1. Who is responsible
Sinaps decides what personal data is collected and why, and is the data controller for it. Sinaps is operated from Chișinău, Republic of Moldova. A Moldovan company is being registered; these documents will be updated with its registered name and address once it is. Until those details are published, write to privacy@sinaps.md to reach whoever is responsible for your data.
For anything in this notice, including any request about your data, write to privacy@sinaps.md.
2. What we collect
Account: your email address, and — if you sign in with Google — the account identifier and display name Google gives us. We never receive your Google password.
Profile: the display name you choose, your language track, your specialty, your year of study, and the referral code you arrived with, if any.
Study activity: which questions you answered and whether each was right or wrong, your attempts and their scores, and which lessons you have marked as read. This is what produces your mastery percentages, accuracy, and streak.
Material you send us: the files you upload and the notes you attach to them.
Devices and sessions: a record of the devices you sign in from, used to keep you signed in and, after the beta, to enforce account sharing limits.
Technical data: server and error logs, which include IP address and browser details, and product analytics about which screens are used.
We do not collect health data about you, and you should not send us any.
3. Why we use it, and on what basis
To provide the service you asked for — your account, your library, your progress. This is necessary to perform our agreement with you.
To keep the service secure and working, including preventing account sharing and bulk extraction, and to understand which parts of the product are actually used. This is our legitimate interest in running a viable service, balanced against your interests.
To send you service email — confirming your address, resetting your password. Marketing email, if we ever send any, will be by consent and separately unsubscribable.
To meet legal obligations, including tax and accounting records once the service is paid.
4. Who else handles it
We use a small number of processors, each bound to use the data only for what we ask:
Supabase — database, authentication, and file storage. Vercel — application hosting. Google — only if you choose to sign in with Google. Resend — sending service email. PostHog — product analytics. Sentry — error reporting. A payment provider acting as merchant of record will handle payment data once the service is paid; we never see your card details.
We do not sell your data, and we do not share it with advertisers.
5. Where it is stored, and for how long
Your data is stored in the European Union. Some processors are established outside it; where that is the case, transfers rely on the safeguards those providers offer, such as standard contractual clauses.
We keep your account data while your account exists. When you close it, your profile, study activity, and uploaded files are deleted within 30 days, except where we must keep a record for tax or accounting purposes.
Server and error logs are kept for a short period — normally no more than 90 days.
6. Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to uses based on our legitimate interests, and ask for your data in a portable form.
Write to privacy@sinaps.md and we will answer within 30 days. You can also complain to the National Centre for Personal Data Protection of the Republic of Moldova, or to the data protection authority where you live.
7. Cookies and local storage
Sinaps sets a cookie to keep you signed in, and stores your language, theme, and accent choices in your browser so the app looks the same next time. These are necessary for the service to work as you have set it up.
We do not use advertising cookies and we do not track you across other websites. If you try the demo without an account, your five answers are held in your browser's session storage so they can follow you into your account if you create one; nothing is sent to us until you do.
8. Changes
If we change this notice in a way that affects you, we will tell you by email or in the app before the change takes effect.