rieSync

Privacy Policy

Last updated 2026-09-14

rieSync is a personal workspace for notes, tables, tasks and a focus timer, operated by rieCodes (the “controller”) from the Philippines. This policy explains what personal information the service collects, why, how long it is kept, and the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

1. What we collect

1.1 Account information

You sign in with a Google account. We receive and store your Google account’s display name, email address, profile photo URL, and a unique user identifier.

1.2 Your workspace

Everything you create in rieSync (documents, tables and their rows, tasks, focus sessions, settings) is stored under your own account. We do not read it except as needed to run the service, answer a support request you make, or comply with the law.

1.3 Access records

Each time you sign in or open the app we record the time, the kind of event, your IP address, an approximate location derived from that address (country, region, city and time zone), the device class (phone, tablet or desktop), the browser and operating system name, and the browser’s user-agent string. We do not use precise location, contacts, or any other device data.

1.4 Usage counters

We keep daily totals of app opens, sign-ins, sign-ups and device types, and a daily “active” marker per user. These are counts, not content.

1.5 What we do not collect

No advertising identifiers, no third-party analytics scripts, no tracking cookies, no payment details. The only storage in your browser is what the app needs to work: your sign-in session, your workspace cache for offline use, and your preferences.

2. Why we collect it

  • To provide the service: sign you in and keep your workspace in sync across devices.
  • To keep the service secure: detect abuse, investigate suspicious sign-ins, enforce the Terms of Service.
  • To understand how the product is used, in aggregate, so it can be improved.
  • To meet legal obligations.

The legal bases are the performance of the service you asked for, our legitimate interest in keeping it secure and improving it, and your consent, which you give when you accept these terms on first sign-in and can withdraw by deleting your account.

3. Where it is stored and who sees it

Data is stored in Google Cloud Firestore and Firebase Authentication (Google LLC) and served through Vercel Inc. Both process data on our behalf under their own data processing terms and may store it outside the Philippines. No one else receives your data. We do not sell it and we do not share it with advertisers.

4. How long we keep it

  • Your workspace and account information: until you delete your account.
  • Access records: 90 days, then deleted automatically.
  • Daily active markers: 400 days. Daily usage totals: two years.
  • Records of a suspension: for as long as the suspension stands.

5. Your rights

Under the Data Privacy Act you have the right to:

  • Be informed: this policy is that notice.
  • Access the personal data we hold about you.
  • Object to processing, including for direct marketing (we do none).
  • Erasure or blocking of your data.
  • Rectify inaccurate data. Your name and photo come from Google; change them there.
  • Data portability: receive your data in a machine-readable format.
  • Damages for a violation of your rights, and to lodge a complaint with the National Privacy Commission.

Two of these are built into the app. Account › Export My Data downloads your entire workspace as a JSON file. Account › Delete My Account erases your workspace, your profile and your sign-in immediately; access records already written expire on their 90-day schedule. For anything else, email eirmonpaculan11@gmail.com. We answer within 15 working days and may ask you to confirm your identity by signing in.

6. Security

Data travels over HTTPS. Access to your workspace is enforced by database rules that allow only your own signed-in account to read or write it. Administrative access uses a separate service credential and every administrative action is logged. Should a breach affecting your personal data occur, we will notify the National Privacy Commission and you within 72 hours of becoming aware of it, as the Act requires.

7. Children

rieSync is not directed at anyone under 18. If you believe a minor has created an account, email us and it will be removed.

8. Changes

When this policy changes in a way that matters, the app asks you to accept the new version at your next sign-in. The date at the top is the version you accepted.

9. Contact

Data protection contact: rieCodes, eirmonpaculan11@gmail.com. Supervisory authority: National Privacy Commission of the Philippines (privacy.gov.ph).