سياسة الخصوصية

1. About this policy

This Privacy Policy explains what information YouSynk collects, why, who can see it, where it is kept, how long we keep it, and the choices and rights you have. It covers the YouSynk mobile app, the share pages at yousynk.com that open when someone follows a YouSynk link or scans a YouSynk QR code (addresses beginning yousynk.com/u/ and yousynk.com/b/), and the yousynk.com website.

YouSynk provides the service and decides why and how the information described here is used. In the language of European data protection law, YouSynk is the controller of this information. YouSynk is being set up as a company; the company's legal name and registered address, and its representative in the European Union, will be named in this section before YouSynk's general launch, in a new version of this policy.

This policy applies to you if you have a YouSynk account, and also if you do not: for example if you open someone's share page, if you leave your details for a YouSynk user on a share page, or if a YouSynk user has your number in their phone's contacts or saves your details in their account. Section 6 is written for people without an account.

If something here is unclear, write to us at support@yousynk.com.

2. The short version

You sign in with your phone number, or with Apple or Google and a phone number. We keep that number, the details you choose to add, and the profiles you build from them.

Nothing you add is shared as a whole. You build profiles, and each profile shows only the details you put on it, to the people you share that profile with. Your account (its name, headline and what you choose to make public on it) can be found by other YouSynk users in search, unless you switch off being found; your profiles cannot.

If you choose to import your phone's contacts, we keep their names and phone numbers on our servers, sealed under a key that belongs to your account, so that we can show you who is on YouSynk, tell you when one of them joins and suggest people you may know. You can delete them at any time.

When you share something with a person, they keep what they received. If you later remove them, block them or delete your account, their copy stops updating, but we cannot take back what they already have.

We do not sell your information. YouSynk shows no advertising.

Your information is held on servers in Frankfurt, Germany, in the European Union.

You can see, correct and download your information, deactivate your account or delete it, from the app, at any time.

3. Information you give us

Your phone number. Every account has a phone number. A one-time code is sent to that number and checked by Firebase Authentication, a service of Google. Once the code is checked, we keep the verified number as your number of record, and our own servers handle your sign-in from then on. We use Firebase only for this check; we do not use Google's analytics or advertising services.

Signing in with Apple or Google. You may also create your account, or sign in, with Sign in with Apple or Google Sign-In. If you do, that company tells us that you signed in and gives us an identifier for your account with them, and the email address their sign-in carries (with Apple, this may be a private relay address that Apple creates for you). We keep the identifier and that email address with your account, as one of your ways in; we use the email address only to recognise that way in, and we do not send you email. If you sign in with Apple, we also keep a token Apple gives us, sealed (encrypted), so that when you delete your account, or remove Apple as a way in, we can tell Apple to end YouSynk's access to your Apple account. A phone number is still required for every account.

Your age confirmation. When you sign up you confirm that you are 16 or older by ticking a box. We keep the time you confirmed. We do not ask for or store your date of birth at sign-up.

Your acceptance of our terms. When you accept the Terms of Service and this policy we record which document, which version, which language it was shown in, and when. We keep one record for each document and version.

Your details ("My Info"). You can add a name, a headline, photos, phone numbers, email addresses, social media accounts, websites, your work history (company, dates and roles), your university, school, work industry, sports club and gym, your city, postal addresses, a date of birth if you choose to add one, and custom details of your own. You decide what to add. You do not have to use your legal name.

Your profiles. A profile is a selection of your details with its own name, photo, cover and headline. We keep the profiles you make, which details each one shows, and the tags you use to organise people.

Your photos. Photos you add are stored on our servers. The app also makes a small preview copy of each photo that carries no location or camera information.

Your network. We keep your connections, the people you follow, connection requests you have sent and received, and the people you have blocked.

People you save, and your private notes. You can save a contact, scan a business card into a saved contact, and keep a nickname, notes, tags and other private details about any person in your network. These are private to you. The person never sees them and they are never shared with anyone.

Reports. If you report a person, we keep the report: who made it, who it is about, the category you chose and any note you wrote. The person you report is never told who reported them.

