Privacy Policy

Last updated 11 September 2026

Synckro lets you watch YouTube and Vimeo videos in step with friends, with group chat and push-to-talk voice. This policy explains what the app collects, why it needs it, who else touches it, and how to get rid of it. "We" and "us" mean Synckro; "you" means the person using it.

1. What we collect

Your account

• Your email address, to confirm the account and let you reset a password.
• Your password, stored hashed by our authentication provider. We never see it and cannot recover it.
• Your username and display name, which is how other people see you. Your email is never shown to anyone else.
• An avatar image, if you choose to set one.

Things you create

• Chat messages you send in a room.
• Room names, and the video links you add to a queue.
• Your votes on what plays next.

Room activity

• Which rooms you joined, and when you joined and left them.
• Whether you were the host, and whether you were muted.
• Your friends list and anyone you have blocked.

Reports

If you report somebody, we keep who reported whom, which room and message it concerned, and the reason given. Without that a report cannot be acted on.

Technical records

Our hosting provider keeps ordinary server logs — IP address, timestamps, which request was made. These exist for security and for dealing with abuse, and are not used to build a profile of you.

2. What we do not collect

• No analytics or advertising SDKs. There are none in the app. Nothing tracks what you tap.
• No location, contacts, or calendar. The app never asks.
• No photos beyond the single image you pick as an avatar.
• Nothing is sold or rented. We do not work with data brokers or ad networks.

3. Voice

Push-to-talk audio travels directly between phones, encrypted on the way. We do not record it, store it or listen to it, and it does not pass through our database.

Some networks — mobile carriers and office wifi especially — will not allow a direct connection. When that happens the audio is passed through a relay server operated by a third party. It stays encrypted through the relay and is not stored there, but you should know that it is happening.

4. Video

Videos play through the provider's own embedded player — YouTube's or Vimeo's. Your device talks to them directly, so they receive the request and may collect data about playback under their own policies: Google's and Vimeo's. Synckro does not host, copy or store any video. Vimeo playback is asked for with Do Not Track set, which tells Vimeo not to record the viewing session against the person watching.

5. Avatars are public

If you set an avatar, the image is stored at a public web address so it can load for everyone in your room. Anyone holding that link can view it. Do not upload an image you would not want seen outside the app.

6. Permissions the app asks for

• Microphone — used only while you are holding the talk button.
• Photo library — used only at the moment you pick an avatar.

Both can be refused or withdrawn in your phone's settings. The rest of the app carries on working without them.

7. Who else handles your data

These are service providers. Each gets only what it needs to do its job.

• Supabase — database, accounts, live updates, avatar storage.
• Resend — delivers confirmation and password reset emails.
• Metered — the voice relay described in section 3.
• Expo — delivers app updates.
• Apple and Google — distribute the app.

8. Keeping it, and deleting it

You can delete your account at any time: in the app under Account → Delete account, or on the web at synckro.com/delete-account. It happens straight away; it is not a request that waits in a queue.

Deleted

• Your email address and password.
• Your profile: your username and profile picture.
• Your friends list, the people you blocked, and your votes on queued videos.
• The record of which rooms you were in.

Kept, but no longer linked to you

• Messages you sent stay in that room's chat, shown as from a deleted user. Removing them outright would tear holes in other people's conversations.
• Videos you added to a queue stay in it, and rooms you hosted are closed rather than erased.
• Reports you filed, or that were filed about you, are kept so the reported content can still be reviewed.

No backup copy of a deleted account is kept. Our authentication provider keeps a technical log of sign-in events, such as the time and IP address, for security, and clears it on its own schedule.

9. Age

Synckro is for adults: you must be 18 or over to use it. It is not directed at children or teenagers. If we find out an account belongs to someone under 18, we remove it.

10. Your rights

Depending on where you live you may have the right to see the data we hold about you, correct it, delete it, or receive a copy. Deletion is built into the app and available at synckro.com/delete-account. For anything else, get in touch through the contact page.

11. Security

Every table in our database has row-level security switched on, so an account can only read the rooms it actually belongs to — the rules are enforced by the database itself, not just by the app. Traffic is encrypted in transit. No system is perfectly secure, and we will not pretend otherwise.

12. Changes to this policy

If this changes, the date at the top changes with it. Anything that materially affects you will be announced in the app rather than quietly edited in.

13. Contact

Questions about any of this go through the contact page.