Privacy Policy

Last updated 10 September 2026

Synckro lets you watch YouTube videos in step with friends, with group chat and push-to-talk voice. This policy explains what the app collects, why it needs it, who else touches it, and how to get rid of it. "We" and "us" mean Synckro; "you" means the person using it.

1. What we collect

Your account

• Your email address, to confirm the account and let you reset a password.
• Your password, stored hashed by our authentication provider. We never see it and cannot recover it.
• Your username and display name, which is how other people see you. Your email is never shown to anyone else.
• An avatar image, if you choose to set one.

Things you create

• Chat messages you send in a room.
• Room names, and the YouTube links you add to a queue.
• Your votes on what plays next.

Room activity

• Which rooms you joined, and when you joined and left them.
• Whether you were the host, and whether you were muted.
• Your friends list and anyone you have blocked.

Reports

If you report somebody, we keep who reported whom, which room and message it concerned, and the reason given. Without that a report cannot be acted on.

Technical records

Our hosting provider keeps ordinary server logs — IP address, timestamps, which request was made. These exist for security and for dealing with abuse, and are not used to build a profile of you.

2. What we do not collect

• No analytics or advertising SDKs. There are none in the app. Nothing tracks what you tap.
• No location, contacts, or calendar. The app never asks.
• No photos beyond the single image you pick as an avatar.
• Nothing is sold or rented. We do not work with data brokers or ad networks.

3. Voice

Push-to-talk audio travels directly between phones, encrypted on the way. We do not record it, store it or listen to it, and it does not pass through our database.

Some networks — mobile carriers and office wifi especially — will not allow a direct connection. When that happens the audio is passed through a relay server operated by a third party. It stays encrypted through the relay and is not stored there, but you should know that it is happening.

4. Video

Videos play through YouTube's own embedded player. Your device talks to YouTube directly, so Google receives the request and may collect data about playback under its own privacy policy. Synckro does not host, copy or store any video.

5. Avatars are public

If you set an avatar, the image is stored at a public web address so it can load for everyone in your room. Anyone holding that link can view it. Do not upload an image you would not want seen outside the app.

6. Permissions the app asks for

• Microphone — used only while you are holding the talk button.
• Photo library — used only at the moment you pick an avatar.

Both can be refused or withdrawn in your phone's settings. The rest of the app carries on working without them.

7. Who else handles your data

These are service providers. Each gets only what it needs to do its job.

• Supabase — database, accounts, live updates, avatar storage.
• Resend — delivers confirmation and password reset emails.
• Metered — the voice relay described in section 3.
• Expo — delivers app updates.
• Apple and Google — distribute the app.

8. Keeping it, and deleting it

You can delete your account from Account settings inside the app. It is immediate and it is not a request queue.

• Your profile, username and avatar are removed.
• You are removed from any room you were in.
• Messages you sent stay in that room's history but are detached from your account, so they are no longer attributable to you. Deleting them outright would tear holes in other people's conversations.
• Reports involving you are kept, with identifying detail reduced, so a pattern of abuse cannot be erased by deleting an account and making a new one.
• Rooms close automatically once the last person leaves.

Backups taken before a deletion age out on their own within a short period.

9. Age

Synckro is for people aged 13 and over, or 16 where local law sets that as the minimum. It is not directed at children. If we find out an account belongs to someone below the age limit, we remove it.

10. Your rights

Depending on where you live you may have the right to see the data we hold about you, correct it, delete it, or receive a copy. Deletion is built into the app. For anything else, get in touch through the contact page.

11. Security

Every table in our database has row-level security switched on, so an account can only read the rooms it actually belongs to — the rules are enforced by the database itself, not just by the app. Traffic is encrypted in transit. No system is perfectly secure, and we will not pretend otherwise.

12. Changes to this policy

If this changes, the date at the top changes with it. Anything that materially affects you will be announced in the app rather than quietly edited in.

13. Contact

Questions about any of this go through the contact page.