The short version

This website does not track you. The Contentbuilder apps keep your media and drafts on your device and in your own iCloud. Contentbuilder never connects to your social accounts — to publish, it hands your post off to each platform's own app, where you post it yourself.

1. About this policy

This policy describes how Contentbuilder ("we", "us") handles information on the marketing website at contentbuilder.synccy.com and inside the Contentbuilder macOS and iOS apps. By using the website or the apps you agree to this policy.

2. What the website collects

The website has no analytics, third-party scripts, advertising pixels, or cross-site trackers, and sets no cookies. It makes no third-party network requests.

The site uses localStorage to remember one preference: your light/dark theme choice (key cb-theme). This value never leaves your browser. You can clear it by clearing site data in your browser settings.

Server access logs (request line, status code, byte count, referrer, user agent, timestamp, IP address) are kept for up to 14 days for the sole purpose of operating the site (debugging, abuse mitigation). Logs are stored on hardware we control and are not shared with third parties.

3. What the Contentbuilder apps collect

The apps are designed to keep your work with you:

Your media and drafts stay on your device and, if you enable iCloud sync, in your own private iCloud account. We have no servers holding your projects.
Social accounts — Contentbuilder never connects to, or signs you in to, Instagram, TikTok, Facebook, X, Snapchat or WhatsApp, and it holds no credentials for any of them. To publish, it copies your caption and saves your media, then opens the target app so you can paste and post yourself.
Spotify (optional) — if, and only if, you connect a Spotify account to pick a sound, the app signs you in through Spotify's own login page (OAuth with PKCE, no app secret) and stores the resulting access and refresh token in your device's Keychain. Those tokens are used to search Spotify's catalogue from your device. They never reach us, and disconnecting deletes them. Because Spotify no longer serves preview audio, the playable 30-second clip is looked up through Apple's public iTunes Search endpoint — that request carries the track and artist name, nothing about you.
AI editing — captions, silence removal and AI overlay text are produced on your device using Apple's frameworks. The clip or image you act on never leaves your Mac or iPhone.

We do not collect crash reports, telemetry, usage analytics, feature flags, or A/B test signals. There is no analytics SDK in either app, and neither app reports anything back to us about how you use it.

That is not the same as "the app never uses the network", so here is the complete list of what can leave your device, and why. Nothing on it is about you unless the line says so: your optional Spotify session (above); the iTunes Search lookup for a preview clip (above); the platform's own website or app when you finish a hand-off, which is an ordinary link you chose to open; Apple's App Store subscription page if you tap Manage subscription; iCloud, which is Apple's sync into your own private database; and — on macOS only, and only once you have filled in the billing fields yourself — the billing endpoint described in §5.

4. Publishing to social platforms

Contentbuilder does not post for you. When you publish, you post your content yourself inside the platform's own app, under that platform's terms and privacy policy. We are not a party to that relationship and do not retain a copy of what you post.

5. Payments

On iPhone and iPad, purchases run through Apple via the App Store. We never see your payment details. We receive the aggregate sales reports Apple provides — purchase country, plan and unit count — with no personally identifiable customer information.

On macOS the app can instead be pointed at a subscription endpoint you configure yourself, in Settings ▸ Subscription. It ships pointing at http://localhost:8090, which is nowhere, so out of the box nothing is sent. Once you fill in an endpoint and a billing email, the app asks that endpoint which plans exist and looks your subscription up by that email address; the address travels in the request. Card details are handled by the payment provider on that endpoint, never by the app.

6. Your rights (GDPR / UK Data Protection Act)

Because we collect almost nothing, most rights have little to act on. Where applicable you may request access to, correction of, deletion of, or a portable copy of any personal data we hold, and you may withdraw any consent you previously gave. Send any such request to privacy@synccy.com and we will reply within 30 days.

7. Children

Contentbuilder is not directed at children under 13 (or under 16 in jurisdictions where that is the consent age for online services). We do not knowingly collect data from children.

8. Security

The website is served over HTTPS with HSTS, a strict Content Security Policy, and standard hardening headers. The apps ship as notarized macOS / iOS binaries from the App Store. If you believe you have found a security vulnerability, please report it privately to hello@synccy.com — we will acknowledge your report and keep you posted.

9. Changes to this policy

When we change this policy, the "Last updated" date at the top changes. We'll surface material changes in the footer of the site for at least 30 days.

10. Contact

Contentbuilder
Email: hello@synccy.com