Privacy Policy

1. Introduction

Synapse AI Inc. ("Synapse," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, wearable devices, and related services (collectively, the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile photo through Google OAuth. We do not store your Google password.

Contact and Relationship Data

With your explicit permission, we access your Google Contacts, Gmail metadata (sender, recipient, subject line, timestamps — never full email bodies), and Google Calendar events to build your relationship graph. We also process contacts you import via LinkedIn data exports, CSV uploads, or business card scans.

Wearable Device Data

If you use a Synapse Pendant or Synapse Spectacles, audio is captured and processed entirely on-device. Only extracted metadata — names, topics, and interaction summaries — is synced to your account. Raw audio never leaves your device unless you explicitly choose to export it.

Usage Data

We collect anonymized usage analytics such as feature engagement, session duration, and error logs to improve the Services. This data cannot be used to identify individual users.

3. How We Use Your Information

We use the information we collect to:

• Build and maintain your personal relationship graph
• Provide AI-powered relationship insights, reminders, and suggestions
• Enrich contact profiles with publicly available information
• Enable network visualization and intro path discovery
• Manage your pipelines, tags, and outreach workflows
• Send you product updates and service notifications (with your consent)
• Improve and develop new features based on anonymized usage patterns

4. On-Device Processing

Privacy is a core design principle at Synapse. All sensitive AI processing — including audio transcription, contact identification, and conversation analysis — happens locally on your device. We use on-device machine learning models (CoreML on iOS, TensorFlow Lite on Android) to ensure your most personal data never touches our servers.

Cloud sync is optional and uses end-to-end encryption when enabled. You retain full control over what data leaves your device.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following circumstances:

• Service Providers: Trusted third-party services that help us operate (e.g., cloud hosting, analytics). These providers are contractually bound to protect your data.
• Legal Requirements: When required by law, regulation, or legal process, or to protect the rights, safety, or property of Synapse, our users, or the public.
• With Your Consent: When you explicitly authorize sharing, such as requesting an introduction through the platform.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• AES-256 encryption for data at rest
• TLS 1.3 for data in transit
• End-to-end encryption for optional cloud sync
• Regular security audits and penetration testing
• SOC 2 Type II compliance (in progress)

While no system is 100% secure, we take every reasonable precaution to safeguard your data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. You may request deletion of your data at any time through the Settings page or by contacting us. Upon account deletion, all personal data is permanently removed from our systems within 30 days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in standard formats (JSON, CSV)
• Withdraw consent for data processing at any time
• Object to or restrict certain data processing activities

To exercise any of these rights, contact us at privacy@wearsynapse.com.

9. Google API Disclosure

Synapse's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request the minimum scopes necessary: read-only access to Gmail metadata, Calendar events, and Contacts.
• We never read, store, or process full email bodies.
• Google user data is used solely to provide relationship intelligence features to the authenticated user.
• We do not use Google data for advertising, market research, or any purpose unrelated to the Services.
• We do not allow humans to read Google user data except with your explicit consent, for security purposes, to comply with law, or when aggregated and anonymized for internal operations.

10. International Data Transfers

If you access our Services from outside the United States, your data may be transferred to and processed in the United States. We use Standard Contractual Clauses and other approved mechanisms to ensure adequate protection for international data transfers.

11. Children's Privacy

Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: