Back to synclyfe

Privacy Policy

Last updated 15 October 2026

The short version

  • synclyfe is run by one person in India, not a company. This explains what that person stores about you and why.
  • We keep what you give us (your account, profile and syncs) and use it only to run synclyfe.
  • No ads, no selling your data, no tracking cookies, no analytics.
  • Most of synclyfe is public. Private categories hide your syncs, but photos are stored at links anyone could open if they had them.
  • You can download your data or delete your account at any time in Settings. For anything else, such as correcting your data, email asyncasad@gmail.com.

1. Who we are

synclyfe (“synclyfe”, “we”, “us”) is a personal project run by Pathan Asadkhan, an individual based in Vadodara, Gujarat, India. There is no company behind it. Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the “Data Fiduciary” for the personal data described here: we decide why and how it is used.

This policy covers the synclyfe website and the installable app (the same thing, added to your home screen). Contact for anything in it: asyncasad@gmail.com.

2. What we collect

Your account

  • Email address and password, if you sign up with email. Passwords are stored hashed by our authentication provider; we never see them.
  • Google sign-in details, if you use Google: your email address, name and profile photo link, as shared by Google. We use the photo as your profile picture until you change it.
  • Username, which you choose.
  • Your agreement: when you agreed to our Terms, Community Guidelines and this policy, which version, and that you confirmed your age. We keep this as a record of your consent.

Your profile

  • Display name, bio and profile photo, if you add them.

What you post

  • Categories: their name, description, colour, cover photo, the fields you set up, and whether they are private.
  • Syncs: whatever you enter, which can include text, numbers, ratings, dates, tags, links, photos and places (coordinates or map links).
  • Follows: who you follow and who follows you, and when.

Safety

  • Blocks: who you have blocked.
  • Reports: when you report something, what you reported (including a copy of it at that moment), the reason you picked and any details you added.

Technical data

  • Cookies needed to keep you signed in. We don’t use advertising, analytics or tracking cookies.
  • Basic logs kept by our hosting and database providers, such as IP address, browser type and time of request, for security and to keep the service running.
  • The installed app keeps a small offline page on your device so it can tell you when you’re offline. It does not store your syncs there.

Please don’t put sensitive information in syncs (for example health, financial or government ID details). synclyfe isn’t designed for it.

3. Why we use it

We use your data only to:

  • create and secure your account and let you sign in;
  • show your profile and syncs, and the syncs of people you follow;
  • let people find and follow you;
  • send emails about your account, such as confirming your email address or resetting your password;
  • keep synclyfe safe: prevent abuse, act on reports and fix problems;
  • meet legal obligations.

We process your data based on the consent you give when you create an account, and for legitimate uses allowed by the DPDP Act (such as complying with the law). You can withdraw consent at any time by deleting your account (see section 9). We never sell your data, and we don’t use it for advertising.

4. What other people can see

synclyfe is an open journal, so much of it is public by design:

  • Public: your username, display name, bio and profile photo; the categories you haven’t made private, and every sync in them, including any photos, links and places; who you follow and who follows you.
  • Private categories: their syncs aren’t shown to anyone but you. However, photo files are stored at public web addresses. Anyone who has the exact link to a photo can open it, even if it’s in a private category. The links are long and random, so they can’t be guessed, but don’t upload a photo you would never want anyone to see.
  • Never shown: your email address and password, who you block, and what you report. People you block aren’t told, and people you report don’t learn it was you.

Photos are normally re-encoded on your device before upload, which removes hidden location data (EXIF). If a photo can’t be processed that way, it may be uploaded as it is, so remove location data from photos yourself if you’re unsure.

Once something is public, other people may see, save or share it before you delete it. We can’t control copies made outside synclyfe.

5. Who we share it with

We use a few trusted service providers to run synclyfe. They process data on our behalf and only as needed to provide their service:

  • Supabase: database, sign-in, photo storage and account emails. Data is stored in their Mumbai region.
  • Vercel: hosts the website and app.
  • Google: only if you choose “Continue with Google”, to sign you in.

Some of these providers may process data outside India. We only use providers with strong security practices, and transfers follow the DPDP Act.

We may also disclose data if Indian law requires it, for example to respond to a valid order from a court or government authority, or to protect someone’s safety.

6. Information from Google

If you choose “Continue with Google”, Google shares a few basic details with us, with your permission:

  • your name;
  • your email address;
  • your profile picture (as a link);
  • an ID that identifies your Google account to us.

We only ask Google for this basic profile and email access. We don’t access your Gmail, contacts, Drive, Calendar, photos or any other Google data.

How we use it

  • To create your account and sign you in.
  • To pre-fill your display name and profile picture. You can change or remove both in your profile at any time.
  • To send emails about your account.

How we store and share it

  • It is stored with the rest of your account in our database (Supabase, Mumbai region), protected as described in section 8.
  • We never sell it, never use it for advertising, and never share it with anyone except the service providers in section 5 that we need to run synclyfe.
  • We don’t use it to train AI or machine-learning models.

Keeping and deleting it

We keep it while your account exists. Deleting your account (Settings → Delete account) deletes it, apart from the minimal 180-day registration record described in section 7. You can also remove synclyfe’s access to your Google account at any time at myaccount.google.com/permissions.

synclyfe’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. How long we keep it

  • Your data is kept while your account exists.
  • When you delete a sync, category or photo, it’s removed from synclyfe straight away.
  • When you delete your account (Settings → Delete account), your profile, syncs, photos, follows and blocks are deleted straight away. Copies may remain in encrypted backups for up to 30 days before they are overwritten.
  • 180-day registration record. Indian law (rule 3(1)(h) of the IT Rules, 2021) requires us to keep the details you registered with for 180 days after you delete your account. We keep only your email address, username, name, sign-in method and the dates you joined and left. The record is locked away from the app, used only if the law requires (for example a valid request from the police or a court), and deleted automatically after 180 days.
  • Reports are kept as a record of the complaint, including a copy of what was reported, so it can be investigated even if it’s deleted. If you delete your account, reports you sent stay without your name attached. Content we remove for breaking our rules is kept for 180 days, as the IT Rules require, and then deleted.
  • We may keep limited information for longer where the law requires it, for example records related to a legal complaint.

8. Keeping it safe

Connections to synclyfe are encrypted (HTTPS), passwords are hashed, and database rules make sure people can only change their own data. No system is perfectly secure, though. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires.

9. Your rights

Under the DPDP Act you can:

  • Access: download everything you’ve added in Settings → Download your data, or ask us for a summary of the personal data we hold about you and how it’s used.
  • Correct and update: most of it you can edit yourself in your profile; for anything else, ask us.
  • Erase: delete your syncs and categories at any time, or your whole account in Settings → Delete account.
  • Withdraw consent: by deleting your account.
  • Nominate: name someone who can exercise these rights for you if you die or become unable to.
  • Complain: to our Grievance Officer (below), and then to the Data Protection Board of India if you aren’t satisfied.

To use any of these rights, email asyncasad@gmail.com from the address on your account. We’ll reply within 30 days at most, usually much sooner.

10. Age limit

You must be 18 or older to use synclyfe. We don’t knowingly collect data from anyone younger. If you believe someone under 18 has an account, tell us and we will delete it.

11. Changes to this policy

We’ll update the date at the top whenever this policy changes. If a change affects how your data is used in a meaningful way, we’ll tell you in the app or by email before it takes effect.

12. Grievance Officer and contact

For questions, requests or complaints about your data, contact our Grievance Officer:

We acknowledge complaints within 24 hours and resolve them within 15 days. More on the Contact & Grievances page.