Privacy Policy

The data controller is Wilkora, the developer of SynkApp. For any privacy-related request, contact us at: contact.synkapp@gmail.com.

We collect only the data necessary to provide the service:

• Account data: email address and display name provided during authentication (via Firebase Authentication).
• Business data: workspace settings, inventory items, recipes, sales orders, stock movements, and other records you create within the app.
• Business contacts and addresses:names, phone numbers, email addresses and postal addresses of partners, suppliers and customers that you enter in the app, plus the address (and the map coordinates derived from it) of your business locations. The app does not read your phone's GPS position.
• Photos and documents: images and files that you choose to attach to records (for example product photos or documents). They are stored in Firebase Storage as part of your workspace.
• In-app messages: messages exchanged between team members inside tasks and deliveries.
• Device data: device model and identifiers used for hardware discovery (Bluetooth/LAN printers) and device management.
• Voice input: if you use the dictation button, the microphone is used only while you speak. Speech is converted to text by the speech-recognition service of your device (Google); SynkApp does not record or store audio.
• Purchase history: orders and payment transactions recorded in your workspace.
• Usage data: error logs and crash reports (via Firebase Crashlytics) used exclusively to diagnose and fix bugs, and basic app-usage statistics and an app-instance identifier (via Firebase Analytics). Advertising ID collection by Firebase Analytics is disabled.
• Camera / barcode data: barcode values scanned by the camera or connected scanners. Processed locally and saved only if you create a record.
• Payment data: when online payments are enabled, payment method details (card number, expiry, CVV) are collected and processed exclusively by Stripe. SynkApp never receives or stores card data.
• Advertising data: if you view the Deals/Promotions feed or watch a rewarded video to unlock an optional AI feature, Google AdMob may collect your Advertising ID and ad interaction data to serve and measure ads. See Section 4.

• To provide and synchronise your business workspace across devices.
• To identify you when you log in and manage your session.
• To diagnose crashes and improve the app (Crashlytics, Firebase Analytics, anonymised logs).
• To verify the integrity of the app installation and protect against abuse (Firebase AppCheck / Play Integrity).
• To process online payments on behalf of merchants using Stripe Connect, where applicable.

We do not use your business/workspace data (inventory, orders, recipes, customer records) for advertising or profiling — it exists solely to run the SynkApp service. Separately, the app displays third-party advertising (Google AdMob) in specific optional areas: a native ad feed inside the Deals/Promotions screen, and a rewarded video ad you may choose to watch to unlock optional AI features beyond your free monthly quota. See Section 4 for what AdMob collects and how to manage consent.

SynkApp uses the following third-party services, each with its own privacy policy:

• Google Firebase (Authentication, Firestore, Cloud Functions, Crashlytics, Analytics, App Check, Storage) — firebase.google.com/support/privacy
• Stripe Billing — used to manage SaaS subscriptions for workspace owners. Stripe collects billing information (email, payment method) when a subscription is created. stripe.com/privacy
• Stripe Connect— used to process online payments from customers to merchants. When a customer pays online, card data is submitted directly to Stripe. SynkApp receives only a payment confirmation. Funds flow directly to the merchant's bank account via Stripe Connect Standard. stripe.com/privacy
• Google Play Integrity — used to verify the app has not been tampered with. developer.android.com/google/play/integrity
• OpenFoodFacts — used for barcode product lookup. No personal data is transmitted. world.openfoodfacts.org/privacy
• USDA FoodData Central — used to look up nutritional values of ingredients. Only the ingredient search text is transmitted; no personal data. usda.gov/privacy-policy
• Google Maps Platform (Maps SDK and Places) — used to search and pick the address of a business location on a map. The text you type in the address search is sent to Google to return suggestions. policies.google.com/privacy
• Google Gemini AI / Vertex AI (via Firebase AI) — used optionally for AI-assisted features. Requests may contain ingredient or recipe text, but no personal or financial data. ai.google.dev/gemini-api/terms
• ML Kit (Google) — used for on-device language detection and translation. Processing is performed locally on the device.
• Google AdMob— used to display advertising in two optional areas of the app: native ads in the Deals/Promotions feed, and a rewarded video ad you may choose to watch to unlock additional AI usage. AdMob may collect your Advertising ID, device information, and ad interaction data, and — where you consent — use them to personalise ads. On app start, a Google consent form (UMP / EU User Consent Policy) lets you accept or decline ad personalisation; you can change this at any time from the app's About → Privacy options screen. Declining consent limits (but does not remove) advertising and does not block use of the app. policies.google.com/technologies/ads

Your data is retained as long as your account exists. If you delete your account, all workspace data is deleted from Firestore within 30 days. Crashlytics logs are retained for 90 days. Payment transaction records are retained as required by applicable accounting and tax regulations (typically 5–10 years depending on jurisdiction).

Data in transit is encrypted via TLS. Data at rest in Firestore is encrypted by Google's infrastructure. Sensitive local configuration is encrypted on-device using Google Tink. Firebase Security Rules restrict access so that only authenticated users can read or write their own workspace data. Card payment data is handled exclusively by Stripe (PCI-DSS Level 1 certified) — SynkApp never touches card numbers.

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Eraseyour data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, contact us at contact.synkapp@gmail.com. We will respond within 30 days.

SynkApp is a business management tool intended for users aged 16 and over. We do not knowingly collect personal data from children.

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

For any questions or requests regarding this privacy policy, contact us at:
contact.synkapp@gmail.com