Privacy Policy

This Privacy Policy describes how SyncTato ("we," "us," or "our") handles information in connection with the SyncTato mobile app and the SyncTato server software. SyncTato is built around one rule: your photos and videos sync directly between your phone and a server that runs on a computer you own, over your own local network. We don't operate any server, cloud service, or database that stores, transmits, or has access to your photos, videos, or their contents.

Information We Collect

We don't collect your photos, videos, filenames, or anything else synced between your phone and your server — that traffic travels directly between your own devices and never reaches us. The app doesn't ask you to create an account, and it doesn't collect your name, email address, or any other personal profile.

The only things exchanged at setup, strictly between your phone and your own server — never with us — are:

• A one-time pairing code you type into the app to connect it to your server
• A device name and a randomly generated device identifier, so your server can tell your paired devices apart
• A TLS encryption certificate your server generates for itself, so that connection is encrypted

Automatically Collected Information

To keep SyncTato reliable and to protect it from piracy, we automatically collect a small amount of technical information:

• Crash and diagnostic reports. We use Firebase Crashlytics (a Google service) to receive crash logs when the app hits an error — device model, OS version, app version, and a stack trace. This is limited to technical diagnostics and never includes your photos, videos, filenames, or anything stored on your server. It's active in released versions of the app and disabled in development builds.
• Purchase verification. The first time you pair the app with a server, your server performs a one-time check with Apple or Google — sending an App Store receipt (iOS) or a Play Integrity token (Android) — to confirm the app was installed from the App Store or Google Play, not pirated. This is the only time SyncTato's server software talks to the internet outside your local network, and it never includes your photos, videos, or anything from your server.
• Purchases themselves are handled entirely by Apple's App Store or Google's Play Store under their own privacy policies — we never receive or see your payment details.

How We Use Information

We use the limited information above to:

• Diagnose and fix crashes and bugs
• Confirm a paired install is a genuine App Store or Play Store copy, to protect the app against piracy

We do not use any information to build advertising profiles, run analytics on how you use the app, or track you across apps or devices.

Information Sharing

We do not sell personal information. We share information only with:

• Google/Firebase, as our crash-reporting processor, limited to the diagnostic data described above
• Apple and Google, solely to verify a purchase/install is genuine, as described above
• Law enforcement or regulators, only if legally required — though since we never hold your photos, videos, or account data, there is essentially nothing of that kind for us to disclose

We never share your photos, videos, device media, or anything stored on your server with anyone, because we never receive it in the first place.

Data Security

Sync traffic between your phone and your server is encrypted (TLS) and travels only over your own local network — never through infrastructure we operate, because none of ours sits in that path. Your server generates its own encryption certificate on first launch; there's no central login or password for anyone to compromise, because there's no central account system. The security of the computer running your SyncTato server, and of the media it stores, is your responsibility — the same as with any other files on your own computer.

Cookies and Local Storage

The SyncTato app and server don't use cookies or any web-tracking technology. The app stores a small amount of data locally on your device — your pairing information, sync preferences, and a local record of sync activity — so it keeps working between launches. That data stays on your device and is never sent to us. This website doesn't use cookies or third-party tracking scripts either.

Your Choices

• Because we never receive your photos, videos, or account data, there's nothing of that kind for us to delete on your behalf — removing it from your phone and your own server is all that's needed.
• Unpairing the app from a server, or uninstalling the app, removes the data the app stored locally on your device.
• You can reach out using the contact details below with any question about this policy or how SyncTato handles information.

Children's Privacy

SyncTato is a general-purpose backup utility, not directed at children, and we don't knowingly collect personal information from children under 13. Because the app has no accounts or profiles, there's no mechanism for a child — or anyone — to create one.

International Transfers

Crash reports and purchase-verification checks are processed by Apple and Google, who may process that data in the United States or other countries where their infrastructure operates, under their own privacy policies. Your actual photos and videos are never transferred internationally by us — they stay on your local network, moving directly between your phone and your own server.

Changes to This Policy

We may update this Privacy Policy from time to time as the app changes. We'll post any changes on this page and update the date below.

Contact Us

If you have questions about this policy or how SyncTato handles information, contact us at: privacy@zeropointo.com

Last updated: November 2026