SynQ Application – Privacy Policy

Personal Information You Provide

• Handle name (username)
• Profile picture
• Location data (precise or approximate, used for location-based features).

Sensitive Information

Some of the information we process may be considered sensitive in certain jurisdictions, such as racial or ethnic origins, religious beliefs, or biometric data. We do not collect sensitive personal information without explicit consent where required by law. If sensitive data is processed (e.g., geolocation data or AI-generated inferences), we ensure strict security measures and provide opt-out options where applicable.

Application Data

If you use our application(s), we may collect additional information with your permission:

Face Data

• Collection of Face Data:Our application temporarily collects face data solely for the purpose of liveness detection and face matching. This data is processed locally within the app and is not permanently stored in any external server or database. Additionally, users may choose to store their own facial image locally within the app as a profile picture, but this data remains on the user's device.
• Use of Face Data: Face data is used exclusively for liveness detection and face matching to ensure secure authentication. The collected data is transmitted to our cloud-based processing system for validation. However, no face data is stored on our servers; only a response (match/no-match) is returned to the app.
• Disclosure of Face Data: We do not store, share, or disclose face data to any third party. The face data is used only during the active authentication process and is discarded immediately after processing.
• Sharing of Face Data:We do not share any facial data with third parties, advertisers, or external entities. The data is used exclusively for the app's core functionality.
• Retention of Face Data: We do not retain face data beyond the duration required for liveness detection and authentication. The data is never stored persistently on any server and remains only temporarily in the local storage of the app when used as a profile picture.

• Geolocation Information:In order to provide you with certain location-based services, we require access to your device's geolocation information. This access may be granted continuously or only while you are using our mobile application(s). Please note that this permission is mandatory for the app's functionality and cannot be disabled. The collected location data will be securely stored in our database. You may manage or update these permissions at any time in your device's settings.
• ACCESS_BACKGROUND_LOCATION: To get the location in background so live location tracking can be possible.
• Mobile Device Access:We may request access or permission to certain features from your mobile device, including your device's camera, microphone, storage, sms messages, and other features. If you wish to change our access or permissions, you may do so in your device's settings.
• DocumentPicker and ImagePicker: Used instead of MediaStore API for accessing documents and media.
• Push Notifications: We may send push notifications related to your account or certain app features. You can opt out in your device settings.
• Contact Backup & Restore: We offer users an optional feature to back up and restore their contacts to ensure continuity and ease of use when switching devices or reinstalling the app.
  • What we collect – If you enable this feature, your contact list (handle) is securely collected and uploaded.
  • How it's stored – Contact data is encrypted and stored on the InterPlanetary File System (IPFS) – a decentralized and secure storage protocol. The data is mapped only to your unique handle within the app, so only you can access your backed-up contacts.
  • Privacy & access control – Your contacts are never shared with any third party. No other user or external party (including the app provider) can view or retrieve your backed-up contact data. The encrypted IPFS data is only accessible from your device via your handle authentication.
  • Purpose of use – The contact backup feature is provided solely to improve your user experience by helping you recover your contact list easily after reinstalling the app.

This information is primarily used to maintain security, troubleshoot issues, and improve app performance.

Google API & Third-Party Integrations

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Additionally, we may collect data from third-party integrations (e.g., analytics tools) to enhance user experience while ensuring compliance with privacy laws.

Analytics and Usage Data

We use analytics services such as Firebase Analytics to understand how users interact with the app, improve app performance, measure feature engagement, and enhance user experience.

Analytics data may include:

• App usage information
• Screen views and session duration
• Feature interactions
• Device and operating system information
• App performance and crash diagnostics

We do not collect or store sensitive authentication credentials such as PINs, wallet recovery phrases, or private keys through analytics services.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

• Personalizing user experience.
• Enhancing app features and interactions.
• Managing accounts and secure access.
• Enabling decentralized transactions and payments.
• Supporting location-based functionality.
• Ensuring legal compliance.
• Improving service reliability and security.

Legal Bases for Processing (GDPR)

• Your consent
• The performance of a contract
• Compliance with legal obligations
• Our legitimate interests (e.g., service improvement, fraud prevention)

We do not sell your personal data. We may share it:

• With service providers for functions like cloud storage or payment processing.
• For legal obligations and lawful requests.
• To protect the rights, safety, and security of users and SynQ Social.
• In aggregated or de-identified form for business analysis or research.
• Regionally with Australia, New Zealand, and the United States for compliance

All sub processors operate under binding data processing agreements. A list is available upon request.

• Access and Update: Modify your personal data anytime.
• Delete Your Data: Request deletion from our servers.

Account Deletion

Users who wish to permanently delete their account and all associated personal data can submit a deletion request. Upon receiving your request, we will process the deletion within 30 business days.

