Privacy Policy

RabbitFoRed (operating under the project name Neuronal) built the Synapse app as a commercial service to help MBBS students study smarter. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

This policy complies with the Google Play Developer Policy, the Digital Personal Data Protection Act (DPDPA) 2023 (India), and general GDPR principles.

            Plain language summary: We collect only what is necessary to run the app. We do not sell your data. You can request deletion of your account and data at any time by emailing us.
        

1. Your Consent

By downloading, installing, or using the Synapse app, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Service immediately.

Where required by law, we will request your explicit consent before processing sensitive data (such as using your Advertising ID for personalised ads). You may withdraw consent at any time through your device settings or by contacting us.

2. Information We Collect

Category	Data Collected	Purpose	Legal Basis
Account & Auth	Email address, display name, profile picture (via Google Sign-In)	Account creation, cross-device sync	Contract / Consent
Study Data	Bookmarks, notes, quiz scores, chapter progress	Personalised learning experience	Contract
Device & Usage	OS version, device model, IP address, app session events	Analytics, bug fixing, feature improvement	Legitimate Interest
Crash Logs	Stack traces, app state at time of crash	Stability and bug resolution	Legitimate Interest
Advertising ID	Android Advertising ID (GAID)	Serving relevant ads via Google AdMob	Consent
Payment Records	Transaction ID, amount, status (via Razorpay)	Subscription and purchase verification	Contract

We do not collect: passwords (handled by Google), full card/bank details, biometric data, precise GPS location, or SMS/call logs.

3. Third-Party Service Providers

We use the following trusted third-party services. Each has its own Privacy Policy governing data they independently collect:

All user data stored on Firebase is located in Google Cloud servers. Data may be transferred internationally in accordance with Google's Data Processing Terms.

4. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

Account Data: Retained for the lifetime of your account. Deleted within 30 days of account deletion request.
Study Data (bookmarks, notes, progress): Retained until you delete your account or request data erasure.
Crash Logs & Analytics: Automatically retained by Firebase for up to 90 days, then aggregated/anonymised.
Payment Records: Retained for up to 7 years to comply with Indian tax and financial regulations.

5. Your Rights

Under the Digital Personal Data Protection Act (DPDPA) 2023 and applicable data protection laws, you have the following rights:

📋

Right to Access

Request a copy of the personal data we hold about you.

✏️

Right to Correction

Request correction of inaccurate or incomplete personal data.

🗑️

Right to Erasure

Request deletion of your account and all associated personal data.

🚫

Right to Object

Opt out of personalised advertising through your device's Advertising ID settings.

📤

Right to Portability

Request your study data in a machine-readable format.

📬

Right to Grievance

File a complaint with us. We will respond within 30 days as required by DPDPA 2023.

            To exercise any of these rights, email us at quantum@theostrich.eu.org with the subject line "Data Request". We will verify your identity and respond within 30 days.
        

6. Security

We implement industry-standard security measures to protect your data:

All data in transit is encrypted using TLS 1.2+.
Data at rest is encrypted by Google Cloud infrastructure (AES-256).
Authentication tokens are managed securely by Firebase Auth and never stored in plaintext.
Payment processing is handled entirely by Razorpay's PCI-DSS compliant infrastructure. We never see or store raw card data.

Despite these measures, no method of transmission over the internet is 100% secure. We encourage you to use a strong password for your Google account and enable 2-factor authentication.

7. Children's Privacy

Synapse is designed for MBBS students and medical professionals and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If we discover that a child under 13 has provided us with personal information, we will immediately delete it. If you are a parent or guardian and believe your child has provided us with data, please contact us at quantum@theostrich.eu.org.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. When we make material changes, we will:

Update the "Last updated" date at the top of this page.
Post a notification within the Synapse app for significant changes.

Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

Table of Contents