Privacy policy

Account information includes your email address, display name, authentication provider, profile photo, timezone, locale, and notification preferences.

Content you choose to save may include names, contact details, birthdays, photos, social usernames, education details, notes, interactions, tags, and follow-ups about people you know. You decide what to add and are responsible for having an appropriate reason to store it.

We process session cookies or secure device tokens to keep you signed in. If you enable notifications, we store a browser or device push token, notification settings, delivery status, device platform, and basic user-agent information. We may also process IP address and request logs for security, reliability, and abuse prevention. We do not use advertising trackers.

• Provide, synchronize, and secure your account.
• Show your people, updates, reminders, and follow-ups.
• Send notifications only for the categories you enable.
• Respond to support requests and investigate technical problems.
• Prevent fraud, misuse, and unauthorized access.
• Meet legal obligations and enforce our terms.

We use service providers only to operate Siyi.app: Supabase for authentication, database, and file storage; Vercel for the web application; Expo, Apple Push Notification service, and Firebase Cloud Messaging for mobile notifications; and Apple or Google when you choose their sign-in option. These providers process information under their own terms and privacy commitments.

We may disclose information when required by law, to protect people or the service, or as part of a merger, acquisition, financing, or sale where the recipient agrees to protect it. We do not sell personal information or share it for cross-context behavioral advertising.

Your database rows are protected by account-level access policies. Uploaded photos are stored privately and displayed using short-lived signed links. Data is encrypted in transit, and service providers apply encryption and access controls to stored data.

We keep account content while your account is active. Revoked push tokens and notification delivery records may be retained for a limited period for security and delivery troubleshooting. When you delete your account, we delete your authentication identity, owned database rows, and uploaded photos. Limited backups or legal records may persist temporarily where required for disaster recovery, fraud prevention, or law.

You can correct information in the app, disable notification categories, revoke notification permission in your device or browser, export your data as JSON or CSV, and delete your account from Settings.

Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. Contact us to exercise a right. We may need to verify your identity before responding.

Our providers may process information in countries other than your own. Where required, we rely on contractual and legal safeguards for international transfers.

Siyi.app is not directed to children under 13, and we do not knowingly collect their account information. If local law requires a higher age to consent to online services, you must meet that age or have valid permission from a parent or guardian.

We may update this policy as the service changes. We will post the new effective date and provide additional notice when a change materially affects your rights. Questions and privacy requests can be sent to support@siyi.app.