Privacy Policy

1. Scope

This Policy applies to personal information Synodoss processes through the Service, support communications, and related online or offline interactions. The information involved depends on how you interact with Synodoss, the features you use, and applicable law. Synodoss is for adults aged 18 or older. This Policy does not govern a third party’s independent processing, including what other members do with information you show or send them.

2. Personal information we collect

Information you provide directly

Account information comes from Sign in with Apple, the only way to sign in: an identifier for your Apple account and the email address Apple shares with us, which may be a private relay address. During onboarding you may also give us an email address; this is optional, only you can see it in the app, and it is deleted with your account.

Profile information includes your name, username, date of birth, gender, home city and country, a short bio, and up to six photos or short videos, the first of which must be a photo of you. You may add more: an Instagram username, your work and industry, hometown, languages, pets, interests, lifestyle answers such as whether you drink or smoke, and up to three prompts with your answers. These details are optional, and most can be hidden from your profile at any time. Onboarding also asks what brings you to Synodoss, the kinds of people, Groups, and Events that interest you, how you heard about us, and an invite code if you have one.

Your date of birth confirms that you are 18 or older and gives the age on your profile. It is stored apart from your profile, and other members never see the date itself.

What you create and send

If you request photo verification, we collect camera photos of your face from the front and both sides, combined into one review image, and the review result. On-device face detection checks face position, size, and angle to guide automatic capture; it does not identify you or create biometric templates. Other preview frames and detection results are not uploaded. Starting verification begins guided capture; the three views are submitted automatically when capture finishes. You can cancel before completion. A Synodoss reviewer compares the submitted image with your profile photo; identity matching is not automated. A photo-verification badge confirms a visual likeness, not your legal identity, age, or background.

The review image is private and is not displayed to other members. We retain submitted review images until an operator deletes them, you withdraw the request through support@synodoss.com, or your account is erased. Changing your main profile photo also cancels uploading, pending and approved verification requests, removes the badge and schedules those images for deletion. Images are no longer automatically deleted after seven days; this also applies to earlier submitted images that had not already expired or been deleted when this retention change took effect on September 21, 2026. Already deleted images are not restored. Withdrawal or profile-photo changes schedule deletion after any in-flight upload has had time to finish, normally within about an hour. Deleting the evidence for a current approved verification also removes that verification badge. We retain review status and decision history while your account exists.

To review submissions and investigate misuse, we also collect the account's display name, username and user ID, submission time, network IP address and country, and available User-Agent, app version, operating system, device model and locale. Device and app details are diagnostic information, not proof of identity. This information is included in the notification sent to our support mailbox. Review images are not attached to notification or access-code emails. Access to the private review page requires a one-time code delivered to the support mailbox and a time-limited reviewer session; the review link alone does not grant access to photos.

User Content includes the Groups and Events you create — titles, descriptions, cover images, dates, places and their exact locations, join settings, and age ranges; the messages you send in direct and group chats, including text, photos and videos, places with directions, polls, replies, reactions, links, and VOWI items; the likes you send, with any comment and the photo or answer you liked; and invitations, join requests, and memberships. We also process the reports you file, with your reason and any details you add, and the list of people you have blocked.

Location

With your permission, the app reads your device’s precise location to suggest your city and country, to place you on the map during onboarding, and to show what is near you. Your precise location is sent with those requests so that nearby Groups and Events can be found, but it is not saved to your profile, which keeps only the city and country you confirm. Exact locations are stored for the Groups and Events you create and for the places you choose to share in a chat.

Activity between members

We record when you were last active, rounded to the minute, the likes you send and receive, and visits to profiles. When you open someone’s profile, that person may be able to see that you viewed it.

Purchases and paid features

Synodoss Plus and Synodoss Pro are sold and billed by Apple. We use RevenueCat to confirm the status of a purchase. It receives a random account identifier — not your name or email address — together with product, price, currency, and subscription status. Synodoss does not receive your payment-card number.

Communications

We process information you provide when requesting support, reporting content, exercising a legal right, or discussing a business opportunity. This may include contact details, correspondence, attachments, and your responses.

Information collected automatically

We may receive IP address, approximate country or region, device type, operating system, language, app version, requests made to our servers, timestamps, error logs, and security signals. To deliver notifications we store the push token Apple issues to your device. Camera, photo-library, calendar, location, and notification access are used only when a feature asks for permission and you allow it.

