Privacy Policy
1. Introduction
This Privacy Policy describes how Synapse collects, uses, stores, discloses, and processes information relating to users who access or use the Synapse platform and related services. By using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of information as described herein.
2. Scope
This Policy applies to all information collected through the Services. It does not apply to third-party websites or platforms linked to or integrated with the Services but operated independently of Synapse.
3. Information We Collect
We may collect the following categories of information to provide and improve the Services:
- Account Details: Full name or display name and verified email address.
- Profile Data: User preferences, recovery identities, and voluntarily provided demographic details.
- Recovery Records: Daily check-ins, wins, difficult days, slips, urge timestamps, and self-reported triggers.
- Support Communications: Messages, feedback, and inquiries submitted through customer care channels.
- Authentication Information: Federated authentication credentials from providers like Google Sign-In.
- Technical & Diagnostic Logs: Device characteristics, browser user-agent, operating system, IP address, and access timestamps.
4. Purposes of Processing
We process collected information for the following legitimate purposes:
- Account registration, authentication, and secure access management.
- Providing habit plans, progress analytics, and contextual AI coaching.
- Platform security monitoring, threat prevention, and fraud detection.
- Technical troubleshooting, bug resolution, and performance optimization.
- Customer care and responding to inquiries.
- Compliance with legal obligations and regulatory standards.
5. Legal Basis for Processing
We process personal information under the following recognized legal bases:
- User Consent: Express consent given during account creation and optional data opt-ins.
- Contractual Performance: Processing necessary to fulfill obligations under our Terms of Service.
- Legitimate Interests: Securing, improving, and optimizing platform performance without overriding fundamental user rights.
- Legal Obligations: Compliance with applicable laws and regulatory directives.
6. Disclosure of Information
Synapse does not sell personal information to advertisers, third parties, or data brokers. Information is shared strictly on a need-to-know basis with trusted infrastructure partners:
- Cloud & Database Hosting: Secure, access-controlled infrastructure (Google Cloud / Firebase).
- Authentication Services: Secure identity verification (Google Sign-In, Firebase Auth).
- Email Delivery: Transactional communications and verification (Resend).
- Analytics & Performance: Anonymous performance tracking with telemetry anonymization.
7. Data Retention
Information is retained only as long as necessary to provide the Services, fulfill contractual obligations, comply with legal requirements, resolve disputes, enforce agreements, and preserve security and integrity of systems.
8. Data Security
Synapse implements commercially reasonable administrative, technical, and organizational safeguards to protect information. No method of electronic transmission or storage can be guaranteed to be completely secure. Users acknowledge the inherent risks associated with internet-based communications.
9. User Rights
Subject to applicable data protection laws, you retain the following rights regarding your personal data:
- Access & Export: Request a copy of the personal information stored in your account.
- Correction: Request rectification of inaccurate or incomplete personal records.
- Erasure / Deletion: Request permanent deletion of your account and associated recovery logs.
- Withdraw Consent: Revoke consent for discretionary processing at any time.
To exercise any of these rights, submit your request to: synapserewire@gmail.com.
10. Children's Privacy
The Services are not directed toward children under thirteen (13) years of age. We do not knowingly collect personal information from children under the applicable minimum age.
11. International Data Transfers
Information may be processed, stored, or transferred in jurisdictions different from your country of residence. By using the Services, you consent to such transfers where permitted by applicable law.
12. Modifications
Synapse reserves the right to modify this Policy at any time. Material modifications may be communicated through the Services. Continued use following revisions constitutes acknowledgment of the updated Policy.
13. Contact
For privacy-related inquiries, contact: Synapse Privacy Team - synapserewire@gmail.com