Privacy Policy

1. Data Controller

The data controller for personal data collected through the Sylinka application and the website sylinka.com is Graoll. Contact: legal@sylinka.com.

2. Data We Collect

When you create an account: your email address and display name (if you use Google or email sign-in), or a randomly-generated anonymous identifier (if you use guest mode).

Usage data: anonymised analytics about which features you use (collected via Firebase Analytics). No personally identifiable information is included in these events.

Your content: the YouTube URLs you save, the AI-generated Cards, Meal Slots, and Coach chat messages. This data is stored in Firebase Firestore and is scoped exclusively to your user account.

3. Data We Do NOT Collect

YouTube video files. We process only publicly available captions and metadata; no video is ever downloaded or stored on our servers.

Payment card details. All payment processing is handled by the Apple App Store or Google Play Store. We never receive or store your card information.

Precise location data. We do not request location permissions.

4. How We Use Your Data

To provide the service: authenticate your account, generate and store your Cards, run the AI Coach, and manage your Meal Planner.

To improve the service: anonymised analytics help us understand feature usage and fix issues.

To send transactional communications: account-related notifications (e.g. password reset). We do not send marketing emails without your explicit consent.

5. Third-Party Services

Firebase (Google) — authentication, database, cloud functions, and hosting. Google's privacy policy applies.

OpenAI — card content is sent as text to OpenAI's API for AI extraction. No personal account information is shared. OpenAI's privacy policy applies.

Google AdMob — serves advertisements to free-tier users. AdMob may use device identifiers for ad personalisation. You can opt out via your device's advertising settings.

Amazon Associates — product suggestion links may include an affiliate tag. Clicking these links is governed by Amazon's privacy policy.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all personal data is permanently erased within 30 days.

Anonymised analytics data may be retained for up to 26 months in accordance with Firebase Analytics defaults.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the data we hold about you.

• Right of rectification — you may request correction of inaccurate data.

• Right to erasure — you may request deletion of your data. You can initiate this directly by deleting your account in the app.

• Right to data portability — you may request your data in a machine-readable format.

• Right to object — you may object to processing based on legitimate interests.

To exercise these rights, contact us at legal@sylinka.com. We will respond within 30 days.

8. Cookies & Tracking

The Sylinka website (sylinka.com) does not use tracking cookies. Firebase Hosting may set a session cookie for routing purposes only.

The Sylinka mobile application does not use browser cookies. Firebase Analytics uses a pseudonymous device identifier.

9. Children's Privacy

The Application is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notification or by email. The current version is always available at sylinka.com/en/privacy.html. Last updated: April 2026.