SyncYourMemory

Privacy Policy

Last updated: 2026-06-24

SyncYourMemory is a registered business name of National Finance Options Pty Ltd (Melbourne, Australia), which is the entity responsible for your personal information. We handle it in line with the Australian Privacy Principles (Privacy Act 1988). This policy explains what we collect, how we use it, and your choices.

1. What we collect

Account data (email, authentication metadata); the content you create (notes, links, and any audio you record for voice features); usage and billing metadata; and basic technical logs.

If you use voice cloning, we create a voice model from the voice you record (biometric data). If you use the 'voice identities' feature, you may also enrol voice samples of other people (e.g. family members), which are likewise treated as biometric data. If you use the hologram twin feature (paid plans), a background-removed face image from the photo you upload is stored in your account only and sent to Google (Gemini) to create your hologram. All voice and face data is processed only with explicit consent, stored on our servers, can be deleted anytime (voice in Settings; the face photo on the hologram page), and is removed when you delete your account. When a paid plan ends, any voice clone (synthesis model) created at our external voice provider is deleted. The recording it was made from is kept in your account with no time limit, so resubscribing rebuilds the same voice without recording again. We set no expiry on it because the person who comes back late is usually a family member trying to recover the voice of someone who has died. That recording is deleted when you delete the voice in Settings, and when you delete your account. You must only enrol another person's voice with that person's consent.

2. How we use it

To provide the Service — storing your knowledge base, generating AI responses, transcribing and synthesising voice, processing payments, preventing abuse, and supporting you.

3. Subprocessors (who else processes your data)

  • · Supabase — authentication and database hosting — data is stored in the Sydney, Australia region.
  • · Google (Gemini API) — AI text, transcription, embeddings, and hologram image generation. Content you submit to AI features (including your face photo if you use the hologram twin) is sent to Google (US) for processing.
  • · Supertone — cloud voice synthesis (when enabled) — answer text is sent to Supertone (South Korea).
  • · ElevenLabs — voice synthesis and (with your consent) voice-clone creation. Recorded voice is sent to ElevenLabs (US) to build a clone — this is biometric data.
  • · Alibaba Cloud (Qwen · DashScope) — voice synthesis and (with your consent) voice-clone creation — currently the default voice provider. Answer text, and when building a clone the recording itself, is sent to Alibaba Cloud's Singapore region; a voice recording is biometric data.
  • · Deepgram — real-time speech-to-text (call mode). Voice audio is streamed to Deepgram (US).
  • · Stripe · PayPal — subscription payments (we do not store full card numbers). Both are US companies.
  • · Resend — transactional email (sign-up confirmation, receipts, billing notices). Your email address is sent to Resend (US).
  • · Vercel — application hosting — served from the Sydney, Australia region (US company).

4. Storage & retention

Data is retained for as long as your account exists. If you cancel a subscription, your account simply moves to the free plan — every memory stays stored, searchable, viewable, and exportable. We never delete your data for inactivity or non-payment; only you can delete it (Settings → permanent delete). Your data is primarily stored in Australia (Sydney); some processing occurs outside Australia (the US, Singapore, and South Korea) via the subprocessors above. Data may be kept where the law requires it.

5. Your rights

You can export your data and permanently delete your account and all associated data at any time from Settings → Danger zone. To request access or correction, contact us.

Support access: we do not view your memory content. Only when you explicitly grant it in Settings — a read-only window (up to 48 hours, revocable anytime) — can support view it through the support screen; every such access is recorded in an audit log, and if recording fails the view itself is blocked.

6. Cookies

We use only essential first-party cookies (sign-in session, language, theme). We do not use third-party advertising or tracking cookies.

7. Security

Data is isolated per account at the database level (row-level security), and traffic is encrypted in transit. Voice audio is held in access-controlled storage, and any support access is written to an audit log. No system is perfectly secure, but we take reasonable steps to protect your information.

8. Contact

Questions or privacy requests: support@syncyourmemory.com.

If you are concerned about how we handle your personal information, tell us at the address above. We will acknowledge your complaint within 5 business days and respond with our findings and any action taken within 30 days. If you are not satisfied with that response, you can complain to the Office of the Australian Information Commissioner (OAIC, oaic.gov.au).

Data breaches: if a breach occurs that is likely to result in serious harm to you, we will notify you and the OAIC as required by Australia's Notifiable Data Breaches scheme.

Privacy Policy · SyncYourMemory