Important Note: This process will permanently remove your data, and it cannot be undone.

In-App Messaging

At the Time of Account Deletion: “Your account will be deleted in [X] days. If you change your mind, simply log back in.”

If User Tries to Log In Again:“You have [X] days left to delete your account. Changed your mind? Log back in.”

Note: The number of days will vary based on the date and time of the deletion request.

• Manage Privacy Settings: Control your data preferences.
• Withdraw Consent: Manage consent for data processing.

To exercise these rights, email us at privacy@trustgrid.com.

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted both at rest and during transmission (AES-256).
• Access Control: Only authorized personnel have access to personal information (Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) protected).
• Data Minimization: We only collect data necessary to deliver the service.
• Standard Contractual Clauses (SCCs): Secure international data transfers.
• Trusted Execution Environment (TEE) for enhanced security.
• Retention: We retain data only as long as necessary to fulfill processing purposes and comply with legal obligations. We securely delete or anonymize data once no longer required.

SynQ Social is not intended for children under 13. We do not knowingly collect data from children. If you believe your child has provided us with personal data, contact us and we will delete it promptly.

SynQ Social is committed to creating a safe digital space and strictly opposes any form of child exploitation or abuse. We do not allow:

• Content or external links that encourage, show, or support harm or sexual exploitation of children
• Any attempts to contact, manipulate, groom, or exploit minors
• Any form of child sexual abuse material (CSAM), including illustrated, animated, or AI-generated content

Users can report harmful posts for fast review. Content that violates these standards is removed in line with applicable child protection laws.

SynQ Social uses decentralized identity mechanisms for secure authentication and verification. Wallet addresses and transaction data are encrypted and securely stored. SynQ Social does not have access to your private keys. All transactions are executed securely on the blockchain.

We use IPFS (InterPlanetary File System) for secure, decentralized file and media storage. This approach improves security, resilience, and user data ownership.

SynQ Social integrates with third-party services to enhance functionality:

• Maps: Location-based services and interactive mapping.
• Push Notifications: Real-time updates and alerts.
• Face Landmark and Liveness Detection: For secure facial verification and interaction.

We use analytics services like Firebase Analytics to understand user interactions, improve app performance, measure feature engagement, and enhance user experience.

All integrations are governed by strict privacy obligations. Subprocessors are bound by data processing agreements. A list of current providers is available upon request.

Your personal data may be transferred outside your country of residence. We ensure that any such transfers comply with applicable legal requirements, including the use of Standard Contractual Clauses (SCCs) or by obtaining your explicit consent.

We currently do not use cookies or tracking technologies.

In the event of a data breach, we will promptly notify affected users and relevant authorities within 72 hours, in compliance with GDPR and other regulatory standards. Our response includes:

• Immediate containment of the breach.
• Identification of affected data categories.
• Notification to impacted users.
• Steps to prevent future occurrences.

SynQ Social does not currently respond to Do Not Track (DNT) signals. However, we respect your privacy by minimizing data collection and providing control over privacy settings.

Users of SynQ Social have the following rights:

• Right to Access: Obtain information on your personal data processed by us.
• Right to Rectification: Request corrections of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Limit the processing of your data under specific scenarios.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Opt out of processing for direct marketing or legitimate interests.
• Right to Non-Discrimination (CCPA): Exercising your rights will not result in any form of discrimination.

To exercise any of these rights, contact us at privacy@trustgrid.com. We will respond to your request in accordance with legal timelines.

We comply with:

• Australia's Privacy Act 1988
• New Zealand's Privacy Act 2020
• South Africa's Protection of Personal Information Act (POPIA)
• United States Privacy Laws, including those of California, Virginia, and other states.

We may update this Privacy Policy periodically. Changes will be posted on this page and may be communicated via the app or via email as required by law.

If you have any questions or concerns about this Privacy Policy, please contact us at:

You may Review, Update, or Delete your personal data at any time by contacting us at privacy@trustgrid.com. Verification may be required before processing your request.

Our platform may contain user-generated content that some individuals may find sensitive, upsetting, or inappropriate. We do not remove such content unless it violates our Community Guidelines or applicable laws; however, we may limit its visibility and apply content warnings.

Types of Sensitive Content

The app may restrict or reduce visibility of content that includes (but is not limited to):

• Potentially upsetting or disturbing visuals
• Graphic or violent imagery
• Sexual or suggestive content
• Self-harm or mental health–related discussions
• Dangerous or harmful activities
• Hate speech or harassment indicators
• Misinformation flagged by trusted sources

We implement measures to ensure such content is not prominently displayed, especially to users under the age of 18.

Sensitive Content Control

Users may have access to Sensitive Content Controls, which allow them to choose how much potentially sensitive content they want to see from accounts they do not follow. These settings do not affect content from accounts the user already follows, such as friends or family.