HeartSync ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights under applicable data protection law, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
| Category | Examples |
|---|---|
| Account data | Email address, phone number, password (hashed) |
| Profile data | Display name, date of birth, gender, city, country, bio, photos, interests, lifestyle answers |
| Communication data | Messages you send to matches |
| Payment data | Transaction ID, plan purchased (card/bank details processed by Stripe or PayPal — we do not store raw card numbers) |
| Reports & feedback | Reports you submit about other users |
| Category | Examples |
|---|---|
| Usage data | Pages visited, features used, swipe actions, login timestamps |
| Device data | Browser type, operating system, screen resolution |
| Network data | IP address (used for approximate location and fraud prevention) |
| Cookies | Session identifiers, preference cookies (see Section 4) |
We use your data for the following purposes and on the following legal bases:
We do not sell your personal data to third parties.
We may share your data with:
We use the following types of cookies:
We do not use third-party advertising cookies. You can manage cookies through your browser settings; note that disabling strictly necessary cookies will prevent the Service from functioning.
We retain your personal data for as long as your account is active. After account deletion:
We implement appropriate technical and organisational measures to protect your personal data, including:
No system is 100% secure. Please use a strong, unique password and report any suspected breach to tony@synapex.io.
Depending on your location, you may have the following rights:
Request a copy of all personal data we hold about you.
Correct inaccurate or incomplete data via your profile settings.
Delete your account and personal data (subject to retention obligations).
Receive your data in a structured, machine-readable format (JSON).
Object to processing based on legitimate interests, including profiling.
Request that we limit how we process your data in certain circumstances.
You also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national DPA in the EU).
California residents may request disclosure of categories and specific pieces of personal information collected, and may request deletion of personal information, subject to certain exceptions. We do not discriminate against users who exercise their CCPA rights. To submit a request, email tony@synapex.io with subject "CCPA Request".
HeartSync is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will immediately delete their account and all associated data. If you believe a minor has registered, please contact tony@synapex.io.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the Service at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
HeartSync operates as the data controller for information collected through this Service.