Last updated: April 20, 2026
SHCH Studio Ltd ("we", "us", "our") operates the sygn mobile application ("App"). This Privacy Policy explains how we collect, use, and protect your information.
Data you create: Moments, gratitude entries, intention pages, and other journal content you enter into the App. This data is stored locally on your device and, if you sign in, synced to our servers.
Account information: If you sign in with Google or Apple, we receive your name, email address, and a unique identifier. We do not receive or store your password.
Usage analytics: We use PostHog to collect anonymous usage data (screens viewed, features used, app events). This data does not include your journal content and is used solely to improve the App.
Photos: If you attach photos to moments, they are stored locally on your device and synced to our servers if you are signed in.
Audio: If you use voice-to-text, your audio is processed in real time for transcription and is not retained after the transcript is returned.
Location (optional): If you tag a moment with a place, we collect approximate location (city/neighborhood-level, not precise coordinates) and store it with that moment. You control this via iOS Location permissions and can decline without losing other functionality.
Subscription data: If you subscribe, we receive purchase and renewal information from Apple via RevenueCat (our subscription management provider). We do not receive or store your payment card details.
Diagnostics: We collect crash reports and performance data via Sentry to keep the App stable. Reports include a technical stack trace and your anonymous user ID, never your journal content.
Your data is stored locally using Apple's SwiftData framework. When synced, your data is stored in Supabase hosted within the European Union. All data in transit is encrypted via TLS. Supabase enforces Row Level Security (RLS), meaning only you can access your data.
Your journal data is stored and processed within the EU. However, certain features involve transferring limited data outside the EU:
Where data is transferred outside the EU/UK, we rely on the European Commission's Standard Contractual Clauses and other appropriate safeguards under the GDPR to protect your information.
Your journal data is retained as long as you have an account. If you delete your account or request data deletion, we will remove it from our servers within 30 days. Local data on your device is only removed when you delete the App.
Operational data is retained for shorter, service-specific periods:
You have the right to:
If you are located in the EEA or the UK, under the GDPR you additionally have the right to access, rectify, restrict, or object to the processing of your personal data, and the right to lodge a complaint with a supervisory authority. If you are a California resident, you have equivalent rights under the CCPA/CPRA. We do not sell your personal information.
Our legal basis for processing is: (a) the performance of our agreement with you to provide the App's functionality, (b) your consent where required (e.g., optional location tagging), and (c) our legitimate interests in maintaining a stable, improving product.
To exercise any of these rights, contact us at help@shchstudio.com. We will respond within 30 days.
The App does not use automated decision-making or profiling that produces legal or similarly significant effects on you. AI features (goal analysis) provide informational suggestions only and do not make decisions on your behalf.
The App is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact us and we will delete it.
We may update this Privacy Policy from time to time. We will notify you of changes by updating the "Last updated" date above.
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at help@shchstudio.com.