The website and shared links

The front page of the Synodoss website (synodoss.com) uses Google Analytics, a service of Google LLC, to count visits and to see roughly where they come from and how the page is used. For that, Google sets cookies in your browser and receives your IP address, which Google shortens before storing it. Google Analytics is not on the Terms, Privacy, Support, or About pages, which are the pages the app opens, and it is not in the app. You can block it in any browser with Google’s add-on at tools.google.com/dlpage/gaoptout. A link to a profile, Group, or Event that is opened in a browser shows only an invitation to open the app; the page itself is shown inside the app to signed-in members. We count those visits without identifying the visitor: the visitor’s IP address is combined with a secret and the date and reduced to a short code that changes every day, and only that code, the country, the site the visit came from, and the link’s own details are recorded. The IP address itself is not stored. Invite links record that an invite was opened or used and, inside the app, an app-installation identifier.

Mobile analytics, advertising measurement, and attribution

In the iOS app, Synodoss uses PostHog to understand feature use and reliability. PostHog receives your Synodoss account identifier — a random ID, not your name or email address — app lifecycle events such as opening the app, and events about sharing a link. PostHog session replay and automatic screen capture are disabled.

The app also includes AppsFlyer, Meta App Events, and TikTok for Business, which Synodoss may use to attribute installs and measure the effectiveness of advertising for Synodoss. AppsFlyer is our mobile measurement partner: it matches installs to the campaigns that led to them and reports the results to advertising platforms such as Meta. When they are active, and depending on your privacy choices, these services may receive the identifier for vendor, the advertising identifier, IP-derived approximate location, device and app information, tracking-authorization status, campaign or attribution information, and app events: installs and launches, creating an account, completing onboarding, joining with an invite code, starting a purchase or a free trial, and subscriptions and purchases, with product, price, and currency. AppsFlyer also receives the same random account identifier RevenueCat receives — not your name or email address — and may receive confirmed subscription and purchase events from RevenueCat. The iOS advertising identifier is available only when you authorize tracking through Apple’s App Tracking Transparency prompt. Synodoss does not send names, email addresses, messages, photos, videos, or precise locations to these services.

Processing on your device

When you create an Event, the app may use Apple’s on-device language model to sort it into a category. This happens on your device; the text is not sent anywhere for that purpose.

Information from other sources

Apple provides the account details that you permit it to share when you sign in. If you link a VOWI account, VOWI provides the link’s identifiers, your plan status, and the items you choose to show. Service providers may return purchase, delivery, security, or operational status. Other members may provide information when they invite you, report you, or include you in User Content.

3. How we use personal information

Providing the Service

We use personal information to:

• create and secure accounts, authenticate members, and confirm that every member is 18 or older;
• show your profile to other members and suggest people, Groups, and Events to you, including by distance;
• provide Groups, Events, invitations, join requests, chats, likes, sharing, uploads, search, maps, and other Service features;
• process plans and provide purchase support;
• deliver notifications and account, security, and service communications;
• respond to support, privacy, and business communications; and
• personalize onboarding and the features or content shown within the Service.

Administration, safety, and improvement

• operate, troubleshoot, monitor, analyze, and improve performance and accessibility;
• develop and test new products, features, and quality controls;
• review reports, moderate content, and act on accounts that break the Terms;
• prevent spam, scraping, fraud, abuse, and unauthorized access;
• verify requests, audit interactions, and investigate security incidents;
• enforce our Terms and protect Synodoss, our members, and others; and
• comply with legal obligations and valid legal requests.

Marketing and advertising

Synodoss may send information about its own features or events where permitted by law and subject to available communication choices. Synodoss may use the mobile measurement and advertising services described above to attribute installs, measure registrations and purchases, understand campaign performance, and improve ads for Synodoss that appear on third-party services. Synodoss does not currently display third-party ads inside the Service and does not sell personal information for money. Advertising measurement or optimization may be treated as tracking, targeted advertising, or sharing under applicable law, and we provide the notices and choices required for those practices.

Automated processing, aggregate data, and other purposes

Where a legal basis is required, we rely on performing our agreement with you, legitimate interests in operating and securing the Service, consent where requested, and compliance with legal obligations. The people, Groups, and Events suggested to you are chosen automatically from what you and they have provided. We do not use solely automated decisions to produce legal or similarly significant effects without an appropriate basis, notice, and any rights required by law.

