Privacy Policy

1. Using Sync Player With or Without an Account

You can use Sync Player without creating an account. When you first open the app, it signs you in as an anonymous guest: we create a random user ID for your installation, and the app gives you a random nickname and a generated avatar. A guest's nickname and avatar are kept on your device.

Creating an account is optional. You can sign in with Apple or Google, mainly to use Premium on all your devices. We never ask for or store a password.

2. Information We Collect

Account information (only if you sign in)

If you sign in with Apple or Google, we receive your email address and an identifier for your Apple or Google account, and depending on the provider, the name on that account. If you use Sign in with Apple and choose "Hide My Email", Apple gives us a private relay address instead of your real email address. This information is held by our authentication provider (Firebase Authentication) and is used to identify your account.

Profile

• Your nickname and avatar. The avatar is either generated from a random code or a photo you choose to upload.
• If you are signed in, your nickname and avatar (including the uploaded photo) are kept with your account so they are the same on all your devices.

Rooms, chat and voice

• When you join a room, other people in the room can see your nickname and avatar. If you uploaded an avatar photo, a copy is stored temporarily so the others in the room can see it.
• We store what is needed to keep a room in sync: the room code and name, who is present, playback position, the playlist (titles and links of the videos), chat messages, sticker reactions and any subtitle files you add.
• Public rooms are listed for anyone using the app. Their listing shows the room name, the host's nickname, the number of viewers and what is playing.
• Voice chat audio is relayed in real time through Cloudflare. It is not recorded or stored.

Invites and notifications

• To deliver room invites, we store a push notification token for each of your devices, along with the device platform, app language and whether notifications are allowed.
• An invite you send shows the recipient your nickname and avatar.
• The list of people you recently watched with is kept only on your device and is cleared after 30 days.

Safety and moderation

• If you report a message or a public room, we store your user ID, the reported user's ID and nickname, the time, and the reported message or the room code and what was playing.
• We store the list of users you have blocked, and records of users we have restricted for breaking our rules.

Purchases

Premium is purchased through the App Store or Google Play. We and our subscription provider, RevenueCat, receive your purchase history and subscription status. We never receive your payment card details.

Gifts

• If you gift Premium to someone in a private room, or someone gifts it to you, we keep a record of the gift: the user IDs, nicknames and avatars of the sender and the recipient as they appeared in the room, the room code, which gift was bought (1 month or 1 year), the store transaction, and whether the gift has been opened, granted or refunded.
• A message announcing the gift, with both people's nicknames, is posted in the room's chat.
• So the gift picker can show who already has Premium, whether you have Premium is shared with the other people in a room.

Google Drive

If you connect Google Drive, Sync Player can access only the files you pick in Google's file picker. We store an access token for your Google account on our servers so the app can play those files later, and the email address of the connected Google account on your device. When you play a Drive file in a room with others, the app changes that file's sharing setting to "Anyone with the link can view" so the others can stream it. The file cannot be found by search, and the app explains this before it happens. We do not access, read, or modify any other files in your Google Drive.

Dropbox

If you play a file from Dropbox, you pick it with Dropbox's own file chooser and the app receives a link to that file only.

Streaming services and local files

YouTube, Netflix, Disney+, Prime Video and VK Video play in an in-app browser. You sign in directly with each service; your login details and cookies stay on your device and are never sent to us. Videos from your device are played from your device and are never uploaded.

Advertising and analytics

To support free access to the app through advertising, we and our advertising and analytics partners may collect:

• Coarse Location: approximate location, worked out from your IP address, used to serve relevant ads and for analytics.
• Device Identifiers: device and advertising identifiers used to deliver ads, measure their effectiveness and prevent fraud.
• Product Interaction: how you use the app, such as features used and rooms created or joined.
• Advertising Data: the ads you have seen or interacted with.
• Crash Data and Performance Data: crash reports and performance metrics that help us improve stability.

Where you have given permission (for example through the App Tracking Transparency prompt on iOS, or the consent form shown in some regions), this data may be used to show personalized ads and for tracking across apps and websites owned by other companies.

3. How We Use Information

We use the information above to:

• Run rooms, keep playback in sync, and provide chat, voice chat and invites.
• Keep your account, Premium status, nickname and avatar the same across your devices.
• Deliver Premium gifts, and show you the gifts you have sent and received.
• Play the Google Drive and Dropbox files you choose.
• Keep the Service safe: review reports, enforce our Terms of Service, and prevent abuse such as invite spam.
• Show ads to users without Premium, and measure and improve the app.
• Respond to you when you contact us.

