Privacy Policy
Last updated: 25 July 2026
1. Who we are and which law governs us
SyncUp is an app that connects people going to the same gigs and festivals. This policy describes which personal data we process, what for, and what your rights are, under Ley 25.326 de Protección de Datos Personales (the Personal Data Protection Act of the Argentine Republic) and its implementing rules.
Controller of the processing and of the database: SyncUp. Contact channel for anything to do with your data: privacidad@syncup.com.ar (while the branded domain is not live, write to us at syncup.ar@gmail.com).
2. Data we collect
2.1 Data you give us
- Account: email address, name and date of birth (used to work out your age — the app is for adults 18 and over only)
- Profile: city (you pick it by hand, we do not use GPS and we do not track you), bio, music profile (the artists and genres you like), the vibes you pick from a closed list (“chill” or “late night”, for example, which we use to recommend plans to you) and up to 3 profile photos
- Language: the language you choose to use the app in (Spanish or English). If you choose none, we take the one from your device. We store it so your notifications and the copy the AI writes come to you in that language
- Content: messages you send in the group chats and event suggestions
2.2 Data generated as you use the app
- Device: device type, operating system and the push notification token of every device where you have the app with push enabled. If you stop using a device or sign out on it, we delete its token
- Usage: events viewed, plans created or joined, general activity in the app
- Technical: IP address, error logs and performance metrics
We use no tracking or advertising cookies. Our usage analytics run on browser local storage (on the web) and on the device itself (in the app). The only cookies we use are the ones strictly needed to keep you signed in.
2.3 Public invite link
When you share a plan, a public link is generated that anyone can open without an account. That page shows a reduced version of the plan (title, date, place, city and vibes) and, of the host, only their first name, their initial and whether they are verified. It does not show your last name, your photo, the plan description, the member list or any spot counts, and we ask search engines not to index it. The link stops working if the plan is hidden or deleted.
3. What we use your data for (purpose)
- Running the service: creating your account, showing your profile to other users and enabling the groups and chats
- Recommendations: suggesting groups and events based on your city and your music profile
- Safety and moderation: approving photos by hand, moderating messages with AI before they become visible, and processing reports and blocks
- Communication: notifications about requests, messages and relevant events
- Product improvement: aggregate usage analytics and error monitoring
- Legal compliance: responding to requests from the competent authorities
We do not sell your personal data and we do not share it with advertisers.
4. Legal basis: your consent
We process your data on the basis of your free, express and informed consent (arts. 5 and 6, Ley 25.326), which you give when you create your account and accept this policy. You can withdraw your consent at any time by deleting your account or writing to the contact channel; withdrawal does not affect the lawfulness of the processing that came before.
5. Providers and international transfers
To run SyncUp we use infrastructure providers that process data on our behalf. Their servers are mainly in the United States:
| Provider | What we use it for | Country |
|---|---|---|
| Clerk | Authentication and session management | USA |
| Neon (on AWS) | Main database | USA |
| Cloudflare R2 | Profile photo storage | USA |
| Ably | Real-time messaging (group chat) | USA |
| Groq | Automatic message moderation with AI | USA |
| PostHog | Product usage analytics | USA |
| Sentry | Technical error monitoring | USA |
| Vercel | Hosting for the web platform and the API | USA |
| Expo | Sending push notifications | USA |
The United States is not recognised as a country with an adequate level of protection under art. 12 of Ley 25.326. The transfer relies on your express consent to this policy and on the data processing agreements we hold with each provider, which oblige them to use the data only to provide us the service and with equivalent security measures.
6. Your rights (access, rectification, updating and erasure)
As the data subject, Ley 25.326 guarantees you these rights, which you can exercise free of charge:
- Access: download a copy of your data instantly from the app (Profile → Download my data). You can also request it through the contact channel; we reply within 10 calendar days (art. 14; free of charge at intervals of no less than 6 months, unless there is a legitimate interest)
- Rectification and updating: correct inaccurate or out-of-date data, from the app or through the contact channel. We resolve it within 5 business days (art. 16)
- Erasure: request the deletion of your account and of all your data. We process it within 5 business days (art. 16) — see how to delete your account
- Withdrawal of consent: at any time, with no retroactive effect
To exercise any of these rights, write to us at privacidad@syncup.com.ar (while the branded domain is not live, write to us at syncup.ar@gmail.com) from the email registered on your account.
7. Data retention
We keep your data for as long as your account is active. If you request deletion, we erase your account, your photos, your messages and your sign-in data within 5 business days. We only keep what is strictly necessary where a legal obligation or an ongoing claim requires it, and for as long as that requires.
8. Security
We apply technical and organisational measures in line with art. 9 of Ley 25.326: encryption of data in transit and at rest, role-based access control, signed short-lived URLs for photos, and prior moderation of all public content. No system is infallible, but if a security incident affects your data we will tell you.
9. Minors
SyncUp is exclusively for adults 18 and over. Date of birth is mandatory at sign-up and we do not allow accounts belonging to minors. If we detect (or you tell us) that someone under 18 created an account, we delete it together with their data immediately.
10. Supervisory authority (AAIP)
SyncUp's user database is registered with the Registro Nacional de Bases de Datos (RNBD), the national database registry held by the Agencia de Acceso a la Información Pública (AAIP), Argentina's public information access agency.
As the supervisory body for Ley 25.326, the AAIP has the power to handle the complaints and claims brought by anyone whose rights are affected by a breach of the personal data protection rules in force. More information at argentina.gob.ar/aaip.
11. Account deletion
You can request the deletion of your account and of all your data at Delete account. The request deactivates your account immediately and the definitive deletion is completed within 5 business days.
12. Changes to this policy
If we change this policy, we publish the new version on this page and update the “Last updated” date. If the change is material, we also tell you inside the app.
13. Contact
For any question about this policy or about your personal data: privacidad@syncup.com.ar (while the branded domain is not live, write to us at syncup.ar@gmail.com).
General support: contact form