We may create aggregate or de-identified statistics about members, devices, Groups, Events, and interests and use them for analytics, research, safety, and product development where they no longer reasonably identify an individual. We may also use information for another purpose disclosed when it is collected, at your request, with your consent, or as otherwise permitted by law.

4. How we disclose personal information

Synodoss does not sell personal information for money. Some advertising measurement and optimization disclosures described below may be considered targeted advertising, cross-context behavioral advertising, or “sharing” under applicable law.

We may disclose information in the following circumstances:

• With other members. Your profile — your name, age, photos and videos, city and country, and the details and answers you have not hidden — is shown to signed-in members. People in a Group, an Event, or a chat see what you post there, the places you share, and that you are a member. A person you like sees the like and any comment, and a person whose profile you view may see that you viewed it.
• With service providers. We use Supabase for the database and authentication; Cloudflare for hosting, network security, and media storage; Apple for sign-in, push notifications, maps, weather, and purchases; RevenueCat for purchase status; PostHog for analytics in the app; Google Analytics for counting visits to the website’s front page; and Resend for email delivery. Providers process information under their agreements and instructions, subject to their independent obligations.
• With VOWI. VOWI is a separate app. If you link a VOWI account, Synodoss and VOWI exchange the identifiers that join the two accounts, your plan status, and the VOWI items you choose to show. Purchase notifications are also passed to VOWI so that plan benefits can reach a linked account; VOWI does not act on a notification for an account that is not linked.
• With analytics, purchase, and advertising measurement providers. Synodoss discloses the limited identifiers, approximate location, app events, attribution information, and purchase or subscription information described above to PostHog, RevenueCat, AppsFlyer, and, when they are active, Meta App Events and TikTok for Business. They process this information to provide analytics, install and campaign attribution, fraud prevention, conversion measurement, and advertising optimization, subject to the applicable settings, contracts, platform rules, and law.
• Through software integrations. The Service uses third-party application interfaces and software kits. Those parties may receive technical information needed to provide the integration, subject to applicable settings, contracts, and law.
• For safety and legal reasons. We may preserve or disclose information when reasonably needed to comply with law, respond to valid process, prevent harm, investigate abuse, or protect rights and security.
• In a business transaction. Information may transfer as part of a merger, financing, reorganization, acquisition, or sale of assets, subject to appropriate safeguards and applicable law.

5. Your privacy choices and rights

Choices in the app and on your device

You can edit your profile, hide most of its details, remove photos and videos, leave a Group or an Event, block a person, and unlink VOWI from inside the app. Device controls may restrict or remove precise location, camera, photo-library, calendar, or notification access; some features may not function after a permission is turned off. Marketing messages, if offered, will include an opt-out method; essential account, security, legal, and transactional communications may continue.

On iOS, you can allow or deny cross-app tracking when the App Tracking Transparency prompt appears and can change that choice later in Settings › Privacy & Security › Tracking. Denying tracking prevents Synodoss and its partners from accessing the iOS advertising identifier. It does not disable first-party product analytics or all measurement that Apple permits without that identifier. Where applicable law provides a separate right to opt out of targeted advertising, sale, or sharing, you may also exercise it by contacting support@synodoss.com.

Deleting your account

You can ask to delete your account in the app, under Profile settings › Account. Your profile is taken down as soon as you ask, and you are signed out. The account and its personal information are permanently deleted seven days later, so that a request made by mistake can be undone: signing in again within those seven days cancels the request and restores your account as it was. You can also write to support@synodoss.com. Deleting your account does not cancel a subscription billed by Apple.

Your privacy rights

Depending on your location, you may request access, correction, deletion, restriction, objection, withdrawal of consent, or a portable copy of personal information. You may also have a right to appeal our response or complain to a data-protection authority. You may designate an authorized agent where law permits.

Submitting and verifying a request

Submit requests to support@synodoss.com. To protect your information, we may verify your identity, account, authority, and jurisdiction before responding. We may request signed authorization from an agent and may apply lawful exceptions. We will respond within the period required by applicable law, explain any denial or extension, and will not discriminate against you for exercising an applicable privacy right.

