Syono privacy policy

Version 1.1 · Last updated: 2026-08-14.

1. Controller

PREMIUM SERVICIOS INTEGRADOS, SL, ESB14981583. Calle Estonia 1, local 15, 14014 Córdoba. Privacy: privacy@premiumservicios.com. DPO: dpo@premiumservicios.com.

2. Data, purposes and legal bases

We process account and authentication data to administer the account; questions and generated responses to provide the service and encrypted history; purchase and subscription data to manage entitlements; and minimum security data to prevent fraud and incidents. Processing is necessary to provide the requested service, comply with obligations, or protect our legitimate security interests. Marketing requires separate consent.

Where processing is necessary for account creation, service delivery, purchases or subscriptions, the legal basis is performance of the requested service or contract. Security, fraud prevention, service integrity and defence of claims rely on legitimate interest. Accounting and tax retention relies on legal obligation. Consent is used only where required and may be withdrawn at any time without affecting prior lawful processing.

3. Sensitive and third-party data

We do not request special-category data. Do not submit sensitive, confidential, or third-party personal data unless authorized and supported by a lawful basis. We do not routinely manually review queries; access is limited to security, support, claims or legal obligations.

4. Recipients and transfers

Google Cloud / Firebase y Gemini API: autenticación, verificación de integridad de la aplicación, infraestructura asociada y procesamiento de consultas para generar respuestas. RevenueCat: gestión técnica de compras, suscripciones, recibos y derechos de acceso. European Union, OVH datacenter, owned by OVH SAS, FR 22 424 761 419. Google services may provide authentication, integrity and AI functionality; RevenueCat may process purchase and subscription data. International transfers use applicable contractual safeguards.

5. Retention

Account data and encrypted history are retained while the account is active. Backups: up to 15 days. Security records: 90 days. After deletion, direct identifiers and content are erased or made irrecoverable; minimum anonymized financial and deletion evidence may be retained for six years.

6. Rights

Request access, rectification, erasure, restriction, objection or portability at privacy@premiumservicios.com. You may complain to Agencia Española de Protección de Datos (AEPD): https://www.aepd.es/. Request account deletion here.

7. Advertising, analytics and changes

The application does not currently display advertising. Analytics, if enabled, will be disclosed before activation. Updates will be published with a new version and date.

8. Security and automated processing

We apply technical and organisational measures designed to protect data, including access controls, encryption for stored history and minimisation. AI-assisted outputs are generated automatically, but the service does not make decisions producing legal effects or similarly significant effects solely by automated means. You remain responsible for evaluating any output before acting on it.