Loading your workspace…

Draft — to be reviewed by a lawyer · October 2026

Privacy Policy

1. Controller

Pietro Calabretta, Viale Coni Zugna 4, Milano, Italy, email pietrocala06@gmail.com ("we"). Contact us at pietrocala06@gmail.com for any privacy request.

2. What we collect

  • Account data: email, name, avatar colour, preferred language, plan, the date you accepted these terms.
  • Uploaded files (PDFs, documents, photos, audio, video) and the text, formulas and figure descriptions we extract from them.
  • Chat messages in your groups and questions you ask @Sinapsy.
  • Master Guides you generate or edit.
  • Pomodoro sessions (focus/break minutes and times) and your live status shown to your group.
  • Technical data needed to run the service (sign-in session, security logs). Your Pomodoro settings are kept only in your browser.

3. Why and legal basis

  • Providing the service you sign up for — storing files, generating guides, chat, groups (contract, Art. 6(1)(b) GDPR).
  • Security, abuse prevention and fair-use limits (legitimate interest, Art. 6(1)(f)).
  • Legal obligations, e.g. tax records for paid plans (Art. 6(1)(c)).
  • We do not sell your data and do not use it for advertising.

4. Processors

  • Lovable — hosting, Lovable Cloud and the AI gateway that forwards AI requests.
  • Supabase — database, authentication and file storage.
  • Google (Gemini API, paid tier) — AI for Free-plan features.
  • Anthropic (Claude API) — AI for Pro-plan features.
  • Stripe — payments, when enabled; Sinapsy does not see card details.

4a. Data location

EU and/or US. Hosting and AI-processing locations may differ by processor.

5. AI processing

To build guides and answers, the relevant parts of your files and questions are sent directly to the configured AI provider, or through the Lovable AI gateway while that provider is not configured. Content from app users is not used to train AI models.

Free-plan requests use Google Gemini. Pro requests use Anthropic Claude, with Standard Gemini after the Claude cost limit; podcast voices use Google Gemini. AI providers may keep request data for a limited period for abuse monitoring, as described in their terms; we use paid/commercial API access, under which providers do not use your content to train their models.

Ratings (👍/👎), reasons and comments you give, and feedback you send us, are used to improve the service; content is not used to train AI models. Your ratings also adjust how Sinapsy writes for you (editable in your Profile). A 👍 on an @Sinapsy answer in a group lets that group reuse the answer; it is never shared with other groups.

AI output can be wrong — always check important facts.

6. International transfers

Some processors are based in the United States. Transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

7. Retention

We keep your data while your account exists. When you delete a file, guide or your account, it is removed from our database and storage right away (Lovable Cloud daily backups expire after about 14 days). Messages you sent in groups stay visible to the group as "Deleted user".

8. Who sees your content

Files, guides and messages in a group are visible to all its members. Your Solo vault is private to you.

8a. Course library

Full content is readable by Pro users, covered Pro Gruppo members and contributors viewing their own items; administrators can review all items. Free users with a qualifying helpful vote can also unlock full access for 30 days. Other users and visitors see titles, outlines and a short preview. Your name appears only if you choose "Show my name"; otherwise you are an "Anonymous student". Shared copies stay after you leave a group; you can remove them anytime. Author attribution and your permission confirmation are recorded where someone else’s notes are identified. Reports are reviewed by Pietro Calabretta, who may remove content. Before anything is shared to the library, we check it for personal data (emails, phone numbers, student ID/matricola, tax codes/codice fiscale, and names on covers, headers and footers); a low-cost AI model reads the first pages for names. By default the shared copy has these removed; you can keep a name only by confirming that person's permission. Files that stay in private groups are not scanned.

8b. Exam radar and oral-exam diary

We store exam questions, year/session, course and professor name as course metadata to show topic frequencies and study trends. Questions are visible to library users of that course, subject to plan limits. Personal comments or judgements about professors or other people are not allowed: submissions are checked before saving; reported violations are removed.

8c. Student verification

A university email is used to send a verification code; the university name and verification date are used only for the student badge. The code email is not kept as a message. Pending verification records are temporary; codes expire after 15 minutes and are deleted on successful verification. Verification email sending is not yet enabled.

8d. Usage tracking for fair use

We record the account, group (where applicable), plan, feature, model, provider path, token counts (including cached tokens) and estimated EUR cost per AI request to apply fair-use limits. When provider counts are unavailable, we retain a conservative estimate. These records are kept for 12 months and included in account export and deletion.

8e. Rewards and promo codes

We record shared items, helpful votes, rewards granted and promo-code redemptions to provide benefits and prevent abuse.

8f. Children

The service is only for people aged 18 or older. Accounts found to belong to minors are deleted.

9. Your rights

You can access, correct, export ("Download my data" in your Profile), delete ("Delete my account"), restrict or object to processing, and complain to the Italian Garante per la protezione dei dati personali (garanteprivacy.it) or your local authority. Write to pietrocala06@gmail.com.

10. Cookies

We use only essential storage (sign-in session, Pomodoro settings, interface preferences). No advertising or tracking cookies.

Privacy · Terms · Sinapsy