6. Security

We use technical and organizational safeguards designed to protect information, including encrypted network connections, authentication, row-level access controls, logging, and protections supplied by infrastructure providers. Photos, videos, and attachments are kept in private storage and served only through authenticated requests. Messages are not end-to-end encrypted: they are stored on our servers so that they reach every member of a conversation and can be reviewed when someone reports them. No system can guarantee absolute security. Keep your devices and credentials secure.

When required by law, we will notify affected people and authorities of a qualifying personal-data breach using the Service, account contact information, or another legally permitted method.

7. International processing

Synodoss and its providers operate infrastructure in multiple countries, including the United States. Information may be processed outside the country where you live under different privacy laws. Where required, we use contractual or other recognized safeguards for international transfers.

The analytics, purchase, and advertising measurement providers named above are PostHog, RevenueCat, AppsFlyer, Google (Google Analytics, on the website’s front page only), and, when they are active, Meta and TikTok for Business. Their processing locations may include the United States, Israel, Singapore, and the European Union. Information is transferred electronically when the app starts or a relevant interaction, attribution, subscription, or purchase event occurs, and is retained for the period required to provide the service, meet contractual or legal obligations, prevent fraud, and produce permitted analytics and campaign reports, subject to provider terms and applicable deletion or opt-out rights.

8. Retention

We retain account information while your account is active and other information for as long as reasonably necessary for the purpose collected. Retention periods consider the feature involved, account status, member expectations, sensitivity, security and fraud needs, dispute resolution, audits, legal defenses, agreement enforcement, and legal recordkeeping. After an account is deleted, deletion from active systems may take time, limited copies may remain temporarily in backups or required records, and records of reports, blocks, and enforcement may be kept where needed to protect members and keep a removed account from returning. Text messages you sent remain with the people who received them, attributed to a deleted account; photos and videos you sent are removed. Groups and Events you hosted remain for their members, without your name or photo. De-identified information may be retained when it no longer reasonably identifies you.

9. Regional privacy disclosures

Categories and sources

Depending on applicable law, the categories Synodoss processes may include identifiers, account and contact data, characteristics such as date of birth, age, and gender, commercial or transaction information if a plan is purchased, precise and approximate geolocation, internet or device activity, visual content, the contents of messages sent through the Service, professional information you add to your profile, and inferences from the preferences you provide. These categories come from you, your devices, service providers, partners, and other members and are used and disclosed for the purposes described above.

United States state disclosures

Where state privacy laws apply, residents may have rights to know, access, correct, delete, or obtain a portable copy of information; opt out of certain sales, sharing, targeted advertising, or profiling; limit certain uses of sensitive information; use an authorized agent; and appeal a decision. Synodoss does not knowingly sell personal information for money, and the Service is not open to anyone under 18. Advertising measurement and optimization may be treated as sharing or targeted advertising under some state laws.

California privacy notice

This subsection applies to California residents and to “personal information” covered by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”). It describes personal information Synodoss controls through the Service and related online or offline interactions. Statutory exemptions remain applicable where provided by law.

Depending on how a person interacted with Synodoss, we may have collected the following CCPA categories during the 12 months preceding this Policy’s last-updated date:

• identifiers and account or contact information, including name, username, email address, profile photos, provider identifiers, and device push tokens;
• characteristics supplied for a profile, such as date of birth, age, gender, city and country, languages, and interests;
• commercial information, such as plan, subscription, transaction, or refund status;
• internet, device, and network activity, including IP address, approximate location, device details, interactions, timestamps, logs, and security signals;
• geolocation data, including precise location when you allow it and the exact locations of Groups, Events, and places you share;
• visual information contained in photos, videos, cover images, and other User Content;
• professional information added to a profile or submitted in a business or support communication;
• other information reasonably associated with a person, including messages, likes, memberships, invitations, reports, and content metadata; and
• inferences drawn from the interests, goals, or preferences a person provides.

Sensitive personal information may include account log-in information, precise geolocation when a person enables a feature that requests it, the contents of messages for which Synodoss is not the intended recipient, and optional lifestyle answers a person chooses to give. Synodoss uses and discloses sensitive personal information only to provide requested features, secure accounts and the Service, prevent abuse, or meet legal obligations. We do not use it to infer characteristics or for a purpose that currently requires a right to limit its use under the CCPA.