Messages you send us. If you email us, we receive your email address and whatever you write. The website's contact page does not send or store anything itself; it opens a draft in your own email app.

4. Information we collect when you use YouSynk

Your devices and sign-ins. For each device you sign in on, we keep its platform (for example iPhone), its language setting, and the token that lets us send it notifications. We keep a record of your sign-in sessions and of sign-in events, and we store only scrambled (hashed) versions of the session keys. A sign-in ends by itself after a set period (today, 30 days without opening the app, and 365 days at the longest) and you can sign out at any time.

Notifications. We keep the list of notifications shown in the app and your notification settings. Notifications sent to your phone are delivered by Apple's push notification service. The message we hand to Apple contains only the type of notification and a reference number, never your details or anyone else's; the words are filled in by the app on your phone.

Apple Wallet. If you add a YouSynk card to Apple Wallet, the card shows a name, a headline and a QR code, and for a profile's card its photo. So that we can keep the card up to date we store an identifier for the Wallet on your device and a token for updating the card. These are removed after 180 days without activity.

Scans and page views. When one of your QR codes or links is opened, we count it. We record which code was opened and when. We do not record who opened it: no account, no device, no IP address. You can see how many times a code was scanned, never who scanned it. For share pages we also keep a daily count of views per profile.

Usage information (analytics). We record a small set of events on our own servers to understand how YouSynk is used, such as that an account was created, a connection request was sent, or a QR code was scanned. These records do not contain names, phone numbers, or anything you typed or shared. They are stored against a scrambled key instead of your account, on our own servers, not with an outside analytics company. We keep them for 12 months and then delete them; totals already added up, which no longer point to any one person, are kept. The app itself contains no third-party analytics, advertising or tracking software.

Server logs. Our servers keep a technical log of each request: which kind of request it was, whether it succeeded, how long it took and a reference number. These logs do not contain your IP address, the device or browser you used, your account, or the content of the request. We keep them for 30 days. We do not keep access logs that record your IP address.

To limit abuse. We limit how often some actions can be done, for example sign-in attempts and connection requests. To do this our systems read the IP address of each request and keep short-lived counters, including a short fingerprint of the IP address, for up to 24 hours. Our hosting provider's firewall also reads IP addresses to apply these limits.

Repeat-request records. So that an action is not carried out twice when a connection drops, we keep a sealed (encrypted) copy of our reply to each change you make, for 24 hours.

5. Your phone's contacts

Importing your phone contacts is your choice. It happens only if you tap "Import phone contacts", read what it does, and then allow the app to read your contacts in your phone's own prompt. You can say no, and the rest of the app keeps working.

What we keep. If you import, the app uploads your phone's contacts to our servers over an encrypted connection: each contact's name and phone numbers, and nothing else (no email addresses, addresses, photos or notes). We store them with your account, sealed (encrypted) under a key that belongs to your account, so that they cannot be read from a copy of our database. They are yours alone: nobody else, other users included, ever sees your list, and our staff are not shown it.

What we use them for. We use your imported contacts for three things: to show you which of them are already on YouSynk, so you can send them a request or invite them (an invitation is a text message you send yourself, from your own phone); to tell you, with a notification, when one of them joins YouSynk; and to suggest people you may know. A person is matched by the phone number they signed up with. This works both ways: when someone whose number is in your imported contacts joins YouSynk, you may be told that they joined, and you may be suggested to them, and they to you, as someone they may know. We do not use your imported contacts for any other purpose, we never sell or share them, and we never contact the people in them.

Keeping them up to date. Each import replaces the list we keep. While "Keep importing" is on in Settings, the app refreshes the list at most once a day, when you open it. If you turn "Keep importing" off, nothing new is uploaded, and what we already keep stays until you delete it.

How long we keep them, and how to delete them. We keep your imported contacts for as long as your account exists, unless you delete them first. "Delete all imported contacts" in Settings, under Import phone contacts, deletes them from our servers at once, together with the suggestions and the unread "joined" notifications they produced. Deleting your account deletes them too. Turning off the app's access to your contacts in your phone's settings stops new imports but does not delete what we keep; use "Delete all imported contacts" for that.

