Privacy Policy

1. Introduction

SyncNexa Limited (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our website, mobile applications, and services (collectively, the “Services”).

By using our Services, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

When you create a SyncID account, we collect:

• Your chosen SyncTag (public handle)
• Your device public key
• Your recovery email or phone number (hashed and encrypted)
• Your enrollment status as confirmed by your educational institution
• Any optional profile information you choose to add (such as portfolio details)

2.2 Information We Do NOT Collect

We do not collect or store:

Your educational institution remains the source of truth for your enrollment status. We only receive a simple confirmation: whether you are a currently enrolled student.

2.3 Information Collected Automatically

When you use our Services, we may automatically collect:

• Device type and operating system
• App version
• IP address
• Usage data (such as which features you use)

This information helps us improve performance and security.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Verify your student status with your institution
• Facilitate secure consent when you share your status with organizations
• Provide, operate, and improve our Services
• Send important updates about your account or our Services
• Respond to your inquiries and support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. How We Share Your Information

4.1 With Your Consent

We only share your verified status with organizations when you explicitly approve. Before any organization receives your data, you will see exactly what is being requested.

4.2 What Organizations Receive

When you approve a verification request, the organization receives:

• A pairwise ID (unique to you and that organization)
• Your student status (active or inactive)
• Your institution name (if requested and you approved)
• Your institution code (if applicable)

Organizations do not receive your name, SyncTag, documents, or any other personal information.

4.3 Pairwise IDs

To protect your privacy, each organization receives a unique identifier for you. This means organizations cannot cross-reference your identity across platforms.

4.4 Service Providers

We may share limited information with trusted service providers who help us operate our Services, such as email delivery, push notifications, and cloud hosting. These providers are contractually bound to keep your information confidential.

4.5 Legal Requirements

We may disclose information if required by law, regulation, or a valid court order.

5. Data Security

We take data security seriously. We use:

• End-to-end encryption
• Mutual TLS for all communication with schools
• Biometric authentication on your device
• Secure key management

No system is 100% secure, but we work hard to protect your data.

6. Data Retention

We retain only what's necessary:

• Your account data is kept while your account is active.
• If you delete your account, your data is permanently removed within 30 days.
• Revocation records are retained for fraud prevention and audit purposes, but they contain no personal information.

7. Your Rights

You have the right to:

• Access your data
• Correct inaccurate information
• Delete your account and data
• Export your credentials and portfolio data
• Revoke any organization's access at any time
• Withdraw consent for any future verification

To exercise these rights, contact us at privacy@syncnexa.co.

8. Children's Privacy

Our Services are intended for students aged 13 and above. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the effective date and notify you through the app or by email.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: