This Privacy Policy explains how Synapse: Device Check (“we”) collects, uses, and protects information when you use Synapse (the “Service”). We aim to collect only what we need to run the Service.

Information we collect

• Account information — the email address you sign in with (via email link or Sign in with Apple) and, for businesses, your company name and team members’ email addresses.
• Billing information — handled by our payment processor, Stripe. We receive subscription status and identifiers; we do not store your full card details.
• Diagnostic data — device model, iOS version, storage capacity, and the pass/fail results of the checks you run, which are recorded to issue and verify certificates.
• Usage data — basic logs needed to operate, secure, and debug the Service.

How we use information

We use information to provide and improve the Service, authenticate you, provision and meter your subscription’s credit pool, issue and verify certificates, provide support, and keep the Service secure. We do not sell your personal information.

Service providers

We share information with the vendors that power the Service: Supabase (authentication, database, and hosting of application data), Stripe (subscription billing), and Apple (Sign in with Apple and in-app purchases). These providers process data on our behalf under their own terms and security commitments.

Certificate verification

A certificate’s public verification page shows only non-identifying device facts (model, iOS version, capacity, pass/fail counts, issue date, and validity). It does not expose your account, email, or any personal identifiers.

Data retention

We retain account and certificate records for as long as your account is active and as needed to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account, subject to records we must keep.

Security

Access to your data is restricted by row-level security scoped to your account, and sensitive credentials are held only server-side. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard measures.

Your choices and rights

You may access or update your account information from your dashboard, and you may request a copy or deletion of your personal data by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Changes

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

Contact

Questions or requests? Contact us at support@premiermaxtech.com.