Finding people by number. Separately from importing, when you type a phone number into search, the number is compared in memory on our servers and then discarded: it is not stored or logged.

Saving people to your phone. When you choose to save a YouSynk contact to your phone's contacts, the app writes the details that person shares with you into your phone's own contact list. From that moment the saved copy belongs to your phone, not to YouSynk: we cannot change or remove it.

6. If you do not have a YouSynk account

Opening a share page. A YouSynk user can give you a link or a QR code. It opens a page on yousynk.com showing what that person chose to share: their name, photo, cover and headline, and the details they put on that link. You do not need an account or the app. You can save the details to your phone as a contact card; the card is made in your browser and is not sent to us. When you open the page we count the visit as described in section 4, without recording who you are. The share pages use no cookies, no advertising and no third-party tracking.

Sharing back. On a share page you may be offered the chance to give that YouSynk user your own details in return. If you choose to, you enter your name and phone number, and an email address and a photo if you wish, and tap the button to send them. We then store those details for that user, sealed (encrypted) so that they are readable only through that user's account, together with the time you sent them, the version of the wording you were shown and the language of the page. We do not check that the number is yours. That user is told that you shared your details. If you later create a YouSynk account with the same phone number, we will suggest that user to you as someone you may know.

Your photo, if you add one. Before it is sent, the page makes a new copy of your photo in your browser, at most 1080 pixels on its longest side; this copy carries no location or camera information, and our servers also remove any such information that reaches them. The photo can be up to 5 MB when you pick it. Only the YouSynk user you shared it with can see it. We do not review shared-back photos.

How long we keep shared-back details. We keep details shared this way, your photo included, for 180 days and then delete them, unless they are removed sooner.

Removing your details. After you share back, the page keeps a removal key in your browser's local storage for up to 180 days. While it is there, the page shows "Remove my details"; using it erases your details and your photo from that user's account and from our servers at once. The removal key works only in the same browser on the same device. If you have cleared your browser, changed device, or the option is not shown, write to us at support@yousynk.com with the name and number you entered and whose page it was, and we will find your details and remove them.

Deletion by the person you shared with. The YouSynk user you shared your details with can delete them from their account at any time. They disappear from that user's account at once; we hold them for 30 more days and then erase them, and they cannot be brought back during that time. If you remove your details yourself, they are erased at once, even during those 30 days.

If a YouSynk user has your number in their phone. If a YouSynk user imports their phone's contacts and your name and number are among them, we keep that name and number in that user's account, sealed under that user's key, for that user's own use as section 5 describes. If you join YouSynk with that number, that user may be told that you joined, and you may each be suggested to the other. Nobody else sees that user's contacts. If you do not want to be suggested this way, write to us (section 13).

If a YouSynk user saves your details. A user can enter a person's details by hand, scan a business card, and keep private notes about people. Those details are stored in that user's account, sealed (encrypted) under a key belonging to that account, and are deleted with that account.

If you think a YouSynk user holds your details and you want to ask about them or object, write to us and tell us what you know. Details a user keeps privately about other people are sealed to that user's account and are not shown to our staff in the ordinary course. We will tell you what we can and act as the law requires.

7. How we use information, and why we are allowed to

We use your information only for the purposes below. For each, we say the reason the law allows it (in European law, the "legal basis").

To provide the service you asked for, under our agreement with you (the Terms of Service): to create your account and sign you in, including with Apple or Google if you choose; to keep your details and profiles; to show your profiles to the people you choose and keep their copies up to date; to let other users find your account in search; to run connections, follows, requests, tags and notes; to read business cards and save the contacts you ask us to; to keep counts of scans and views for you; to keep Apple Wallet cards up to date; to give you a download of your information; to deactivate or delete your account; and to answer you when you contact us.

With your consent, which you can withdraw at any time: to import and keep your phone's contacts and use them as section 5 describes (withdraw by deleting them in Settings); to send you notifications on your phone (withdraw in the app's or your phone's settings); and, for a visitor who shares back, to keep the details and photo they chose to send (withdraw with "Remove my details" or by writing to us). Withdrawing consent does not affect what was done before.

