Privacy Policy

1) Scope

Sytra is an intent-based social matching service. Users can create an account, complete a profile, describe the kinds of people they want to find, receive candidate results, send invites, and message after connecting.

This Policy applies to the public website, authenticated web experiences, the iOS app, and related support and operational services. It does not apply to third-party services that maintain their own privacy notices.

2) Information We Collect

Account and authentication information

• Email address
• Authentication identifiers, such as Auth0 or Google subject IDs
• Login-provider information, such as email/password, Google sign-in, or Sign in with Apple
• Email-verification status
• Session records and sign-in timestamps

Profile information

• Username
• Name
• Profile photo or avatar
• Date of birth and age derived from date of birth
• Gender, gender self-description, and whether you choose to show gender on your profile page
• Orientation and any self-described orientation text
• Ethnicity
• Interests
• Bio
• Education information, including whether you attend a U.S. university and your school name
• Location information such as city, country, country code, location label, and update timestamps
• Search-scope preferences such as global, city, or university matching

Search, query, and matching information

• Messages you type into the logged-out and logged-in search flows
• Follow-up answers used to refine your search
• Saved search records, titles, summaries, prompts, tags, weights, roles, stages, and search-result snapshots
• Query records created for matching, including raw text, normalized text, canonical text, threshold settings, and timestamps
• Matching preferences and filters, including location, affiliation, age, gender, and ethnicity gates
• AI-generated or system-generated interpretations, questions, summaries, and structured search fields
• Embeddings and related metadata used to support matching and ranking

Invites, conversations, and messaging information

• Invites you send or receive
• Invite messages, invite statuses, and invite-linked search snapshots
• Conversation records, conversation-member state, unread counts, mute state, and pin state
• Message text, replies, edits, reactions, timestamps, and read state
• Typing signals and presence-related information used for realtime messaging
• Blocks between users

Device, app, and notification information

• Server-backed session cookies and session identifiers
• Push-notification tokens
• Push state such as platform, app state, and active conversation ID
• Basic device, browser, and request information normally sent to our servers, such as user-agent strings and request metadata

Location information

• City and country you enter manually during profile setup or profile editing
• City suggestions and reverse-geocoding request data used to help you choose a location
• If you use the current-location helper in the iOS profile editor, latitude and longitude may be sent so we can look up your city and country. Current product flows primarily save city and country for profile and matching use. Our data model also includes fields for coordinates and accuracy if those values are provided.

Logged-out preview information

• Messages submitted in the logged-out preview experience
• Session-based search history, preview state, and turn counts

3) How We Collect Information

• Directly from you when you sign up, log in, verify your email, reset your password, complete your profile, create searches, send invites, or message.
• From identity providers and authentication services when you use Google sign-in, Sign in with Apple, or our hosted authentication flows.
• From your browser, webview, or device when session cookies, push tokens, or app-state information are transmitted to us.
• From location-support features when you request city suggestions or reverse geocoding.
• From automated systems that transform your text into moderation decisions, structured search fields, or embeddings.

4) How We Use Information

• Create and manage your account, session, and authentication state.
• Verify email addresses and support password-reset workflows.
• Let you create, edit, and display your profile.
• Run logged-out preview flows and logged-in search flows.
• Generate search follow-up questions, summaries, structured fields, and other search outputs.
• Moderate and safety-screen submitted text.
• Match you with other users and rank candidate results.
• Display candidate users, profiles, invites, conversation history, and message state.
• Send realtime updates and push notifications for invites and messages.
• Prevent spam, abuse, fraud, and policy violations.
• Maintain, secure, debug, and improve the Service.
• Comply with law and enforce our agreements.

5) AI and Automated Processing

Sytra uses automated systems and third-party AI services as part of the product. Based on the code reviewed for this rewrite, these systems are used for:

• Classifying and moderating submitted search text
• Generating or refining search prompts, questions, summaries, and structured search fields
• Creating embeddings from profile and query text to support matching and ranking
• Applying stored matching logic involving location, age, affiliation, gender, ethnicity, and other search constraints

Automated outputs can be wrong or incomplete. Search suggestions, summaries, and match results are product features, not promises that a result is accurate, complete, appropriate, safe, or a successful connection.

6) What Other Users Can See

Sytra is a social service, so some information is visible to other signed-in users when you use matching, invite, profile, and messaging features.

