Privacy Policy

Synomni is a workspace for talking to several AI models, comparing their answers and keeping a personal memory of your work. It is operated by InfinityBuilds LLC (“we”, “us”). This policy explains exactly what the Synomni iPhone app and the Synomni web app collect, why, who receives it, and how you can delete it. We wrote it to describe what the software really does, not what is typical.

The short version

• We collect only what you give us to run your account: your email, a password hash, and the content you create (chats, notes, projects, files you import).
• Your messages are sent to the AI providers you choose (for example OpenAI, Anthropic or xAI) so they can answer. We do not send anything to a provider you have not connected.
• Your provider API keys are stored encrypted on our server and are never shown again in full or sent back to your device.
• No ads, no analytics or tracking SDKs, no data sold or shared for advertising, and no tracking across other companies’ apps or websites.
• You must be 18 or over. At first sign-in we ask four things (display name, birth year, country, main use) and offer about sixteen optional questions you can skip. All of it is stored encrypted, you can edit or delete it in Settings, and the server owner only ever sees anonymous totals of five or more people.
• InfinityBuilds can see a list of accounts: your email, display name, sign-up date, whether your email is confirmed, when you were last active, and your sign-in history (see below). It cannot see your password, your keys, your chats, or your profile answers (only anonymous totals of five or more people).
• You can delete your account and all of its data yourself, inside the app: Settings → Delete account.

What we collect

• Account: your email address and a password stored only as an argon2id hash (we cannot read your password). Sign-in uses a session cookie that is HttpOnly and valid for 7 days.
• Content you create: conversations and messages, Compare and Conference transcripts, memories and knowledge-graph entries that Synomni derives from your chats, projects and to-dos, chats you import, and images or video you generate in the media studio.
• Provider API keys and API tokens: keys you enter in Settings are encrypted with AES-256-GCM before they reach the database. Personal API tokens (for the CLI and MCP) are stored only as a SHA-256 hash.
• Your profile: required — display name, birth year (we keep only the year and use it only to confirm you are 18 or over), country and what you mainly use Synomni for. Optional and skippable, each with a “prefer not to say” choice where it fits — for example which AI models you use, what you would like to build, your field of work, role, company size, AI experience, goals, interests, time zone, language, education, gender, how you heard about us, preferred answer style, accessibility needs, and an optional free-text “Other / tell us more” note. The whole profile is a single record encrypted with AES-256-GCM and tied to your account, so no answer is readable in our database. You can view, edit, delete the optional answers or delete the whole profile in Settings → Your profile, and it is included in Download my data.
• Account activity: the date you signed up, the time you last used the app (updated at most every 10 minutes), the time you agreed to the Terms and Privacy Policy, and, if email confirmation is switched on, whether you have confirmed your email address.
• Sign-in history: each time you sign in or sign up, and each failed password attempt on your account, we record the time, whether it worked, the method, a coarse device label such as “iPhone · Safari” or “Synomni iOS app” (read from your browser’s user-agent; the raw text is not kept), your approximate country (looked up from your IP address in an offline table on our server; no third party is contacted) and a shortened network address (IPv4 /24 or IPv6 /48, never your full IP). We never store the password you typed. You can see your own history in Settings → Recent sign-ins; the server owner (InfinityBuilds) can see everyone’s so it can spot account abuse. It is kept for 180 days and then deleted automatically, and it is deleted straight away with your account. It is included in Download my data. Country data comes from MaxMind GeoLite2 (maxmind.com).
• Technical logs: our web server keeps standard access logs (IP address, time, requested address, device/browser type, response code) for security and abuse prevention. They never contain message text or keys, and they are rotated automatically.
• On your device (iPhone app): an optional app-lock preference. If you turn on Face ID / Touch ID lock, the check is done entirely by iOS; we never receive or store your face or fingerprint data, or any biometric template.

We do not collect your contacts, photos, precise location (the only location we derive is the approximate country in your sign-in history, from your IP address), advertising identifier, health data, or financial data. The app does not use the camera or microphone.

Who receives your content

Synomni is a hub: a message is sent to a third-party AI provider only when you pick that provider for a chat, a comparison column, a conference seat, or an analysis run, and only after you have added your own API key for it.

