Privacy Policy

Cynnes · Last updated 13 September 2026

Cynnes ("Cynnes", "we", "us") is a personal memory app that helps you remember the people you care about and reminds you when it matters. This policy explains what we collect, how we use it, and your choices. This service is operated by Christopher Li; contact us at vanirrakhsh1017@gmail.com.

Information you provide

• Account. You sign in with Sign in with Apple or a one-time code sent to your email. This gives us an Apple user identifier and/or your email address, used to create and secure your account.
• Your profile. A display name, and optionally a birthday, a profile photo, and a phone number (used only to enable the call/text buttons on your own device).
• People you save. The names, and any details you choose to add — birthdays, phone numbers, photos, notes ("embers"), About facts, and life events — about people in your life. This information is private to your account.
• Content you create. Notes, stories about how you met someone (typed or dictated), editable check-in drafts generated on your device, and photos you attach from your photo library.
• Feedback you send. A category, the message you write, and an optional contact email, along with app version, build number, platform, and the screen where feedback was opened.

Limited product analytics

We record a small set of first-party events needed to understand whether the app is useful, such as completing onboarding, adding a person, saving an ember, logging a reach-out, viewing the paywall, completing a purchase, or opening feedback, review, and share actions. These events include app version, build number, platform, time, and your account identifier. They do not contain person names, note text, feedback text, contacts, photos, or arbitrary activity details. We do not use third-party advertising trackers.

Public website analytics. We use Vercel Web Analytics on public product pages and guides to measure visits and referring websites. Vercel receives page-view information, approximate location, and browser and device information for aggregate reporting. We remove page URL query strings and fragments, exclude the signed-in web app, and skip this script when your browser sends Global Privacy Control or Do Not Track. We do not send account identifiers, person cards, or note content to this website analytics service. Vercel uses a short-lived visitor hash instead of tracking cookies; read Vercel's analytics privacy information.

Device permissions

The app asks for these only when you use the related feature, and works without them:

• Photos — to attach an existing photo from your library to your profile or to a person. The current app does not open the camera to take a new picture.
• Microphone & Speech Recognition — to dictate a note or a voice command. On iOS, Apple's speech-recognition service turns speech into text. Recognition may take place on your device or on Apple's servers, depending on device support, language, and settings; Cynnes does not require on-device-only recognition. Cynnes does not save audio recordings or send audio to Supabase or Anthropic. The resulting text is handled like other note or command text (see AI processing below).
• Notifications — to send you the reminders you set.
• Face ID / device authentication — only to confirm it is you before deleting your account.

How your information is used and shared

We do not sell your data or use it for advertising. We use service providers to run the app:

• Supabase — our backend: authentication, database, and encrypted file storage for your account and content.
• Anthropic — our AI provider. To organize your notes, turn a story you submit into editable card details, and interpret voice commands, we send the relevant text — which may include names and details of people you reference — to Anthropic's API for that request. This content is processed to provide the feature and is not used by us to train AI models. Meeting-story results are shown for your review; that edge function does not write card data and does not store the story in its rate-limit log. Voice-command transcripts (up to 500 characters) may be stored in our command log so we can apply rate limits and later confirm what you asked the app to do. Check-in drafts are generated locally on your device from details you already saved.
• RevenueCat — processes subscription status and Apple In-App Purchase identifiers, using our account identifier as the customer id, so we can unlock premium and keep subscription state in sync. We do not receive your payment card details.
• Expo — delivers push notifications (via a device token) if you enable them.
• Apple — Sign in with Apple authenticates you (we receive an Apple user identifier and, if you choose, a private relay email). Apple's speech-recognition service may process dictated audio on your device or on Apple's servers. Apple's handling of that audio is governed by its own privacy policies and your device settings. Subscription purchases are processed through In-App Purchase.
• Vercel — hosts this website and, on public pages only, the analytics described above.

We may also disclose information if required by law or to protect the rights and safety of users.

Information about other people

Because Cynnes is for keeping track of people in your life, you may store information about people who are not users of the app and have not consented. That information is kept private to your account and is never shared with those people or with other users. You are responsible for the information you choose to record and for complying with applicable laws.

Retention and deletion

We keep your information while your account is active. You can permanently delete your account at any time from within the app (Profile → Delete account). Deletion removes your account and the associated people, notes, life events, photos, and auth identity we store. Subprocessors may keep limited backups or logs for a short period under their own policies; we cannot promise that every third-party copy disappears at the same instant as your in-app deletion.

Your rights

Regardless of where you live, you have the following rights over your personal data, and we honor them for everyone:

• Access & portability. You can see all of your data inside the app at any time. To receive an exportable copy of your account data, email us at vanirrakhsh1017@gmail.com and we will provide it, free of charge, within 30 days.
• Correction. You can edit your profile, the people you save, notes, and events directly in the app.
• Deletion (erasure). You can permanently delete your account and all associated data in the app (Profile → Delete account), or by emailing us.
• Objection & restriction. You may ask us to stop or limit certain processing by contacting us.
• Non-discrimination. We will never deny you service, charge you more, or reduce quality for exercising any of these rights.

To make any request, email vanirrakhsh1017@gmail.com. We do not sell your personal information and have not in the preceding 12 months.

Security

Data is encrypted in transit, files are stored in private buckets, and database access is restricted per-account so only you can read your data.

Children

Cynnes is not directed to children under 13, and we do not knowingly collect information from them.

Changes

We may update this policy; we will revise the "Last updated" date above and, for material changes, provide notice in the app.

Contact

Questions or requests: vanirrakhsh1017@gmail.com.