Sources include the individual, their device and use of the Service, service providers and operating partners, other members, and parties acting at the individual’s direction. Depending on the category and purpose, recipient categories may include service providers and contractors, operating or business partners, analytics and security providers, professional advisers, authorities and other parties for legal or safety purposes, parties involved in a business transfer, other members when profile and membership settings allow it, and persons designated by the individual. Synodoss does not disclose every category to every recipient.

California rights and requests

Subject to verification and lawful exceptions, a California resident may request that Synodoss:

• disclose the categories and specific pieces of personal information collected about them;
• disclose the categories of sources, purposes, and recipients, including applicable sale or sharing information;
• provide access to or a portable copy of eligible personal information;
• correct inaccurate personal information;
• delete eligible personal information; or
• honor an applicable request to opt out of sale or sharing or to limit certain uses of sensitive personal information.

Submit a request to support@synodoss.com. We may verify identity by matching information associated with the request to account or Service records and may request additional information when reasonably necessary. A resident may use an authorized agent. We may require signed permission or a valid power of attorney and may confirm the request directly with the resident unless law provides otherwise.

We will respond within the time required by law and explain a denial, extension, or applicable exception. Certain information may be retained for security, fraud prevention, legal compliance, dispute resolution, or another permitted purpose. Deleting information necessary to provide the Service may require closing the account or ending the affected feature. Synodoss will not unlawfully discriminate or retaliate because a person exercises a protected privacy right.

Sale, sharing, sensitive information, and incentives

Synodoss has not sold personal information for money. Synodoss may use the analytics and advertising measurement providers described in this Policy, and disclosures to those providers may be considered “sharing” or targeted advertising under some laws. The Service is for adults, and Synodoss does not knowingly sell or share the personal information of anyone under 18. We do not offer a financial incentive or price or service difference in exchange for collecting, selling, or sharing personal information. Where an opt-out right applies, you may use the device controls or contact method described in Section 5.

Browser privacy signals

The Synodoss website uses Google Analytics on its front page for measurement only and does not engage in cross-site behavioral advertising, and anyone can block Google Analytics with Google’s browser add-on. Beyond that there is nothing for a browser “Do Not Track” or opt-out preference signal to turn off there. The iOS App Tracking Transparency choice and the contact method in Section 5 remain available for the mobile advertising practices described above.

California “Shine the Light”

California Civil Code Section 1798.83 may permit residents with an established business relationship to request information about certain disclosures made for another party’s own direct-marketing purposes. Synodoss does not disclose personal information to other parties for their own direct marketing without the resident’s affirmative consent. Questions or applicable requests may be sent to support@synodoss.com.

Where applicable Nevada law provides a right to opt out of covered sales, you may submit that request to the contact below. Synodoss does not currently engage in covered sales as described in this Policy. Other regional laws may provide similar or additional rights, which we will honor when they apply.

Accessibility

This Policy is presented as a web document that can be enlarged, printed, or saved using browser and device controls. Contact us if you need it in another reasonably available format.

10. What other members can see

A profile is made to be seen by other members, and what you post in a Group, an Event, or a chat is seen by the people in it. Recipients may capture or redistribute what they see, and a link you share can be passed on. Review your profile, and think about who is in a conversation, before adding personal information such as where you live or where you will be.

11. Children’s information

The Service is for adults. It is not directed to anyone under 18, an account cannot be created with a date of birth that makes its holder younger than 18, and Synodoss does not knowingly collect personal information from anyone under 18.

If you believe someone under 18 is using Synodoss, report the profile in the app or write to support@synodoss.com. If we learn that a person under 18 provided personal information, we will delete the information and close the account unless we have a legal obligation to retain it.

12. Third-party services and policy changes

The Service may link to or interoperate with external websites, applications, marketplaces, and other services, including VOWI, Instagram, and map applications. Synodoss does not control their independent processing, does not endorse every external resource, and is not responsible for their privacy practices or content. Review their policies before providing information; doing so is at your own risk.

We may update this Policy as Synodoss’s features, providers, or legal obligations change. We will revise the date above and provide additional notice for material changes when required. If consent is legally required for a new practice, continued use alone will not replace that consent.

13. Contact

Privacy questions and requests can be sent to support@synodoss.com.