1. Who We Are
SyncForTwo ("we", "us", "our") is a specialized relationship software application that helps couples and households share and synchronize to-do lists, shopping items, photo notes, and reminders in real time. This Privacy Policy explains how we collect, process, and protect your personal data across our iOS app, Android app, and web services.
2. Data We Collect
We collect only the data necessary to provide seamless couple collaboration:
- Account Data: Your email address, display name, and securely salted/hashed passwords (bcrypt) upon registration.
- Shared Lists & Tasks: Content of lists, item names, checkoff timestamps, task notes, and comments created in your shared spaces.
- Photo Attachments & Avatars: Photos uploaded to list items or user profile avatars, stored in secure private storage buckets.
- Pair Connections: Pair tokens, invite codes, and connection statuses between you and your partner.
- Notification Preferences: Quiet hours, push notification preferences, and reminder schedules.
- Device Tokens: Push tokens to deliver real-time notifications via Apple Push Notification Service (APNs), Google Firebase Cloud Messaging (FCM), and Expo.
- Subscription Entitlements: Active tier status (Free Pair, Pair Premium, or Family) validated through RevenueCat. (We never collect, process, or store credit card numbers).
- Telemetry & Diagnostics: Anonymized crash logs and performance telemetry via Sentry and PostHog.
🚫 What We Never Collect: We do not collect your precise GPS location, your phone contacts address book, browsing history outside our app, or biometric data.
3. How We Use Your Data
Your data is used strictly to power and maintain the SyncForTwo service:
- To authenticate you and safeguard your private space.
- To synchronize lists, checkoffs, and love nudges in sub-second real time with your linked partner.
- To deliver push alerts when your partner updates a shared list or sends a nudge.
- To enforce plan tier limits and unlock Premium/Family features.
- To diagnose application bugs, crashes, and performance bottlenecks.
- To respond to customer support inquiries sent to our team.
We do NOT sell, rent, or monetize your personal or couple data to any third parties or advertising networks.
4. Third-Party Sub-Processors
We partner with industry-leading infrastructure providers to deliver our service:
• Supabase (supabase.com): PostgreSQL database and private file bucket storage (United States, GDPR-compliant). Stores account data, shared lists, and photo attachments.
• RevenueCat (revenuecat.com): Mobile subscription receipt validation and entitlement management. Receives anonymous App User IDs (never your email or payment details).
• Apple App Store & Google Play: In-app purchase processing. All payment card information is securely managed by Apple or Google; we never see or store your payment details.
• Expo & Firebase Cloud Messaging (FCM): Delivers instant push notifications to your mobile device via device tokens.
• Sentry (sentry.io): Crash diagnostics and error logging. Anonymized reports are automatically purged after 90 days.
• PostHog (posthog.com): Product analytics. Receives anonymized in-app interactions to help improve UX (no names or emails).
5. Data Retention & Erasure
We retain your data for as long as your account remains active. Upon deleting your account:
- Your account credentials (email, name, password hash) are permanently purged immediately.
- All your shared lists, checklist items, and photo attachments are permanently erased.
- Partner pairings are unlinked.
- Push notification tokens are deregistered.
6. Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction, you have the following rights:
- Right of Access & Portability: Export a full JSON copy of all your data directly in the app (Settings → Download My Data).
- Right to Erasure (Right to Be Forgotten): Delete your account and all data instantly via Settings → Delete Account, or via our public Delete Account Portal.
- Partial Data Deletion: Request deletion of specific items or attachments via our Data Deletion Portal.
- Right of Rectification: Update your profile name or email anytime in Settings.
7. Children's Privacy (COPPA)
SyncForTwo is strictly intended for individuals 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at hello@syncfortwo.com, and we will delete the data immediately.
8. Contact Us
For privacy inquiries, GDPR/CCPA requests, or security disclosures, please reach out to us at:
Application: SyncForTwo
Version: 1.0 — August 6, 2026