Privacy Policy for Synctatus

Last Updated: October 25, 2024

Introduction

Welcome to Synctatus! This privacy policy explains how Seyed Homayoon Shobeiri ("we", "us", or "our") collects, uses, and protects your information when you use the Synctatus mobile application (the "App").

Synctatus is designed to help you coordinate availability with your partners by sharing your meeting status and scheduling busy times. We are committed to protecting your privacy and being transparent about our data practices.

Information We Collect

Information You Provide Directly

• Account Information: Email address and full name for account creation and authentication
• Profile Information: Profile picture (avatar) that you choose to upload
• Meeting Status: Your busy/available status and meeting times
• Scheduled Busy Times: Times you schedule in advance when you'll be busy
• Partner Connections: Information about users you connect with as partners
• Notifications: Custom messages you send to notify your partners

Information Collected Automatically

• Device Information: Device tokens for push notifications
• Authentication Data: Face ID authentication attempts (biometric data is stored locally on your device only)
• Usage Data: How you interact with the app to improve functionality
• Timestamps: When you update your status or schedule busy times

How We Use Your Information

We use the collected information for the following purposes:

• Provide Core Functionality: Enable you to share your availability status with connected partners
• Notifications: Send you push notifications when your partners update their status or send you messages
• Authentication: Verify your identity using email/password and Face ID
• Partner Coordination: Allow you and your partners to see each other's availability
• Scheduled Events: Manage your scheduled busy times and notify partners accordingly
• App Improvement: Analyze usage patterns to improve app performance and features
• Support: Respond to your questions and provide customer support

Data Sharing and Third Parties

Firebase and Google Cloud Services

We use Firebase (Google Cloud) services to provide core functionality:

• Firebase Authentication: For secure user authentication
• Cloud Firestore: For storing your profile, status, and busy times
• Firebase Cloud Messaging (FCM): For push notifications
• Firebase Storage: For storing profile pictures
• Cloud Functions: For automated notifications and scheduled tasks

Firebase services are governed by Google's Privacy Policy, available at https://policies.google.com/privacy

Information Shared With Partners

When you connect with a partner in Synctatus, they can see:

• Your name and profile picture
• Your current busy/available status
• Your scheduled busy times (if you choose to share them)
• Notifications you send them about your availability

You control: Which partners can see your information and you can manage sharing preferences for each partner.

We Do NOT Share Your Data With:

• Advertisers or marketing companies
• Data brokers or analytics companies
• Social media platforms
• Any third parties for their marketing purposes

Data Security

We take the security of your data seriously and implement appropriate measures:

• Encryption: Data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Firebase Security Rules: Database access is restricted based on user authentication
• Face ID: Biometric data never leaves your device and is handled by Apple's Secure Enclave
• Secure Authentication: Passwords are hashed and never stored in plain text
• Regular Updates: We keep our security measures up to date

Data Retention

• Account Data: Retained as long as your account is active
• Meeting History: Stored indefinitely unless you delete your account
• Scheduled Busy Times: Kept for historical reference unless deleted
• Deleted Accounts: Data is permanently deleted within 30 days of account deletion

Your Privacy Rights

You have the following rights regarding your data:

• Access: View all data we have about you
• Correction: Update your profile information at any time
• Deletion: Request complete deletion of your account and data
• Export: Request a copy of your data
• Control Sharing: Manage what information partners can see
• Opt-out of Notifications: Disable push notifications in app settings

Children's Privacy

Synctatus is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and share, and the right to request deletion of your personal information.

International Users

Synctatus is operated in the United States. If you are using the app from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date. We encourage you to review this privacy policy periodically.

Contact Us

Acknowledgment

By using Synctatus, you acknowledge that you have read and understood this privacy policy and agree to its terms.