LEGAL & COMPLIANCE

Privacy Policy

SyncNexa Limited• Effective Date: January 1, 2026

1. Introduction

SyncNexa Limited (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard information when you use our website, mobile applications, and cryptographic verification services (collectively, the “Services”).

By using our Services, you agree to the privacy practices described in this policy.

2. Information We Collect

2.1 Information You Provide

When you create a SyncID account, we collect:

  • Your chosen SyncTag (public pseudonymous handle)
  • Your device public cryptographic keypair (Curve25519)
  • Your recovery email or phone number (hashed and encrypted)
  • Your active enrollment status as cryptographically confirmed by your educational institution
  • Any optional profile information you choose to add (such as portfolio links)

2.2 Information We Do NOT Collect

We strictly do not collect, copy, or store:

  • Academic transcripts or examination records
  • Student ID card photographs or biometric scans
  • Admission letters or official certificates
  • Grade point averages (GPA) or course registrations
  • Date of birth or national identification numbers
  • Home or physical residential addresses

Your educational institution remains the sole authority and source of truth. We only receive a binary cryptographic confirmation: whether you are an actively enrolled student.

3. How We Use Your Information

We use the minimal information we collect exclusively to:

  • Create and manage your SyncID decentralized credential
  • Verify your active enrollment status with your school's connector
  • Generate zero-knowledge pairwise proofs for partner services
  • Deliver security notifications, status revocations, and updates
  • Maintain the integrity and uptime of the trust mesh

We do not monetize student data. We will never sell, rent, or broker your personal information or verification records to advertisers or third parties.

4. Data Sharing & Third Parties

When you verify your student status with a participating service (such as a music streaming or software platform), we share only:

  • A unique pairwise pseudonym identifier (unique to that specific service)
  • Your active enrollment confirmation (true/false)
  • The verified name of your educational institution

Because we use pairwise identifiers, separate platforms cannot correlate your verification activity across services.

5. Cryptographic Data Security

We implement robust technological measures to safeguard your identity:

  • End-to-end mTLS 1.3 encryption for all network traffic
  • Hardware-anchored key generation within device Secure Enclaves
  • Zero document storage on central cloud servers
  • Immutable audit logging on campus connector nodes

6. Privacy Inquiries & Data Rights

If you have questions regarding this Privacy Policy, wish to exercise your data deletion rights, or want to audit your account records, contact our Data Protection Officer at:

Email: privacy@syncnexa.co
Entity:SyncNexa Limited • Legal & Compliance Division