Privacy Policy

sinced ("we", "us", "our") is operated from Sweden and is subject to the General Data Protection Regulation (GDPR). This Privacy Policy explains what personal data we collect, why we collect it, and your rights regarding that data.

1. Data Controller

sinced is the data controller for the personal data collected through this Service. Contact: [email protected]

2. What Data We Collect

• Account data: name, email address, date of birth, gender — collected at signup
• Moment data: titles, dates, notes, and categories you create within the app
• Photos: images you voluntarily upload to your moments
• Session data: login session stored locally in your browser's localStorage

3. Legal Basis for Processing (GDPR)

• Contract performance: processing your account and moment data is necessary to provide the Service
• Consent: you explicitly agree to these terms at signup
• Legitimate interest: ensuring security and preventing abuse

4. How We Use Your Data

We use your data exclusively to provide and improve sinced. We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

5. Infrastructure & Service Providers

We use the following services to operate sinced. Your data is processed by these providers solely to deliver the Service and is never used for their own purposes:

• Supabase (supabase.com) — database and file storage, hosted in AWS EU regions
• Resend (resend.com) — transactional email delivery (account confirmation)

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data — moments, photos, and account information — is permanently deleted within 24 hours. You can delete your account at any time from your account settings.

7. Cookies & Local Storage

sinced uses browser localStorage to maintain your login session and remember app preferences (e.g. last seen version). We do not use tracking cookies or third-party analytics. No cookie consent banner is required as we do not use non-essential cookies.

8. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

• Access: request a copy of the data we hold about you
• Rectification: correct inaccurate data from your account settings
• Erasure: delete your account and all data via account settings
• Portability: request your data in a portable format
• Objection: object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your national data protection authority (in Sweden: IMY — Integritetsskyddsmyndigheten).

9. Data Security

All data is transmitted over HTTPS. Database access is protected by row-level security (RLS) — users can only access their own data. Photos are stored in access-controlled cloud storage.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Privacy questions or data requests: [email protected]