Privacy Policy
Last updated: 22 September 2026. Publisher: Alexis Breuvart, public developer name Igin, France; contact: support@igin.fr.
A chosen self-hosted instance
Synoid connects to an API instance you choose. Data sent to example-instance.tld is processed by that operator under its policy and configuration. The application publisher may not operate, access or be able to delete data on independent instances.
Data used to provide Synoid
The app stores selected-instance/account settings locally and protects mobile credentials with Android security facilities. Your selected instance can store account/profile details, resources and URLs, tags, comments, shares, activity, uploaded avatars/screenshots, search requests, authentication records, notification and push registrations.
External processing
Push is optional and uses a UnifiedPush distributor selected on your device, such as ntfy. Web Push payloads are encrypted for the subscription before delivery, although the distributor and network process endpoint and network metadata. An instance may optionally use email, URL enrichment, OAuth/MCP clients or diagnostics; its operator must identify its providers.
Your choices
You can edit/delete permitted content, revoke credentials, disable push and remove an account from this device. Local removal does not delete the server account. Where deployed, permanent server deletion is available in-app and through the instance’s /account/delete page. Private account content is deleted; shared/public records can be retained with authorship anonymized where needed for collaboration.
Diagnostics and retention
The official application automatically sends privacy-minimized Crash logs and technical Diagnostics to an Igin-operated Bugsink service for Analytics, meaning the identification, investigation and correction of application errors. Automatic diagnostics are required; sending a report through the feedback form is optional. Reports can include an exception, sanitized stack trace, application release and OS/runtime context. Identity, request data, credentials, cookies, breadcrumbs, local variables and sensitive context are removed before transmission. Session replay, performance tracing, profiling, screenshots, advertising and behavioral tracking are not used. Production Bugsink connections must use HTTPS. Igin-operated Bugsink events are retained for no more than 30 days and are then deleted. When a separate infrastructure provider processes these events solely on Igin’s behalf, it acts as a service provider and may not use them for its own purposes. This website may use Vercel Analytics and optional Umami. Each instance operator controls database, backup and log retention.
Contact
Official-app privacy contact: support@igin.fr. Contact the selected instance operator for data it controls.