Because we have a legitimate interest in it, where that interest is not outweighed by your rights: to keep YouSynk secure, limit abuse, act on reports and moderate; to record the anonymous usage events of section 4 so that we can understand and improve YouSynk; to keep backups and the deletion record of section 11, so that a restore never brings back deleted information; to suggest people you may know, including suggesting you to someone whose number is in your imported contacts, or who holds yours; and to keep the details a YouSynk user saves about other people for that user. You can object to any use based on legitimate interest (section 13).

To meet our legal obligations: to keep the records the law requires, such as the proof that you accepted our terms, and to answer requests from authorities that bind us (section 9).

We do not use your information for advertising, we do not build a ranking or score of you, and we make no decision about you by automated means that has legal or similarly significant effects on you.

8. Who sees your information

You choose, profile by profile. Your details are never shared as a whole. Each profile shows only what you put on it, and a profile is seen only by the people you share it with: by giving them its link or QR code, or by connecting with them and choosing which profile they see.

Your account in search. Other YouSynk users can find your account by searching for its name, its headline or the details you have published on it; a phone number or email address finds you only when it is typed exactly and you have published it. Your profiles are never searchable. One setting on your account turns off being found: it hides you from search, from contact matching, from suggestions and from web search engines. The page of your account link is never listed by web search engines; other share pages are marked so that search engines do not list them unless search listing has been turned on for them, which is off unless you turn it on.

Connections. When you and another person connect, each of you chooses which of your profiles the other sees. Your connection sees the details on that profile and receives updates when you change them.

Following. A person who has one of your links or QR codes can follow that profile to keep seeing its updates, without connecting with you. You can see who follows you and when they began, but not which of your profiles they follow.

What people keep. When a connection ends, because you or they remove it, because either of you blocks the other, or because either of you deletes your account, each side keeps a frozen copy of what it had already received, marked as no longer live. It stops updating. The other person is not told that you removed or blocked them. We tell you this plainly because we cannot take back information that has already been shared, and details a person has saved to their own phone are outside YouSynk altogether.

Blocking. Blocking a person ends your connection with them on both sides, stops them from finding you or sending you requests, and stops their copy of your details from updating. They are not told. Unblocking does not reconnect you. A block stays in force even if the person you blocked deletes their account and later returns with the same number.

People without an account. Anyone you give a link or QR code to can open its share page and see what that link shares, without an account (section 6).

Companies that work for us. We use a small number of service providers to run YouSynk. They handle information only to provide their service to us: Amazon Web Services (hosting, storage and security services, in Frankfurt, Germany); Google (Firebase Authentication, to send and check sign-in codes and to verify Apple and Google sign-ins; Google Sign-In, if you choose it; and Google Workspace, through which our own staff sign in to our internal tools); and Apple (Sign in with Apple, if you choose it; delivery of notifications to iPhones; and Apple Wallet). We send no email or text messages to you ourselves; sign-in codes are sent by Google.

If the business changes hands. If YouSynk is merged, sold or reorganised, your information may pass to the company that takes it over. That company must keep to this policy until it tells you of a change, and we will tell you in the app before the transfer happens.

We do not sell your information to anyone.

9. Our staff, and requests from authorities

Our staff. Staff who support and moderate YouSynk sign in to a separate internal tool with their company account and two-step verification. By default they see only general facts about an account, for example a masked phone number and how many profiles and connections it has, and not your details. To see more, a staff member must type a reason; access then opens for 15 minutes, and the reason and the action are written to a record that cannot be changed or deleted, including by our administrators. Staff are never shown your private notes, nicknames, imported contacts or private details about other people. No one at YouSynk can sign in as you.

Moderation. If we receive reports about an account, a moderator may warn, suspend or remove it, as our Terms of Service describe. We keep a record of reports and of moderation decisions; these records are kept after an account is deleted, without a link back to it.

Requests from authorities. We disclose information only when the law requires us to, for example in response to a valid order from a court or an authority with the power to demand it. We check that each request is valid and binding on us, each request is reviewed with our legal advisers before anything is released, we give only what it requires, and we tell the person concerned unless the law forbids us to.

