Privacy Policy

Last Updated: April 2, 2026

Synca is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

Health Data

We collect health data to provide you with personalised productivity recommendations around your menstrual cycle. This is the core function of our app.

We only process health data you choose to provide in the Synca app or import from Apple Health. This can include:

• Menstrual cycle dates
• Symptoms
• Mood entries
• Energy levels
• Sleep, activity, heart rate, and HRV data (from Apple Health, with your permission)

We collect this data to:

• Provide personalised cycle tracking and insights
• Generate AI-powered productivity recommendations based on your menstrual cycle

Apple Health Data

If you choose to grant permission, Synca can read health data from Apple Health to provide deeper insights about how your cycle affects your body. We access the following data types:

• Menstrual Flow and Spotting — to sync your period dates and keep tracking consistent
• Sleep Duration and Quality — to show how your sleep patterns change across your cycle
• Steps and Active Energy — to track activity levels relative to your cycle phase
• Workouts and Exercise Time — to understand exercise patterns and provide movement suggestions
• Heart Rate and Resting Heart Rate — to identify physiological patterns across your cycle
• Heart Rate Variability (HRV) — to provide insights on stress and recovery

Calendar Data

If you choose to grant permission, we access your device calendar to show your schedule alongside cycle insights.

We only read calendar event titles and times. We do not access event details, attendees, or notes.

Usage Data

To keep improving our app and services, we collect usage data including:

• Device type and operating system
• App usage patterns
• Crash reports and performance data

Health Data Protection Commitment

Your health data is used solely to provide you with personalised cycle tracking and productivity insights within the Synca app.

Medical Disclaimer

Essential Third-Party Services

Supabase

Synca uses Supabase for secure data storage and authentication. Supabase provides robust encryption and complies with SOC 2 and GDPR standards.

OpenAI

Synca uses OpenAI to generate insights and productivity recommendations. Anonymised health data (such as sleep, cycle phase, and activity) may be included in AI requests to provide personalised recommendations. Data shared with OpenAI contains no personal identifiers. OpenAI does not use this data to train their models.

PostHog

Synca uses PostHog for product analytics to understand how the app is used and to improve our features. PostHog is hosted in the EU and is GDPR-compliant. Analytics data is only collected after you provide consent through the in-app consent prompt. You can withdraw consent at any time in Settings. This data is used solely to improve the app experience and is not shared with third parties.

Subscription and Payment Data

Synca offers auto-renewable subscriptions managed entirely through Apple's App Store. All payment processing is handled by Apple. We do not collect, store, or have access to your payment information, credit card details, or Apple ID. We only receive confirmation of your subscription status to provide access to premium features.

Data Storage & Security

• Your data is stored securely using Supabase, a trusted cloud database provider that complies with SOC 2 and GDPR standards
• We use encryption to protect data in transit (TLS) and at rest (AES-256)
• Access to your data is restricted to essential personnel only
• Your health data is never shared with third parties without your explicit consent
• We implement appropriate technical and organisational measures to protect your data

Data Retention

• Your personal data is retained for as long as you maintain an active account with Synca
• Check-in data and cycle history are retained to provide you with pattern insights and predictions
• If you delete your account, all personal data is permanently deleted within 30 days
• Anonymised, aggregated usage data may be retained for analytical purposes

Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the right to:

• Access your personal data at any time within the app
• Correct inaccurate information in your profile
• Delete your account and all associated data
• Export your data in a portable format upon request
• Withdraw consent for optional features like calendar access
• Object to processing of your personal data
• Lodge a complaint with a supervisory authority

Your Rights Under CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt-out of the sale of your personal information (note: we do not sell personal information)
• Non-discrimination for exercising your privacy rights

App Tracking & Advertising

How to Delete Your Data

You can delete your account and all data by:

• Going to "Settings" in the app
• Choosing "Delete Account"
• Confirming your choice

All your personal data will be permanently deleted within 30 days of your request.

Children's Privacy

Synca is not intended for users under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the app and updating the "Last Updated" date.