• AI providers you choose — OpenAI (ChatGPT), Anthropic (Claude), xAI (Grok), or a model server you configure. They receive the prompts, the earlier messages of that conversation, any memory context you allow, and any text you ask the model to read. Each provider handles that data under its own terms and privacy policy and with your own API key. Please review them before connecting a provider.
• Media providers — if you generate images or video with a connected provider (for example OpenAI, xAI or Replicate), your prompt is sent to that provider.
• The built-in Demo provider runs on our server with canned, offline responses. It sends nothing to any third party.
• Hosting: Synomni runs on a server we rent from IONOS, which provides the hardware and network. We do not share your data with anyone else, we do not sell it, and we do not use it to train AI models.
• Legal: we may disclose data if required by valid legal process.

What InfinityBuilds can see about accounts

The owner of this Synomni server (InfinityBuilds) has an InfinityBuilds Accounts page that lists every account with: email address, display name, sign-up date, whether the email is confirmed, and last-active time, and can download that list as a spreadsheet (CSV). We use it to run and support the service, contact you about your account or the service, prevent abuse, and understand growth. The list never includes passwords, provider keys, API tokens, conversations or any profile answer other than your display name. You agree to this when you create an account (the sign-up checkbox), and deleting your account removes you from the list immediately. Backups of the list expire within 14 days.

If email confirmation is switched on, we email you a one-time confirmation link through an email-delivery (SMTP) service, which therefore receives your email address and that message. Nothing else about you is sent to it.

How profile answers are used

We use profile answers to understand who uses Synomni and to improve it. The owner of this Synomni server can open an Insights page showing anonymous totals (for example how many people chose each answer, and sign-ups per week). Any group with fewer than 5 people is hidden, free-text answers, names and birth years are never included, and there is no way for anyone, including the owner, to look at an individual’s profile in that view. We do not sell profile data, share it with advertisers, use it to track you across other apps or websites, or send it to any AI provider.

How we protect it

• All traffic between the app and our server uses HTTPS (TLS). The iPhone app contains no insecure-connection exceptions and can only open our server inside the app; other links open in Safari.
• Passwords: argon2id. Provider keys and your profile: AES-256-GCM encryption at rest. Provider keys are decrypted only at the moment a request to your chosen provider is made; the profile only when you view it or when anonymous totals are computed in memory.
• Every record is tied to your account and checked on each request. Sign-up is open to adults; it is rate-limited and protected against bots to prevent abuse.
• The server runs as an unprivileged user behind a firewall, installs security updates automatically, and takes nightly database backups that are kept for 14 days.
• The iPhone app does not run code on your device: the code-execution sandbox is switched off in the iOS app.

No system is perfectly secure. If we ever learn of a breach affecting your data we will tell you promptly.

Retention and deletion

We keep your data until you delete it. To delete your account: open Settings → Delete account, enter your password and confirm. This immediately and permanently removes your account, sessions, your profile, encrypted provider keys, API tokens, conversations, conferences, memories, graph, projects, media and files from our live database and storage. Copies in our nightly backups are overwritten as backups expire within 14 days. You can also download all your data first with Settings → Download my data. If you cannot sign in, email jumpstart@infinitybuilds.download from your account address and we will delete it.

Deleting content with an AI provider is separate: data you sent to OpenAI, Anthropic, xAI or another provider is governed by that provider’s own retention policy, and you manage it with them.

Your choices and rights

You can access and export your data, correct it by editing it in the app, delete individual items or your whole account, and revoke any provider key or API token at any time. Depending on where you live (for example the EU/UK or California) you may have additional rights such as objection or restriction; contact us and we will honor them. We act as the controller of your account data.

Children

Synomni is for people aged 18 and over. When you set up your profile you enter your birth year; if it shows you are under 18 we do not save it or create a profile, and you cannot use the app (you can sign out or delete the account). We do not knowingly collect data from anyone under 18.

Changes

If we change this policy we will update the date above and, for significant changes, tell you in the app.

Contact

InfinityBuilds LLC — jumpstart@infinitybuilds.download