Your full Sinteza research is tied to your authenticated account. You control private viewer access and any sanitized public Brief you publish. Sinteza has no ads and does not sell personal data.
What this policy covers
This policy applies to the Sinteza mobile apps, the web app at app.heydonde.com, and the public pages at heydonde.com.
Aisle Seat One LLC operates Sinteza and is responsible for the personal data described in this policy. Privacy questions and requests can be sent to the contact listed below.
Sinteza supports confirmed email-and-password accounts and may show Google or Apple sign-in only when that provider is configured and verified. It does not use guest accounts, and private research does not fall back to an unauthenticated storage path.
Information involved in using Sinteza
Account and session information
- Email address, account identifier, authentication status, confirmation state, and provider identity when you choose Google or Apple.
- Authentication tokens stored in protected browser or app storage so the signed-in session can persist and refresh. Provider credentials used for Apple account revocation are encrypted server-side and are not placed in URLs or analytics.
Your travel research
- Research space, project name, optional decision context and preferences, and project presentation details. Travel projects may include destinations, countries, and travel dates.
- Public source URLs you submit, together with available source metadata such as title, publisher, thumbnail, publication date, duration, and processing status.
- Documents reached through submitted public URLs, including supported PDF and text-document formats.
- Private notes you write and the categories or topics they relate to.
- Generated claims, topic groupings, syntheses, source positions, timestamps, freshness signals, and processing records.
- Viewer memberships and hashed, expiring invitation records for private sharing.
- Versioned public Brief snapshots, public slugs, publication status, and saved-Brief references. Public snapshots exclude source identities, source links, evidence, private notes, memberships, and private trip identifiers.
Plan and operational data
- Subscription tier, included and purchased credit balances, usage reservations, refunds after failed processing, purchase-intent references, provider transaction references, amounts and currencies where available, and refund or dispute status.
- Reports about public Briefs, including the public slug, selected category, description, review status, and report reference. The report form does not request your email address. Authorized Sinteza operations staff can review reports; closed reports are deleted after 180 days unless an active dispute or legal obligation requires longer retention.
- With your consent on the website, privacy-limited visit and interaction information. Sinteza records aggregate event counts in its own database and uses Google Analytics 4 to understand pages viewed and actions such as opening pricing or selecting a sign-up call to action. Sinteza does not send your email address, private research, submitted source contents, notes, or authentication tokens to analytics.
- The first-party aggregate table contains only day, event name, optional public Brief slug, and count. Public report abuse controls use a salted network-address hash; verified signup deduplication uses a salted account hash. These temporary rate and deduplication records are deleted after 24 hours.
- Basic app preferences and account-scoped source drafts stored on the device. Drafts saved before checkout are removed on sign-out or account deletion.
Sinteza’s reviewed account flow does not ask for a date of birth. No child-specific account or parental-consent flow is currently implemented.
Why this information is processed
- Authenticate your account and keep your private research associated with you.
- Create, load, update, share, and delete research projects, sources, research topics, source positions, and notes.
- Validate public URLs, retrieve available metadata or transcripts, extract source material, and generate structured research.
- Compare independent source positions and show consensus, debate, complementary advice, unique insights, timestamps, and freshness warnings.
- Create, publish, update, unpublish, save, and report sanitized public Briefs; provide revocable viewer access to privately shared research.
- Resolve destination context and provide recent historical weather for your travel dates. Historical weather is labeled as context, not a forecast.
- Enforce plan limits, reserve and refund credits, reconcile billing entitlements, prevent abuse, and diagnose processing failures.
noindex reduce discovery but do not make the page private. Unpublishing makes the public page unavailable; copies or screenshots made by other people remain outside Sinteza’s control.Essential storage first; optional analytics only with permission
Sinteza uses essential cookies and similar browser storage for secure authentication, OAuth continuity, session persistence, abuse prevention, and remembering your privacy choice. These functions are necessary to provide or protect the service and cannot be disabled through the consent panel.
Optional website analytics is off until you accept it. If accepted, Sinteza sends privacy-limited visit and interaction events to its own website endpoint for aggregate counting and loads Google Analytics 4 under Aisle Seat One’s analytics account. Google advertising signals and ad personalization are disabled. Sinteza does not use advertising cookies, build cross-site advertising profiles, or sell personal data.
