Privacy Policy

This Privacy Policy describes how KOOB HUB S.R.L. ("we", "us", or "our") collects, uses, and protects your personal data when you use the SyncDays application ("the App").

1. Data We Collect

1.1 Account Information

• Email address - Used for authentication, account recovery, and important notifications
• Password - Stored securely using industry-standard hashing (never stored in plain text)
• Display name - Optional, used to personalize your experience

1.2 User-Created Content

• Calendar events - Event names, dates, categories, notes, and styling preferences
• Habits - Habit titles, frequency settings, and completion records
• Backlog items - Books, games, movies, and TV shows you're tracking, including progress
• Exercise logs - Workout data, exercises, sets, reps, and weights
• Categories and baskets - Your organizational preferences

1.3 Connected Services Data

• Google Calendar - If you connect your Google account, we access your calendar events in read-only mode to display them alongside your SyncDays events. We do not modify your Google Calendar.

1.4 Usage and Technical Data

• Analytics events - Screen views, feature usage, and app interactions (anonymized)
• Device information - Browser type, operating system, screen size
• Error logs - Technical errors to help us improve the app

1.5 Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. Stripe may collect payment information in accordance with their Privacy Policy.

2. How We Use Your Data

• Provide the service - Store and sync your calendar, habits, and other content across devices
• Authentication - Verify your identity and secure your account
• Improve the app - Analyze usage patterns to fix bugs and develop new features
• Communication - Send account-related emails (password reset, security alerts)
• Customer support - Respond to your inquiries and help resolve issues

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract performance - To provide the SyncDays service you signed up for
• Legitimate interests - To improve our service, ensure security, and prevent fraud
• Consent - For optional features like Google Calendar integration
• Legal obligations - To comply with applicable laws

4. Third-Party Services

We use the following third-party services to operate SyncDays:

5. Data Retention

• Active accounts - Your data is retained as long as your account is active
• Deleted accounts - When you delete your account, all personal data is permanently deleted within 30 days
• Backups - Encrypted backups may retain data for up to 90 days for disaster recovery
• Analytics - Anonymized usage data may be retained indefinitely for statistical purposes

6. Your Rights (GDPR)

As an EU resident, you have the following rights:

• Right to access - Request a copy of your personal data
• Right to rectification - Correct inaccurate data
• Right to erasure - Delete your account and all associated data
• Right to data portability - Export your data in a machine-readable format
• Right to restrict processing - Limit how we use your data
• Right to object - Object to processing based on legitimate interests
• Right to withdraw consent - Disconnect Google Calendar or revoke other consents at any time

To exercise these rights, use the options in the app's Settings screen or contact us at hello@syncdays.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data transmitted using TLS/HTTPS encryption
• Passwords hashed using industry-standard algorithms
• Database access restricted with Row Level Security (RLS)
• Regular security audits and updates
• Access to personal data limited to authorized personnel only

8. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: