Privacy policy

Last updated: October 16, 2026 · Español

This is a translation. If the two versions ever differ, the Spanish one applies.

1. Who is responsible

Daniel Benito Diaz, tax ID (NIF) 03144184S, Calle Doctor Fleming 17, 19003 Guadalajara, Spain. For anything about your data: idanideveloper@gmail.com. More details in the legal notice (in Spanish).

2. What data we handle and why

Your account

Your name, your email and the colour your group sees you in. If you sign up with email and a password, the password is stored encrypted by our accounts provider: we never see it. If you sign in with Apple, we get the email Apple lets you share, which may be a relay address instead of yours.

Why: to give you an account and let your group know who you are. Legal basis: the contract, that is, providing the service you ask for (GDPR art. 6.1.b).

Your group

The group's name, who is in it, and each person's colour and role. The other members see your name, colour and email. If you ask to join a group, the people already in it see your name before they accept you.

Legal basis: the contract.

What you create in the app

Events (title, dates, place, notes and reminders), shift types, patterns and one-day changes, allowances of days off, notes and lists, shopping and its shops, chores, and trips with their attachments. The people in your group see them, except for two things:

• events marked “Only me”, which never leave your phone;
• your shift-swap history (who you swapped with and your notes), which only you see.

Other people's data. If you write down who you swapped a shift with, or mention someone in a note, write only what is needed (a first name, for example) and no health information. We keep it for you and it is deleted with your account.

Legal basis: the contract.

Trip photos and documents

They are kept in private storage and only open through links that expire after an hour, for the people in your group. Before a photo leaves your phone, we remove its location and camera data (make, model and date); if the location cannot be removed, the photo is not uploaded. PDFs are uploaded as they are. InSync does not access your photo library: it only gets the file you pick.

Your iPhone calendars

If you allow it, InSync reads your iPhone calendars to show them next to your group's. When you link one, you decide whether it is shared:

• if you don't share it, its events stay on your phone;
• if you share it (the box comes ticked), each event is copied to our server with its title, description, place and dates so your group can see it. Private events in that calendar are copied only as “Busy”.

You can stop sharing a calendar in More › External calendars, and remove the permission in the iPhone settings. Google or Outlook calendars set up on your iPhone arrive the same way: InSync does not connect to Google or Microsoft or store any of their credentials.

If you turn on “Copy to iPhone calendar”, InSync writes your group's events to an “InSync” calendar on your iPhone. Apple keeps that calendar, on your iPhone or in iCloud, depending on your settings.

Notifications

To send you notifications we store an identifier for your device, its system, the language of the notifications and which ones you want. The text of each notification (for example, an event's title, what was added to the shopping list or who did it) goes through Apple's notification service to reach your phone.

Legal basis: the contract.

Settings kept on the server

Your notification preferences and their language, your colour and “My shifts in calendars”, because they affect what your group sees or the notifications we send you. Every other setting stays on your phone.

InSync Pro and purchases

Subscriptions and tips are charged and managed by Apple: we never see your card, bank or address. To know whether your subscription is active, we store the identifier Apple gives that purchase, the plan, whether it is a free trial and when it expires, linked to your account. Apple tells us when it renews, is cancelled or is refunded, and we check that the message really comes from Apple. We store nothing about tips.

Legal basis: the contract. You manage and cancel the subscription in your App Store account settings.

When you report a problem

From More › Report a problem we receive the title, your message, some technical data (app and iOS version, iPhone model, language, connection type, how much data is on your phone and the last sync error), your group and an email to reply to: the one you enter or, if you leave it blank, your account's. With that:

• we store it in our database;
• we open an issue in a private GitHub repository with the title, the message and the technical data, without your name or email;
• the administrator gets a notification with your name and the title.

Legal basis: our legitimate interest in helping you and fixing the problem (GDPR art. 6.1.f).

Crash reports

If the app crashes, iOS gives us a technical report: app and iOS version, model, type of crash and where in the code it happened. It does not include your account or your content.

Legal basis: our legitimate interest in keeping the app from crashing.

Usage statistics

To know which parts of the app are used, InSync counts actions: which screen you open, that something was created (an event, a shift, a note…), which step of sign-up you are on, whether an invitation was sent or accepted, whether the InSync Pro screen was seen and whether a purchase was started, completed or cancelled, how many days have passed since you created your account (to know whether people come back) and the app version. Never the content: no titles, dates or names.

They are sent without your identifier and kept only as daily counts: we do not keep who each one came from. With few people using the app, a figure may correspond to a single person, but we never match it to an account. They are not shared with anyone.

Legal basis: our legitimate interest in improving the app. How to turn it off: More › Settings › Anonymous usage statistics; with the switch off, your phone sends nothing.

Security

To stop people trying to get into other people's groups, we keep attempts to join a group (account, time and whether it worked). Our provider also keeps technical logs of sign-ins, such as the IP address.

Legal basis: our legitimate interest in protecting accounts and groups.

Administration

The administrator can look up an account by name to give someone InSync Pro (they see the name, the email partly hidden and the sign-up date), and looks at figures per group, such as how many events, shifts or lists there are and when it was last active, to understand how the app is used. They do not read your content.

Legal basis: our legitimate interest in running and improving the service.

3. Who it is shared with

With the people in your group, as explained above. And with these providers, who work on our behalf and cannot use your data for anything else:

• Supabase: database, accounts and files. The servers are in Ireland; the company is based in the US.
• Apple: notifications, Sign in with Apple and App Store payments.
• GitHub (US): issues for the problems you report.
• Vercel (US): hosts this website.

When a provider handles data outside the European Economic Area, it does so with the safeguards of the GDPR: the European Commission's standard contractual clauses or, where the provider has joined it, the EU-US Data Privacy Framework.

We do not sell your data, there is no advertising and we do not follow you across apps or websites. We make no automated decisions about you.

4. How long we keep it

5. Deleting your account

In the app, at More › Delete account, at the bottom. It is immediate and cannot be undone:

• your name and email, your shifts, patterns and changes, your allowances of days off, your reminders and assigned chores, your personal events, your shift-swap history, your notification settings, your recorded purchases and your attempts to join groups are deleted;
• the problems you reported stay, without your email or account;
• you leave the group. What you shared (common events, notes, lists and trips) stays for the others, because it is theirs too, but without your name;
• if nobody is left in the group, the whole group and everything in it is deleted;
• your sign-in account is deleted.

If you signed in with Apple, you can also remove InSync's access in the iPhone settings: your name › Sign in with Apple.

6. Your rights

You can ask to see your data, correct it, delete it, take it with you, restrict its use or object to it, by writing to idanideveloper@gmail.com. We reply within a month. If you think we are not handling your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your country.

7. Children

You must be 14 or older to use InSync (or the minimum age in your country, if it is higher). We do not knowingly collect data from younger children; if you know of any, write to us and we will delete it.

8. How it is protected

Everything travels encrypted (HTTPS). The database only lets each person read and write their own group's data, and files are in private storage.

9. This website

This website uses no cookies, stores nothing in your browser and loads nothing from third parties. To know how many people visit it, each page view adds one to a counter in Supabase with the page, the site you came from, your time zone, your language and whether it is a phone. Your IP address and anything that identifies you are not stored, and there is no way to know who visited what. If your browser asks not to be tracked (Do Not Track), the visit is not counted. Vercel, which hosts it, logs technical data about visits (such as the IP address) to serve and protect it.

10. Changes

If we change this policy, the date at the top changes. If the change is important, we will also say so in the App Store release notes.