10. How long we keep information

While your account is active, we keep your information until you change or delete it, or until your account is deleted. The specific periods are:

Sign-ups that are not finished: if you begin to sign up but do not confirm your age and accept the terms, the unfinished account is deleted automatically within about two hours. If you tell us you are under 16, no account is kept and your number is not kept.

Imported phone contacts: for as long as your account exists, unless you delete them first (section 5).

Your Apple sign-in token: until you delete your account or remove Apple as a way in, when we ask Apple to end our access and then delete it.

A record of a previous phone number, after you change your number: for as long as your account exists.

Details shared back by a visitor, with any photo: 180 days, then deleted; at once when the visitor removes them; 30 days after the YouSynk user deletes them (section 6).

Usage (analytics) events: 12 months, then deleted; totals are kept.

Server logs: 30 days.

Abuse-limiting counters, including IP address fingerprints: up to 24 hours.

Repeat-request records: 24 hours.

Apple Wallet registrations: removed after 180 days without activity.

Data downloads you request: the download link works for 15 minutes and the file is deleted after one day.

A deactivated account: kept for 12 months so you can come back, then deleted (section 11).

An account waiting to be deleted: for the waiting period shown in the app (today 7 days), then deleted (section 11).

Backups: our database backups are kept for 30 days. Information you delete can remain in a backup until that backup expires.

Photo versions: an earlier version of a photo you replaced or deleted can remain in storage for up to 35 days.

Your phone number after deletion: held for 90 days so that nobody else can register it (section 11).

The deletion record and the proof of acceptance: kept in a locked log for as long as we need them to make sure a deletion survives a restore and to show what was accepted; the log cannot be altered or erased for 400 days after each entry (section 11).

Reports, moderation decisions and records of staff access: kept for as long as we need them to handle complaints and protect users, without a link back to a deleted account.

11. Deactivating or deleting your account

Deactivating. You can deactivate your account in the app. You are signed out everywhere, your account is hidden from search, your links and QR codes stop working, and the people connected to you see you as paused. Nothing is deleted. Sign back in within 12 months and everything is restored as you left it, except that people who were following you are not re-followed automatically: they keep a copy of what they had and can follow you again. If you do not sign in within 12 months, the account is deleted for good.

Deleting. You can ask to delete your account in the app, or from the screen that asks you to accept new terms. Deletion does not happen at once: there is a waiting period first, so that a mistake can be undone. The waiting period is set by us and is currently 7 days; the app shows you the date on which your account will be deleted. During the wait you are signed out everywhere, hidden, your links and codes stop working, and your connections see you as paused. If you sign back in before that date, the deletion is cancelled and everything stays as you left it. If you do not, the deletion runs on that date and cannot be undone.

If your account is suspended while a deletion is waiting. If our moderators suspend an account during the waiting period, the deletion is paused while we look into the matter. When the suspension is lifted the account returns to the waiting period, and if the deletion date has already passed, the deletion runs at once.

What deletion removes. When the deletion runs we remove your account, your details, your profiles, your photos, your network, your follows, your private notes and saved contacts, your imported phone contacts, the details visitors shared back with you, your devices and sessions, your notifications and any data downloads. We ask Apple to end YouSynk's access to your Apple account if you used it, and we remove your account from our sign-in provider. We erase the usage (analytics) events tied to your account. We destroy the encryption key that seals what you kept about other people (saved contacts, imported contacts, nicknames, notes and private entries) and the details visitors shared back with you, so that these cannot be read even in an old backup. Your own details and your phone number are deleted from our database and remain in backups only until those backups expire, 30 days at the longest.

What remains after deletion. Some things are not removed, and we want you to know them before you decide.

Copies other people hold. People you were connected to keep a frozen copy of what you had shared with them, no longer linked to any account. People who followed you keep a copy of what they had. Anything a person saved to their own phone stays there.

A record that the deletion happened. We write a record that an account was deleted to a separate log outside our main database. It identifies the account only by a keyed fingerprint, not by your name or number. Its purpose is to make sure that if we ever have to restore our database from a backup, your deletion is carried out again (section 12).

