Privacy Policy

This policy explains how the SyncHer mobile app (“SyncHer”, “the app”) and this website handle personal data. It is written to meet the EU/UK General Data Protection Regulation (GDPR) and similar laws.

1. Who we are

SyncHer is provided by Rise, Tokiostraße 12/2/117, 1220 Vienna, Austria (“we”, “us”). We are the controller of the personal data described in this policy. You can reach us at support@syncher.online.

2. Data we process

2.1 Data that stays on your phone

When you set up SyncHer, you can enter: a nickname for your partner, the start date of her last period, her usual cycle length, favorites (for example takeout or a comfort show), a free-text note, your goals, your reminder time, feedback on tips, and your AI tips choice. The app also stores your subscription status.

This profile is stored in the app's storage on your phone. The selected fields described below can be sent when you enable AI or explicitly submit a safety report. The daily forecast, built-in tips and reminder notifications are all produced on your phone. Deleting the app, or using Settings → Delete all data, removes it.

Because the app processes information about another person's menstrual cycle, it may be health data. Please only enter information you're comfortable keeping on your phone, and consider being open with your partner about using SyncHer.

2.2 AI tips

AI tips are optional. The app asks for your permission during setup, names the companies that receive the data before you agree, and sends nothing to them unless you agree; you can change your choice at any time by using Settings → Delete all data and choosing again during setup. While they are on, the app sends the following to generate a daily tip or a Chat reply:

• the current estimated cycle phase and cycle day;
• the favorites you selected;
• a short summary of which previous tips you marked as helpful or not;
• the day of the week;
• for Chat, your most recent messages in the conversation (up to the last 12, including Wingman's earlier replies), so Wingman can follow up.

Who receives this data. The request goes from the app to SyncHer's own server at Supabase in the EU (Ireland), then to OpenRouter, Inc. (United States), which forwards it to Microsoft Azure (United States), where OpenAI's GPT-5 mini model generates the reply. The reply comes back the same way. These providers process the text only to produce that reply: they do not store it afterwards and do not use it to train models. If we change the model or the companies that run it, we update this policy and the in-app disclosure before the change takes effect.

We do not automatically include the profile nickname, period dates or free-text favorites note in AI requests. Messages and reports are not automatically redacted: anything you type, including names, dates or contact details, can be transmitted if included in a message or selected response. Your Chat history is stored on your phone; it is sent only as described above and deleted with Settings → Delete all data. Please don't include names or other identifying details in your messages.

To protect the service from abuse, the app creates an anonymous session the first time it requests an AI tip. This creates a random identifier that isn't linked to your name, email or Apple account. We use it to limit the number of AI requests per install per day. Our server stores only that identifier and today's request count.

Legal basis and your choice: your consent (Art. 6(1)(a)). You can withdraw it at any time with Settings → Delete all data; SyncHer then asks again during setup, and choosing “No” stops AI tips. The app then uses tips built into the app and stops sending this information; processing that already happened is not affected. SyncHer keeps working either way.

Safety reports

If you select Report response and confirm Send report, we send the selected response and an anonymous identifier to our server for safety review. No surrounding conversation or cycle profile is included. This works independently of the AI tips switch. Reports are kept separately from chat, until safety review and any necessary follow-up are completed; deleting local chat does not delete a report. We use reports to investigate harmful output and improve safeguards. Contact support to request removal. The legal basis is our legitimate interest in maintaining a safe service.

2.3 Subscriptions and payments

Subscriptions are purchased through Google Play (and, once available, Apple's App Store). The store processes your payment; we never receive your card details. To unlock premium features, the app uses RevenueCat to check your subscription. RevenueCat processes an anonymous app user identifier, purchase and transaction details (such as product, price, currency, dates and store country) and basic device and app information.

Legal basis: performance of our contract with you (Art. 6(1)(b)) and our legitimate interest in preventing fraud (Art. 6(1)(f)).

2.4 Notifications

Daily reminders are scheduled locally on your phone. We don't use a push notification server and don't receive a device token.

2.5 This website

This website doesn't use cookies, analytics or tracking scripts, and loads no third-party resources. Like any web server, our hosting provider processes technical data such as IP address, requested page, time and browser type to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f)).

2.6 Support emails

If you email us, we process your email address and message to answer you (legitimate interest, Art. 6(1)(f)).

2.7 What we don't do

• No advertising, ad identifiers or cross-app tracking.
• No selling or sharing of personal data for marketing.
• No analytics SDKs in the app.
• No automated decisions with legal or similarly significant effects.

3. Service providers

We use the following providers (processors) under data processing terms. They may only use the data to provide their service to us.

AI requests are configured to use only providers that don't retain prompts and don't use them for training. Where data is transferred outside the EU/EEA or UK, we rely on adequacy decisions (such as the EU–US Data Privacy Framework, where the provider is certified) or Standard Contractual Clauses.

4. How long we keep data

• Data on your phone: until you delete it in the app or delete the app.
• AI tip and Chat content: not stored by us after the answer is returned, except a response you explicitly submit as a safety report. Our server doesn't log request or response content. Chat history stays on your phone until you start a new chat or delete all data.
• AI rate-limit counter: the most recent day's count is retained. Earlier counts for an identifier are removed when that identifier next makes an AI request; an inactive identifier's last count remains until backend records are removed.
• Anonymous session: Delete all data clears the session credentials on your phone and signs out; it does not delete the anonymous user record held by Supabase. Backend identifiers can remain after local deletion. Contact us before clearing your local session if you need help identifying and requesting removal of backend records.
• Subscription records: as long as needed to provide the subscription and meet legal and tax obligations.
• Server and website logs: short-term, according to our providers' log retention.
• Support emails: as long as needed to resolve your request.

5. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to object to processing, including by switching AI tips off. Most data is only on your phone, so you can view, change and delete it directly in the app.

For anything else, email support@syncher.online. Because we don't know who you are, we may need you to share your anonymous identifier or purchase details so we can find the relevant records. You also have the right to lodge a complaint with your local data protection authority.

6. Children

SyncHer is intended for adults. It isn't directed to anyone under 18, and we don't knowingly process children's data.

7. Security

Data sent from the app is encrypted in transit (HTTPS). Server-side access is limited to what each component needs. No system is perfectly secure, so please keep your phone protected with a passcode.

8. Changes to this policy

We'll update this page if our practices change, and change the effective date above. If a change materially affects how we use your data, we'll let you know in the app.

9. Contact

Rise
Tokiostraße 12/2/117, 1220 Vienna, Austria
support@syncher.online