Privacy Policy

Who we are

Sin Forgiver is operated by Syntax Circus LLC, 7533 S Center View Ct Ste N, West Jordan, UT 84084, United States ("we," "us"). This policy explains what we collect when you use the Sin Forgiver app and website, why, who else handles it, and your choices. Privacy questions: privacy@sinforgiver.com.

Age requirement

Sin Forgiver is for people who are 13 or older. The app and website check your age before anything else is collected, and we do not knowingly collect information from anyone under 13. If you are under 13, do not use Sin Forgiver. If we learn that someone under 13 has used the service, we will delete the information we have about that person.

Age information from Apple and Google Play. On supported phones and tablets, the app may ask Apple or Google Play, before you continue, for the age range on your account and for any age-verification or parental-approval requirement that applies. Apple or Google Play handles that request and may show you its own screen asking whether to share. We use the answer on your device only, to decide whether you meet our minimum age of 13 and to respect any restriction Apple or Google Play reports. We do not save the age range, how it was provided, or any Apple or Google identifier, and we do not send them to our servers, crash reports, or anyone else. The age range describes the account on the device; it does not confirm who is holding it.

If no age range is available, or you choose not to share one where sharing is optional, the app asks your age instead. The age you type is not saved or sent; if it is under 13, the app saves a note on your device that blocks it.

If Apple or Google Play reports a restriction (for example that you are under 13, or that age verification or a parent's or guardian's approval is needed), the app saves only the kind of restriction on your device and stays unavailable, including purchases, until the restriction is resolved with Apple or Google Play and the app checks again (when it next opens, or when you tap Check again). A failed or interrupted check never removes a restriction. The app checks again when it opens and when you return to it.

Information we process

• Agreement record. When you confirm your age and accept the Terms and this policy, we keep the versions you accepted, a confirmation that you are 13 or older, the date and time, your platform (Android, iOS, or web), the app version, and a one-way hash of a random identifier for your installation. We do not store your birthdate, your IP address, or your user-agent in this record.
• Account and sign-in. If you sign in, our sign-in service (which we host) processes your email address and a sign-in identifier. If you use the app without signing in, we create an anonymous profile for your device.
• Device identifier. To run the app we use a device or installation identifier that the app generates or reads from your operating system (not the advertising ID). On our servers it is stored in a hashed form, together with your platform, app version, OS version, and when the device was last active.
• Purchases. We process the purchase details needed to deliver what you bought and handle refunds and accounting: the product, amount, currency, store or payment provider, transaction identifier, date, and the name you chose to put on a certificate. We never see or store your payment card number.
• Email. If you give us an email address (to sign in, to receive a certificate, or when you contact us or file a request), we use it for transactional messages and correspondence. We do not send marketing email.
• Accusation content. If you use the accusation feature, we process what you submit: your email, the sin you picked, an optional incident date and time, a short place label, and an optional name for the person you name, plus an optional email that we use only to honor blocks. See "Information about other people" below.
• Promo codes. If you redeem a promo code we record the code, when it was redeemed, and the IP address from which it was redeemed, to prevent abuse.
• Support and privacy requests. What you send us, including a contact email and the details of your request.
• Crash and error reports (mobile app). After you accept the Terms, the app sends crash and error reports to our own crash-reporting server (which we host). They contain technical details such as stack traces, app version, device model and OS version, and a random session identifier. We configure the app not to attach your name, email, account identifier, or authentication headers. Crash reporting does not start before you have confirmed your age and accepted the Terms; it starts on the next launch after you accept.
• Servers and abuse protection. Our servers receive your IP address with each request and may keep it in security and operational logs and abuse-protection records, for example to rate-limit requests and to block abuse.

We do not collect your precise or approximate location, your contacts, photos, camera, or microphone, health data, or an advertising identifier. The app does not include advertising or cross-app tracking, and we do not "track" you in the sense Apple uses that word.

Information about other people

Sin Forgiver lets users create jokey certificates about someone else. That means information about people who did not sign up (such as the name, place, date, and alleged "sin" a user enters) can be stored in our systems. We process it to create the certificate and show it to whoever receives the link, to prevent abuse, and to handle complaints. We do not contact the named person. If you are named in an accusation, you can ask us to remove it, or report it and block the sender, without making a purchase or creating an account: use https://www.sinforgiver.com/removal-request, the report options on the accusation page, or email privacy@sinforgiver.com. We keep a limited record of removal requests and moderation decisions as described under "Retention and deletion."

How we use information

To run the service, deliver purchases and certificates, keep a record of your agreement, prevent fraud and abuse, respond to complaints and legal requests, send transactional email, diagnose crashes, and meet accounting and legal obligations. We do not use it for advertising.

Service providers

We use the following providers who process data on our behalf:

• Purchase processor (purchase and entitlement processing; receives a user or device identifier and purchase data).
• Apple App Store and Google Play (and, for web purchases, a payment processor behind our purchase processor's web checkout) take payment and process payment details under their own policies.
• Transactional email provider (sends transactional email; receives the recipient email address and the message content).
• Mailbox provider (receives the messages you send to our support, privacy and copyright addresses).
• Crash reporting and sign-in (both self-hosted by us).
• AI image generation provider, used only by our administrators to generate catalog artwork. No user-submitted text, names, or identifiers are sent to it.
• Our own servers. We run the Sin Forgiver servers and database ourselves, in the United States. No outside hosting company holds your data for us. We keep encrypted backups of our systems on storage we control.

These providers may change as the service evolves; we will update this policy when they do.

We do not sell or share your information

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We may disclose information if required by law or to protect rights, safety, or the service.

Retention and deletion

You can close your account in the app (Account, Delete account), on the website while signed in, or by sending a request on our public data-deletion page without signing in. Closing an account anonymizes your profile, deletes your device records and certificate files, and asks our purchase processor to delete its record of you. It does not delete your shared SyntaxCircus sign-in, and our purchase processor, the app stores, and our email provider keep their own records under their own policies. You can also delete your agreement record from within the app, or by asking us at privacy@sinforgiver.com. We aim to answer requests within 30 days.

Your rights

Depending on where you live (for example the EU/UK or California), you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, to withdraw consent, and to complain to a data protection authority. You can download a copy of your data in the app or on the website, close your account as described above, or write to privacy@sinforgiver.com. We will not discriminate against you for using these rights. Where GDPR applies, our legal bases are performing our contract with you (purchases, certificates), our legitimate interests (security, abuse prevention, crash diagnostics, keeping evidence of agreement), and legal obligations (accounting).

International transfers

We and our providers may process data in the United States and other countries that may not offer the same protection as your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Security

We use transport encryption and access controls. No system is perfectly secure.

Changes to this policy

We will post updates here with a new effective date. For material changes the app will ask you to accept the new version at your next launch.

Contact

Syntax Circus LLC, 7533 S Center View Ct Ste N, West Jordan, UT 84084, United States. privacy@sinforgiver.com. Support: support@sinforgiver.com.

Contact us

For privacy questions or requests, email privacy@sinforgiver.com.