Proof that you accepted our terms. In the same log we keep a minimal record that the holder of a phone number accepted a particular version of the Terms of Service and of this policy, in which language and when. The phone number is kept only as a keyed fingerprint.

Blocks other people placed on you. A block someone placed on you stays, tied to a keyed fingerprint of your number, so that it still holds if you return.

Reports and moderation history. Reports made by or about the account, moderation decisions, and the record of any staff access to the account are kept, without a link back to the account.

Counts. Counts of scans and views are kept; they never held anything about who scanned.

Your phone number, for 90 days. Your number is held for 90 days after deletion so that nobody else can register it during that time. After 90 days it is removed and the number can be used to open a new account.

Backups and photo versions, for the periods in section 10.

Accounts we delete. If we remove an account ourselves under the Terms of Service, the same deletion runs without the waiting period.

12. If we restore from a backup

If we ever need to restore our database from a backup to recover from a serious fault, the restored copy would contain accounts and blocks as they stood at the time of the backup. To make sure this never brings a deleted account back or removes a block, every deletion and every block is also written to the separate, locked log described in section 11, and after any restore we replay that log: deletions that happened after the backup are carried out again, and blocks are put back. Other changes you made after the time of the backup, for example an edit or a new connection, could be lost in a restore. If that happens we will tell you in the app. A block you removed after the time of the backup may come back; you can remove it again.

13. Your choices and rights

Wherever you live, you can use the rights below. If you are in the European Union or another place with similar laws, they are your rights under that law. For each we say how to use it; most work in the app itself.

Access. You can see your details and profiles in the app at any time, and download a copy of your information (below).

Correction. You can correct your details yourself in the app. If something we hold about you is wrong and you cannot change it, write to us.

Deletion. You can delete your imported phone contacts in Settings, under Import phone contacts; delete a detail, a profile or a saved contact in the app; and delete your whole account in the app (section 11). A visitor can remove shared-back details with "Remove my details" or by writing to us (section 6).

A copy of your information (export). "Download my data" in Settings prepares one readable document with your information. The download link works for 15 minutes and the file is deleted from our servers after one day. The document contains your account (phone number, name, date created); your details; your profiles; your tags; the people in your network, including contacts you saved and your private notes about them; your imported phone contacts; the people you follow, and how many people follow you; your acceptances of our terms; requests sent and received; the people you blocked; your notifications; your devices and sign-in sessions; Apple Wallet registrations; reports you filed (never the identity of anyone who reported you); and details shared back to you by visitors. It does not contain sign-in keys, notification tokens or other people's internal identifiers. If you need your information in a machine-readable form, write to us.

Objection. You can object to any use of your information that we base on our legitimate interest (section 7), for example to being suggested to other people. Write to us and tell us which use; we will stop unless we have compelling grounds that the law recognises.

Restriction. You can ask us to limit how we use your information while a question about it is being settled. Write to us.

Withdrawing consent. You can withdraw any consent at any time: delete your imported contacts in Settings, turn notifications off in the app or your phone's settings, or remove shared-back details. Turning off the app's access to your contacts in your phone's settings stops new imports.

Complaining to a data protection authority. If you think we have handled your information wrongly, you can complain to the data protection authority where you live or work, or where you think the problem happened. In the European Union this is your country's data protection authority. We would be grateful for the chance to put it right first: write to us.

To use any right, or to ask a question about your information, write to support@yousynk.com. We answer within one month, and tell you if we need longer because a request is complex. Because your account is tied to your phone number, we may ask you to make the request from the app while signed in, so that we know it is you; a person who has lost their number and has no other way in cannot be identified, and we will not release an account's information to them. If you are not a YouSynk user, tell us how you came into contact with YouSynk so we can find what you are asking about.

14. Where your information is kept, and transfers between countries

All the information YouSynk stores is held on servers run by Amazon Web Services in Frankfurt, Germany, in the European Union. This is true wherever you are. YouSynk is available in every country, so if you use YouSynk outside the European Union, your information is transferred to and stored in Germany.

