EduSync Privacy Policy

Last updated: 13 May 2026

This Privacy Policy describes how EduSync (operated by Alexander, "we", "us") collects, uses, and protects your information when you use the EduSync mobile application ("App"). EduSync is currently in private internal testing.

1. Information We Collect

• Account data: name, email address, authentication identifiers — provided when you sign up via Clerk.
• Workspace data: business name, clients you add (their name, optional email), products/services you offer, attendance records, payments, balance history.
• Technical data: server-side request logs (HTTP method, path, response code, timestamp) for debugging and abuse prevention. No query strings or request bodies are logged.
• Device data: none collected beyond what is needed to deliver authenticated API responses.

2. How We Use Your Information

• Authenticate you and maintain your session.
• Operate the core App features: clients, products, sessions, payments, balance tracking.
• Debug crashes and prevent abuse.

We do not sell your data. We do not use your data for advertising. We do not profile you.

3. Service Providers We Share Data With

• Clerk Inc. — authentication provider. Receives your email and authentication credentials. See Clerk Privacy Policy.
• Amazon Web Services (AWS) — application hosting (eu-central-1, Frankfurt). Stores your workspace data in encrypted Postgres.
• Cloudflare — TLS termination and DNS. Sees encrypted traffic metadata only.

No data is shared with advertisers, analytics platforms, or third parties for any other purpose.

4. Data Security

• All traffic uses HTTPS (TLS 1.2+) end-to-end.
• Database storage is encrypted at rest (AES-256).
• Authentication tokens are stored in the device's secure storage (iOS Keychain / Android Keystore).
• Access to production data is restricted to the developer.

5. Data Retention

Your account data is retained while your account is active. On account deletion, data is purged within 30 days. Backups containing deleted data are rotated out within 90 days. Server logs are retained for 7 days.

6. Your Rights

You may request at any time:

• Access to the data we hold about you.
• Correction of inaccurate data.
• Deletion of your account and associated data (see Delete Account).
• Export of your data in machine-readable form.

Email edusync-testing.dean892@simplelogin.com with subject "Data request" to exercise these rights. Responses within 14 days.

7. Children

EduSync is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, email us and we will delete it.

8. International Transfers

Data is stored in the European Union (eu-central-1, Frankfurt). Clerk may process authentication data in the United States.

9. Changes

We may update this policy. Material changes will be communicated via email to all active users at least 14 days before taking effect.

10. Contact

Alexander — edusync-testing.dean892@simplelogin.com

Back