We use data from Google APIs only to provide the Google Drive features described above. We do not use it for advertising.

4. Data Sharing and Disclosure

We do not sell or rent your personal data.

Other users can see what you choose to share in a room: your nickname, avatar, chat messages, reactions, and the videos you add to the playlist, and gifts you send or receive there. Public room listings can be seen by anyone using the app.

We share information with service providers that run parts of the Service for us:

• Google Firebase: sign-in, databases, cloud functions, push notifications, analytics, crash reporting and remote configuration.
• Cloudflare: temporary storage for avatar photos and subtitle files, and the voice chat relay.
• RevenueCat: managing Premium subscriptions, purchases and gifts.
• Apple and Google: sign-in, purchases and the delivery of notifications.
• Advertising partners: Google AdMob and Unity LevelPlay, together with the ad networks they work with (including Unity Ads and Pangle). They receive the data described under "Advertising and analytics" above, and may use it as described in their own privacy policies.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or of the Service.

Files made public with a link stay in your own Google Drive, and you can change or remove their sharing settings at any time in Google Drive.

5. Data Retention

• Rooms, including their chat messages, reactions, playlist and presence, are temporary. They are deleted automatically, normally within two days of the room being created.
• Uploaded avatar photos and subtitle files shared in rooms are deleted automatically within one day.
• Account data, including your profile, avatar photo, notification tokens, block list and Google Drive connection, is kept while you use it. Data that has not been used for 180 days is deleted automatically.
• Gift records are deleted automatically 180 days after purchase if the gift is never opened, or 180 days after the gifted Premium ends if it is.
• Reports and moderation records are kept for as long as they are needed to keep the Service safe and to enforce our Terms of Service.
• Analytics, crash and advertising data are kept by our partners according to their own retention policies.
• Information stored only on your device, such as settings, recently played videos and recent co-viewers, stays there until you clear it or uninstall the app.

6. Deleting Your Account

You can delete your account at any time in the app: open Settings → Account → Manage account → Delete account.

Deleting your account removes:

• Your account and its sign-in.
• Your profile: nickname and uploaded avatar photo.
• Your account data: notification tokens, block list and pending invites.
• Your Google Drive connection, including the access tokens we stored.
• Your customer record with our subscription provider, RevenueCat.

If you signed in with Apple, the app also revokes Sync Player's access to your Apple ID.

What is not deleted:

• Store subscriptions. Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play subscription settings.
• Reports and moderation records, which are kept as described in Section 5.
• Records of gifts you sent or received, which the other person and refunds still rely on. Your user ID, nickname and avatar are removed from them, and a gift sent to you that you had not opened is cancelled.
• Chat messages already sent in rooms. They are deleted automatically with the room.

If you can't use the app, you can ask us to delete your account by emailing contact@eversync.site from the email address linked to your account (if you used Hide My Email, from the address Apple forwards to). We will confirm once your account is deleted.

7. Your Choices and Rights

You can:

• Use the app without an account, or sign out at any time.
• Revoke Sync Player's access to your Google Account at any time in your Google Account permissions, and change or remove any file's sharing setting directly in Google Drive.
• Stop using Sign in with Apple for Sync Player in your Apple ID settings.
• Turn notifications off in your device settings.
• On iOS, decline the App Tracking Transparency prompt, or change your choice in Settings → Privacy & Security → Tracking. On Android, reset or delete your advertising ID in your device settings.
• In regions where a consent form is shown, change your advertising choices at any time under Settings → Privacy Options in the app.

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to how we use it. To make a request, contact us at contact@eversync.site. For information about how Google uses data from apps that show its ads, see How Google uses information from sites or apps.

8. Data Storage and Security

We do not store the contents of your Google Drive or Dropbox files on our servers.

Access to Google Drive uses secure Google APIs with OAuth 2.0, and the tokens we store can be read only by our servers.

Our service providers may process information in Australia, the United States and other countries. We use industry-standard security measures to protect your information from unauthorized access or disclosure, but no method of transmission or storage is completely secure.

9. Third-Party Services

Sync Player uses Google APIs to access Google Drive data. Sync Player's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Videos from YouTube, Netflix, Disney+, Prime Video, VK Video, Google Drive and Dropbox are provided by those services, and their own privacy policies apply when you use them.

10. Children's Privacy

The Service is not directed to children under 13, or the minimum age required in your country, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

contact@eversync.site