Some of our service providers may process information outside the European Union: Google, which sends and checks sign-in codes and verifies Apple and Google sign-ins, and Apple, which delivers notifications and runs Sign in with Apple and Apple Wallet. When they do, they process it under their own data-processing terms, which provide safeguards for transfers out of the European Union, such as the European Commission's standard contractual clauses. You can ask us for more information about these safeguards by writing to us.

15. How we protect information

We work to protect your information, and we would rather describe our protections exactly than use reassuring words.

In transit. All communication between the app, the share pages and our servers is encrypted.

On our servers. Our database and storage are encrypted at rest and are not open to the public internet. In addition, the most sensitive category, what users hold about other people (saved contact details, imported phone contacts, nicknames, notes and private entries) and details shared back by visitors, is sealed with a separate encryption key for each account, and that key is destroyed when the account is deleted. Your own details and your phone number of record are protected by the encryption of the database as a whole, not by a separate key of their own.

Phone number matching. To match phone numbers we use a keyed fingerprint (a keyed hash) calculated on our servers. Without the secret key, which is held separately from the database, the fingerprints cannot be turned back into phone numbers or tested against a list of numbers.

Sign-in. We store only scrambled versions of your session keys. On your phone, session keys are kept in the phone's secure storage. An Apple sign-in token is kept sealed (encrypted).

Staff access is limited and recorded as described in section 9.

No system is perfectly secure, and we cannot promise that information will never be accessed, lost or misused. If we learn of an incident that affects your information, we will act as described in section 17.

16. What happens on your phone

So that YouSynk works without a connection, the app keeps on your phone a copy of the information it has received, including your network and your imported contacts. This copy is encrypted with a key held in the phone's secure storage, which stays on that device and is never copied to a backup or to another phone. Phone numbers, email addresses and postal addresses of your connections are not shown when you are offline if the copy has not been refreshed for seven days. When you sign out, this copy and its key are deleted from the phone.

Business cards. When you scan a business card, the card's text is read on your phone. The picture of the card is never sent to us and is not kept. Only the details you check and save are stored, as a saved contact in your account.

QR codes. When you scan a QR code, the camera image is read on your phone and is not sent or kept; only the code's link is used.

Apps on your phone. To offer you ways to call, message or video call a person, the app checks on your phone which messaging and calling apps it can open, such as WhatsApp or Telegram. That check stays on your phone: the answer is never sent to us or stored, and it is not used for analytics or advertising.

Contacts you saved to your phone's own contact list, and QR images you saved to your photos, are outside the app and are not removed when you sign out or delete your account.

17. If something goes wrong

If we become aware of a security incident that affects your information, we will investigate and contain it, and we will tell the authorities and you, in the app, without delay and within the time the law sets.

18. Age

YouSynk is for people aged 16 and over, in every country. You must confirm that you are at least 16 to create an account. We do not knowingly keep information about anyone under 16: if a person tells us at sign-up that they are under 16, no account is created and their phone number is not kept. People aged 16 and 17 use YouSynk on the same terms as adults, including being findable in search through their account unless they switch off being found. If you believe a person under 16 has an account, write to support@yousynk.com and we will remove it.

19. Cookies and similar technologies

The yousynk.com website and the share pages do not set cookies, do not load content from other companies, and do not use advertising or tracking tools. The website does not count page views.

The share pages use your browser's local storage for one purpose: if you share your details back with a YouSynk user, the page stores a removal key and the date, so that you can later use "Remove my details" from the same browser (section 6). It is kept for up to 180 days.

20. Changes to this policy

When we change this policy we publish a new version with a new version number and date; earlier versions are never edited. If a change is significant, the app will ask you to read and accept the new version before you continue using YouSynk; if you do not accept, you can sign out or delete your account from that screen. For smaller changes, your earlier acceptance stays valid and the new version applies from its effective date. The current version is always available in the app and at yousynk.com.

This version, 2.0, replaces the placeholder text of version 1.0. It is published in English; until an Arabic version is published, readers who chose Arabic are shown this English text.

21. Contact

YouSynk. Email: support@yousynk.com. You can write to us about anything in this policy, including to use your rights (section 13).

The legal name and registered address of the company that provides YouSynk, and its representative in the European Union, will be added here before YouSynk's general launch.