Your choice is stored in the donde_cookie_consent_v1 cookie for up to 180 days and, on Sinteza’s production domains, is shared between heydonde.com and app.heydonde.com. You can reject optional analytics as easily as accepting it and can withdraw or change your choice at any time.
Services involved in delivering Sinteza
Sinteza sends only the information needed for a given function to the relevant provider. Each provider also handles information under its own terms and privacy policy.
Authentication, private database storage, row-level owner and viewer controls, realtime updates, public snapshot delivery, and server-side Edge Functions.
Server-side extraction and structured synthesis of submitted source material. Current requests set store: false.
First-choice retrieval of publicly available video captions where supported.
Fallback retrieval for native captions and certain public-source extraction when the direct path is unavailable.
Recent historical daily weather data for resolved destination coordinates and matching calendar dates.
A bundled city index used to resolve place names and coordinates for weather context.
Web billing and subscription events. Sinteza retains billing identifiers and entitlement status rather than full card details.
Account sign-in when enabled, plus native-app purchases and store billing when those purchase flows are offered through the respective app stores.
Hosting and delivery of the public website, sanitized Trip Brief pages, limited aggregate event counts, and public report submissions.
Consent-gated measurement of website page views and selected product-interest actions for Aisle Seat One. Advertising signals and personalization are disabled, and Sinteza does not send private research or account identifiers.
YouTube and other public sites may receive a server request when Sinteza retrieves material from the URL you submitted.
Wikipedia and Wikimedia Commons may be queried for freely licensed destination imagery and attribution details.
How research is separated
Sinteza’s database uses row-level security. Owners control their projects; an invited viewer can read the shared project after accepting the intended invitation but cannot publish, delete, add sources, spend credits, or read owner-only notes. Anonymous visitors receive only the frozen sanitized public Brief DTO, never the underlying research tables.
Provider credentials and server-level database credentials remain in server-side functions and are not included in the mobile or web client.
No online service can guarantee absolute security. Keep your password private, use a unique password, and log out of devices you no longer control.
Why data is handled and how long it remains
Depending on the activity and the law that applies, Sinteza relies on: performance of a contract to provide your account and requested research features; legitimate interests in securing, operating, and improving the service without overriding your rights; consent for optional website analytics; and legal obligations where records must be preserved or disclosed.
Account and research data generally remains until you delete it or your account. Closed public Brief reports are deleted after 180 days unless needed for an active dispute or legal obligation. Temporary abuse-control and signup-deduplication hashes are deleted after 24 hours. The browser consent choice lasts up to 180 days. Billing providers and app stores may retain transaction records under their own legal obligations.
Providers may process data in countries outside your own. Sinteza uses the providers and safeguards described in their applicable terms and privacy commitments and limits transfers to what is needed for the requested function.
Depending on where you live, you may have rights to ask for access, correction, deletion, a portable copy, restriction, or objection; to withdraw consent without affecting earlier lawful processing; and to complain to your local data-protection authority. Sinteza may need to verify your account or request before acting and may retain limited information where the law permits or requires it.
Your deletion controls
The Account & settings screen includes a Delete all research action. It permanently deletes all research projects in the authenticated research session; related sources, topics, positions, claims, processing jobs, and notes are removed through the database relationships.
To permanently delete the authentication account and all associated Sinteza data:
- Log in and open Account & settings.
- Select Delete account.
- In the Delete your Sinteza account? warning, choose Continue.
- In the This cannot be undone confirmation, choose Delete account.
A successful deletion removes the Supabase authentication user and account email; owned research projects and their publications, invitations, memberships, sources, claims, topics, source positions, notes, and processing jobs; the account’s viewer memberships and saved-Brief references; and source-usage and entitlement rows. Deleting a viewer account removes that membership without deleting the owner’s project.
If an active Stripe web subscription exists, Sinteza cancels it and deletes the Stripe customer before deleting the account. Apple and Google subscriptions must be canceled separately in the relevant store; uninstalling Sinteza or deleting the Sinteza account does not cancel an app-store subscription. When Sign in with Apple is used, Sinteza also attempts to revoke the stored Apple credential as part of account deletion.
Questions about privacy
Use the Support page for current product guidance or email Sinteza: