Privacy Policy

1. Introduction

Syntropy is operated by Guided Intelligence (ABN 77 659 307 690) (“we”, “our” or “us”). We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable data protection laws.

This Privacy Policy explains how we collect, use, disclose, store and safeguard your personal information when you use the Syntropy mobile application, this website and related services (together, the “Service”). We understand that what you share with Syntropy is deeply personal, and we are committed to giving you control over it. Optional processing choices are requested separately in the app; using the Service does not automatically opt you into optional analytics or every source of Guide context.

2. Information we collect

Horizon and earlier versions: Horizon uses check-ins, reflections, the optional TIPI assessment, practices, weekly reviews and Guide conversations. New reflections are excluded from Guide by default; you choose permitted context. Earlier assessment, health, voice, relationship and report records described below may remain from legacy versions. Their presence in this policy does not mean Horizon activates those features or retrieves those records. Optional usage analytics requires its own choice.

2.1 Account information

• Name and email address
• Profile information (photo, display name)
• Account credentials (passwords are hashed and never stored in plain text)
• Chronotype and onboarding preferences

2.2 Content you create

• Psychological self-assessment responses and results (Big Five, Attachment Style, Core Values and the other assessments in the app)
• Journal entries and structured reflections, including voice entries you choose to record
• Goals, habits, tasks and milestones
• Budgets and transactions you enter in legacy finance features; these are optional and separate from Google Play purchases
• Conversations with Your Guide (the AI coach)
• Shadow work exercises, wisdom reflections, and experiment designs and outcomes
• Relationship Sync data, shared only with your explicit consent (see section 12)

Optional voice entry uses your device's speech-recognition service. Depending on the device and service settings, audio may be sent to that provider for transcription; we do not promise on-device-only processing or zero retention. Transcribed text you save becomes part of your entry.

2.3 Health data (only with your explicit permission)

• Steps and physical activity
• Sleep duration and patterns
• Heart rate and other metrics from Health Connect (Android)
• We only access the categories you explicitly authorise

2.4 Operational information and optional usage

• Fixed usage events when optional analytics is enabled; Horizon event properties exclude journal text, assessment answers and scores
• Device type, operating system and app version
• Operational error logs and status-only billing-monitor check-ins; Sentry billing check-ins do not contain journal text, purchase tokens or customer identifiers
• Push notification interaction data
• Firebase analytics identifiers when optional analytics is enabled
• In legacy advertising-enabled screens: Android advertising ID and device and usage information may be processed by Google AdMob, subject to advertising controls. Horizon does not introduce an ad banner (see section 5)

2.5 Information from third-party services

• Optional Google sign-in: Google supplies an identity token and basic account details such as your name, email address and profile image to authenticate with Supabase. This creates a Syntropy account or signs you into an existing account; a matching verified email can link to your existing Syntropy identity. We do not request access to Gmail, Drive or Calendar. You can continue to use email sign-in instead.
• Google Play: purchase tokens and subscription status, used to verify purchases. We never see your payment details.
• Health Connect: the health categories you authorise.
• Firebase: push notification tokens and optional analytics events.

3. How we use your information

3.1 Delivering the Service

• Scoring your assessments and showing your results
• Providing personalised coaching through Your Guide, based on your results and history
• Using journal context for requested Horizon Guide replies only when permitted; legacy analysis features are separate
• Retaining earlier Blueprint records and purchased access; Horizon does not generate new Blueprint reports
• Scheduling opted-in Horizon reminders at the selected local time; earlier chronotype preferences may remain stored
• Tracking your goals, habits and progress

3.2 Advertising in legacy free-tier screens

• Showing a small banner ad in advertising-enabled legacy screens, served by Google AdMob; Horizon does not initialise advertising
• Measuring ad delivery and preventing ad fraud

3.3 Improvement and analytics

• Analysing optional usage events to improve features. These can include account or installation identifiers and are not anonymous.
• Identifying and fixing bugs and performance problems
• Developing new features based on aggregated needs; any research is aggregated and anonymised, never individual-level

3.4 Communication

• Sending push notifications you have enabled
• Responding to support requests and feedback
• Notifying you of material changes to the Service or this policy
• Optional promotional emails, which you can opt out of at any time

3.5 Legal and safety

• Complying with applicable laws and legal obligations
• Preventing fraud, abuse, unauthorised access and security threats
• Enforcing our Terms of Service

4. AI processing

Syntropy uses artificial intelligence (Anthropic’s Claude API) to provide coaching, journal analysis and the Blueprint report.

4.1 What is sent to AI

• Assessment results and profile context, to personalise responses
• Journal entries, when generating insights or during Guide conversations
• Your conversation history with Your Guide, for continuity
• Mood, energy and daily pulse data, for pattern analysis
• Current goals and habits relevant to your question

4.2 What is not sent to AI

• Your password or authentication credentials
• Payment or financial account details
• Raw Health Connect data (only summarised insights)
• Data from other users (each user’s data is isolated)

4.3 Safeguards

• All AI requests travel over encrypted connections
• We use Anthropic’s commercial API with its data processing terms; API content is not used for model training by default, subject to the provider's terms and exceptions
• Real-time response generation does not mean zero retention. Provider retention, safety and legal exceptions apply; we do not classify saved Guide conversations or provider processing as ephemeral
• Only the context relevant to a request is sent; your complete history stays in your Syntropy account

4.4 Limitations

5. Advertising

Legacy free-tier builds can show a banner ad. Subscribers see no ads. The Horizon experience does not initialise advertising.

• Who serves the ads: ads are served by Google AdMob, Google’s mobile advertising service.
• What AdMob may use: its SDK collects and shares IP-derived approximate location, device/account identifiers, app and advertising interactions, and diagnostic information for advertising, analytics and fraud prevention. Depending on your choices and where you live, ads may be personalised or non-personalised. These disclosures also cover older versions that remain available during the Horizon rollout.
• What we do not share: we do not give advertisers your assessments, results, journal entries, coach conversations, health data or any other content you create. Ads are not targeted using your psychological profile.
• Consent in the EEA and UK: if you are in the European Economic Area or the United Kingdom, the app shows a consent form (Google’s User Messaging Platform) before ads are personalised. You can review or change your choices at any time in the app under Settings, Ad privacy.
• Android controls: you can reset or delete your advertising ID, or opt out of ad personalisation, in your Android device settings (usually Settings, Privacy, Ads, or Settings, Google, Ads, depending on your device).
• Removing ads: subscribing removes ads from the app entirely.

Learn how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites, and about AdMob’s data practices at support.google.com/admob/answer/6128543.

6. Third-party services and sharing

We do not sell your personal information. We share data with the following service providers only to operate Syntropy. Each has its own privacy policy.

• Anthropic (Claude API), USA: AI processing for coaching, journal analysis and the Blueprint report. Receives the context described in section 4. Privacy policy
• Supabase (AWS infrastructure; project region Mumbai, India): cloud database, authentication and serverless functions. Stores account data and content, encrypted at rest and in transit, with row-level security. Privacy policy
• Google Play Billing, USA: purchases and subscriptions. Receives purchase tokens for server-side verification; payment details are handled entirely by Google Play. Privacy policy
• Google AdMob, USA: banner ads on the free tier. Collects the device data described in section 5 directly in the app. How Google uses this data
• Firebase / Google Cloud, USA: push notifications, crash diagnostics and usage analytics. Receives device tokens for enabled notifications and crash/installation information where Crashlytics is enabled. Horizon usage analytics is optional and uses fixed events and identifiers, excluding private entry text and assessment scores. Older versions may have different analytics controls. Privacy policy
• Sentry, USA: operational billing-job failure and missed-run monitoring. This integration sends run status, a random check-in identifier and the production environment label. It does not send journal content, assessment answers, account identifiers, purchase tokens or raw error responses. Privacy policy
• Health Connect (Google), on device: optional health data integration. Only the categories you authorise.
• Vercel, USA: hosts this website and processes standard server logs (such as IP address and browser type) to deliver it.

Provider processing follows applicable service terms and configured settings. We may also share data to comply with legal obligations or valid legal processes, to protect our rights, safety or property, in connection with a business transfer (with prior notice), or with your explicit consent.

7. International data transfers

Your personal information may be transferred to and processed in India (our Supabase project region), the United States and other countries outside Australia where our providers operate. These countries may have data protection laws that differ from yours.

Provider processing is governed by the applicable provider terms and our configured service settings. The provider links above describe their privacy practices; this policy does not promise that all overseas processing follows Australian law or remains in Australia.

8. Storage, security and retention

8.1 Security measures

• All data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256)
• Database access is protected by row-level security policies
• Passwords are hashed using industry-standard algorithms
• Access controls, logging and monitoring limit access to authorised systems and personnel
• Recent data may be cached on your device so the app works offline
• Operational safeguards do not guarantee that every risk or incident will be prevented

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we continually work to protect your data using industry best practice.

8.2 Retention

• Account data and content (journals, goals, assessments and so on): kept while your account is active
• Coach conversation logs: kept while your account is active, for continuity
• Optional analytics can include account or installation identifiers. Vendor retention follows configured service settings; turning collection off does not erase previously collected records.
• Payment records: kept as required by tax and financial regulations (typically 7 years)
• Operational logs: retained according to the relevant service settings; a fixed 90-day retention period is not verified

We may keep certain data longer where the law requires it, to resolve disputes, to enforce agreements or to prevent fraud. Such data is stored securely with strictly limited access.

9. Your rights and choices

Under the Australian Privacy Act and other applicable laws, you have the following rights.

• Access: view your data in the app at any time, or ask us for a copy of the personal information we hold about you.
• Export: export your complete data history in the app under Settings, Data & Privacy, Export My Data.
• Correction: update your profile at any time, or ask us to correct inaccurate information.
• Deletion: delete individual entries in the app, or delete your whole account (see section 10).
• Notifications: turn push notifications on or off in the app or your device settings.
• Health Connect: disconnect at any time in your device’s Health Connect settings.
• Analytics: contact us to opt out of analytics collection.
• Advertising: change ad consent in Settings, Ad privacy (EEA and UK), reset or delete your advertising ID in Android settings, or subscribe to remove ads (see section 5).
• Relationship Sync: revoke a sync at any time.

9.1 California residents

If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect and how it is used, the right to delete personal information (with certain exceptions), the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right not to be discriminated against for exercising these rights. To opt out of ad personalisation, use the Android controls in section 5 or subscribe to remove ads.

9.2 Complaints

If you believe we have breached your privacy, contact us at hello@guidedintelligence.com.au. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Deleting your Syntropy account

Syntropy is operated by Guided Intelligence (ABN 77 659 307 690).

In the app: open the account/settings privacy controls and choose Delete Account. Review the confirmation before continuing. Export supported records first if you want a copy.

Without the app: email hello@guidedintelligence.com.au from the address registered to the account, with the subject “Delete my Syntropy account”. Do not send your password or private journal entries. Support must verify ownership before processing the request; the published support target is within 30 days.

What deletion covers: the account and linked live database records, including linked reflections, assessment results and Guide history. The app does not promise that every copy held elsewhere disappears immediately.

• Backup copies follow the backup service’s retention plan; a fixed 90-day purge is not verified.
• Provider records and operational logs follow their applicable retention settings and legal obligations.
• Stored media may require separate handling. Device-local drafts, offline recovery data and files you exported are outside the server deletion flow.
• Records required for legal compliance are retained only for the applicable obligation. Google Play keeps its own purchase records.

Billing is separate: account deletion does not cancel a Google Play subscription. Manage cancellation in Google Play under Payments and subscriptions, Subscriptions.

Read the privacy policy for the broader processing details. Contact support about a specific deletion or retained record.

11. Health data

• Health data is collected only with your explicit, informed permission
• You choose exactly which health data categories to share
• Health data is used to provide personalised energy and wellbeing insights, sleep analysis and chronotype-aware scheduling
• Health data may be summarised and sent to our AI provider to generate insights
• Health data is never used for advertising
• You can disconnect Health Connect at any time in your device settings
• We never sell or share identifiable health data with third parties for their own purposes

12. Relationship Sync

• Both people must consent to a sync
• AI-generated compatibility insights are shared with your sync partner
• Your individual assessment scores and raw journal data are never shared with your partner
• You can revoke a sync at any time, which permanently deletes the shared analysis; revocation is immediate and cannot be undone

13. Children’s privacy

Syntropy is not intended for anyone under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us immediately at hello@guidedintelligence.com.au and we will promptly delete it.

14. Cookies and tracking

14.1 In the app

The Syntropy app does not use browser cookies. It uses:

• Firebase Analytics: optional usage events and installation identifiers; not anonymous. Horizon collection is off by default and controlled in Patterns > Privacy choices.
• Firebase Crashlytics: crash and error reporting
• Device identifiers: for push notification delivery
• Android advertising ID: used by Google AdMob on the free tier only (see section 5)

14.2 On this website

This website does not set cookies and does not run analytics or advertising. Fonts are loaded from Google Fonts, which receives your IP address when your browser requests them.

15. EU, EEA and UK users

If you are in the European Economic Area, the United Kingdom or Switzerland, you have additional rights under the GDPR (and UK GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time, including ad consent in Settings, Ad privacy
• Right to lodge a complaint with your local data protection authority

Our legal bases for processing are: consent (for health data, AI processing and optional usage analytics), performance of our contract with you (for delivering the Service), and legitimate interests (for security and fraud prevention). Legacy advertising uses the applicable consent controls; Horizon does not initialise advertising. To exercise your rights, contact hello@guidedintelligence.com.au.

16. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal requirements. We will tell you by:

• Posting the updated policy in the app and on this page
• Updating the “Last updated” date
• Sending an in-app notification or email for material changes

Material changes take effect 30 days after notice. Continuing to use Syntropy after that date means you accept the updated policy. If you disagree, stop using the Service and delete your account.

17. Contact us

For questions about this policy, to exercise your rights, or to raise a privacy concern:

You can also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.