• Your username, display name, and profile photo may be shown to other users.
• Your saved profile fields may be shown on your profile page to other signed-in users.
• Your city and country may appear in matching and profile contexts.
• Your search text, search titles, and search snapshots may be shown to people you invite, match with, or message.
• Your invite messages, message content, reactions, typing state, read state, and conversation-linked search context are visible to the other participant in that invite or conversation.

The current codebase also returns some profile-derived attributes in candidate and matching payloads, including age, city or country labels, gender-related fields, and ethnicity-related fields. On direct profile views, certain fields can be hidden based on product settings, but those settings do not necessarily limit all internal or matching-related uses.

7) How We Share Information

We may share information in the following situations:

• With other users: when necessary to operate profiles, candidate results, invites, conversations, and messaging.
• Authentication providers: including Auth0, Google, and Apple, to support sign-in, email verification, and related identity functions.
• AI providers: including OpenAI, to process moderation, search text, and embeddings.
• Storage providers: including our avatar-storage provider, to host profile images.
• Push-notification providers: including Firebase Cloud Messaging and Apple push services, to deliver invite and message notifications.
• Location-service providers: including OpenStreetMap or Nominatim-based services, to support city suggestions and reverse geocoding.
• Infrastructure, hosting, and database providers: that help us run the Service.
• Legal or safety disclosures: when required by law or reasonably necessary to protect users, Sytra, or the public.
• Corporate transactions: in connection with a merger, acquisition, financing, bankruptcy, or sale of assets.

Based on the code reviewed for this rewrite, Sytra does not currently appear to sell personal information or share personal information for cross-context behavioral advertising.

8) Cookies, Sessions, and Similar Technologies

We use cookies and similar technologies that are necessary to run the Service, keep you signed in, secure sessions, support native-app webviews, and remember session state. Server-backed sessions are currently configured with an approximate 30-day lifetime unless ended earlier.

The reviewed codebase did not show a dedicated advertising SDK or a separate analytics-cookie consent flow in the main product surfaces covered by this rewrite. If that changes, this Policy should also be updated.

9) Retention

We retain information for as long as reasonably necessary to provide the Service, maintain security, resolve disputes, enforce our agreements, and comply with legal obligations.

• Account and profile records: generally while your account remains active, and afterward as needed for legal, security, abuse-prevention, backup, or operational reasons.
• Sessions: approximately 30 days unless cleared sooner.
• Searches and query records: while needed for the Service; some query records may expire automatically if an expiration date is set.
• Messages and conversations: until deleted, soft-deleted, or no longer needed for the Service.
• Push tokens: until refreshed, invalidated, removed after delivery failure, or no longer needed.

Search deletion and conversation deletion in the current product may be implemented as soft deletion in some cases. That means data may not disappear immediately from every internal store or backup.

10) Your Choices and Rights

• Profile controls: you can edit many profile fields inside the product, including your username, name, avatar, bio, interests, education, location, and certain visibility settings.
• Search controls: you can update search-scope preferences and delete saved searches.
• Messaging controls: you can delete pending invites, delete conversations, mute conversations, pin conversations, and block or unblock users.
• Push controls: you can disable push notifications through your device settings.
• Legal privacy rights: depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of personal information, or to appeal certain decisions. We may need to verify your identity before acting on a request.

To make a privacy request, email sytra@try-sytra.com.

The current product includes an in-app account-deletion flow. When you confirm deletion, we delete your login identity and attempt to remove your local account data immediately. If some local cleanup cannot be completed at that moment, the remaining cleanup may be queued to finish shortly afterward.

11) Security

We use administrative, technical, and organizational safeguards designed to protect information. These include managed authentication, server-backed sessions, access controls, and third-party infrastructure providers. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

12) Age Requirement

Sytra is intended only for people age 16 and older. We do not knowingly permit anyone under 16 to create accounts or use the Service. If we learn that a minor has provided personal information, we may remove the account and delete the data.

13) International Transfers

Sytra is operated from the United States and may rely on service providers in the United States and other countries. Your information may therefore be processed and stored in jurisdictions that may have different privacy laws than the place where you live.

14) Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we may provide notice by updating this page, changing the "Last updated" date, or using another reasonable method.

15) Contact

If you have questions about this Privacy Policy, want to exercise a privacy right, or want to request account deletion, contact us at:

• Email: sytra@try-sytra.com
• Location: Boston, Massachusetts, USA

© 2026 Sytra. All rights reserved.