sync must:

• Contact Sync via [email protected] with a brief company introduction and the name of the person who will manage the account
• Pass a verification process confirming the business is legitimate and the account manager is an authorized employee or representative
• Upon approval, receive a temporary password to the registered email and complete their business profile in the app
• Subscribe to a paid plan to place pins on the map: 6.99 euros per 24 hours or 29 euros per month

Sync reserves the right to reject or revoke business accounts that provide false information or violate these Terms.

5. Prohibited Conduct

The following conduct is strictly prohibited on Sync:

• Harassing, threatening, intimidating or defaming other users
• Publishing offensive, discriminatory, racist, xenophobic, sexist or hate-inciting content
• Sharing explicit sexual or pornographic content
• Impersonating other persons or entities
• Sending spam, unsolicited advertising or unauthorized commercial communications
• Using the platform for illegal activities or activities contrary to public order
• Attempting unauthorized access to other users accounts or platform systems
• Publishing personal data of third parties without their consent
• Sharing content that promotes self-harm, suicide or dangerous behaviors
• Creating fake plans or events with the intent to deceive or harm other users

6. Content Moderation and Sanctions

Sync operates an active content moderation system. Upon detection or report of prohibited conduct, the following measures may be applied:

• Formal warning to the offending user
• Removal of the offending content
• Temporary account suspension (between 24 hours and 30 days)
• Permanent account ban

Permanent bans will be applied immediately and without prior notice in cases of: content posing a real danger to persons, child sexual abuse material (CSAM), verified serious threats, or repeated violations after prior suspensions.

Sanctioned users may appeal within 14 days by emailing [email protected] with the subject 'Sanction Appeal'. Sync will respond within 30 days.

7. User-Generated Content

You retain intellectual property rights over the content you publish on Sync. By posting content, you grant Sync a non-exclusive, royalty-free, worldwide license to display, store and distribute that content solely for the purpose of providing the service. Sync does not claim ownership of your content.

Sync is not responsible for user-generated content but reserves the right to remove content that violates these Terms or applicable law.

8. Account Deletion

You may delete your account at any time from the Settings section of the app. Upon deletion, all your personal data will be permanently removed within 30 days. This action is irreversible.

9. Service Availability and Modifications

Sync reserves the right to modify, suspend or discontinue the service at any time, with or without notice. We will make reasonable efforts to notify users of significant changes. Continued use of the service after changes constitutes acceptance of the new Terms.

10. Limitation of Liability

To the maximum extent permitted by applicable law, Sync shall not be liable for: indirect, incidental or consequential damages arising from use of the app; loss of data or content; conduct or content of third-party users; service interruptions due to maintenance or force majeure; or personal injury or property damage arising from plans organized through the platform.

11. Intellectual Property

The Sync brand, logo, design, source code and all original content created by Sync are protected by intellectual property rights. Any reproduction, distribution or modification without prior written authorization is prohibited.

12. Governing Law and Jurisdiction

These Terms are governed by Spanish law. For any dispute arising from the use of Sync, the parties submit to the Courts and Tribunals of Barcelona, expressly waiving any other jurisdiction that may apply to them.

13. Contact

For any questions, complaints or legal notices, contact us at:

[email protected]