SynapzzOpen app
Legal

Privacy Policy

This Privacy Policy explains what personal data Synapzz (“Synapzz”, “we”, “us”) processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR). It applies to the Synapzz web application and website.

1. Data controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

Email: hello@synapzz.app

2. Overview of data we process

We process the following categories of personal data:

  • Account data: your email address and a securely hashed password, managed by our authentication provider.
  • Study data: the content you create in the app — study sessions, subjects and projects, goals, flashcard decks and their review progress, planner entries, and related statistics.
  • Feedback: any feedback, ideas, or bug reports you submit, linked to your account.
  • Pro waitlist: if you join the Pro waitlist, your account email and the date you joined, so we can notify you about the Pro launch and an early-bird discount.
  • Technical data: data automatically transmitted by your browser when contacting our servers and third-party services (e.g. IP address, time of request), as is technically necessary to deliver the service.

3. Local storage on your device

Synapzz is offline-first. Your study data is stored locally in your browser using IndexedDB, and preferences (such as theme and ambient sound settings) are stored in your browser’s local storage. This data remains on your device and is only transmitted to our servers for the purpose of cross-device sync described below. You can clear it at any time via your browser settings.

4. Account, sync, and hosting

When you create an account, your data is synchronised to our backend so you can access it across devices. Authentication, database storage, and real-time sync are provided on our behalf by Supabase(Supabase Inc.), acting as a processor under a data processing agreement. Depending on the configured region, data may be processed on servers operated by Supabase’s infrastructure providers. The application is hosted by [HOSTING PROVIDER, e.g. Vercel Inc.].

Legal basis: performance of a contract (Art. 6 (1)(b) GDPR) — providing the account and sync features you sign up for.

5. Optional features that involve third parties

  • Ambient lofi audio: if you enable the lofi ambient sound, audio is streamed from a third-party radio service (laut.fm). This causes your IP address to be transmitted to that provider. White-noise ambient sound, by contrast, is generated entirely in your browser and sends no data.
  • On-device AI: if you enable Synapzz AI, the AI model files are downloaded once from a third-party model host (Hugging Face) and then run entirely in your browser on your own hardware. The content you process with the AI is not sent to us or to any third party.
  • Social features: if you opt into friends, leaderboards, or the live globe, the statistics and presence information needed for those features are shared with other users as described in the app.

Legal basis: your consent (Art. 6 (1)(a) GDPR), given by enabling the respective optional feature. You can withdraw consent at any time by disabling the feature.

6. Feedback and the Pro waitlist

When you submit feedback or join the Pro waitlist, we process the data you provide together with your account identifier to handle your submission and, for the waitlist, to contact you about the Pro launch and the associated discount.

Legal basis: our legitimate interest in improving the product and informing interested users (Art. 6 (1)(f) GDPR), and your consent where you actively join the waitlist (Art. 6 (1)(a) GDPR). You can ask us to remove you from the waitlist at any time.

7. Retention

We keep your account and study data for as long as your account exists. When you delete your account, the associated data is deleted, subject to any statutory retention obligations. Feedback and waitlist entries are deleted when they are no longer needed for the purpose described above.

8. Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15);
  • rectification of inaccurate data (Art. 16);
  • erasure of your data (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interests (Art. 21); and
  • withdraw any consent you have given, with effect for the future.

To exercise these rights, contact us at hello@synapzz.app. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Changes to this policy

We may update this Privacy Policy to reflect changes to the app or legal requirements. The current version is always available on this page.