PowrSync Privacy Policy
Effective date: 2026-06-01
Last updated: 2026-06-25
This Privacy Policy describes how PowrSync ("the app", "we", "our") collects, uses, stores, and deletes information when you use the PowrSync iOS application.
1. Who we are
PowrSync is published by Anh Ly. If you have any question about this policy or your data, contact us at support@lya3hc.site.
2. What we collect
We collect only the data that PowrSync needs to function. Nothing is collected for advertising, marketing, or analytics purposes.
Account data
- Email address — collected when you create an account, used as your login identifier and for password reset. Stored by Amazon Cognito (AWS) in the US region.
- Password — never visible to us; stored as a salted hash by Amazon Cognito.
Device data
- Device identifier (UUID) — a random identifier we generate on the device and store in the iOS Keychain. We use it to link your device to your account on our backend. The identifier is local to the device and is wiped when you delete the app.
- Display name — the friendly name you choose for the device. You can change it anytime in Settings.
- Apple Push Notification token (APNs token) — provided by Apple's push service. We use it only to deliver app-specific silent pushes (described in section 4).
Battery data
- Battery level, charging state, and timestamp — only the "Slave" role uploads readings. Each reading is the value reported by iOS at the moment of upload. Readings are linked to your device identifier and account.
Pairing data
- Pair record — when a "Master" device scans a "Slave" device's QR code, we store a record linking the two device identifiers so the Master can see the Slave's battery level.
- Pairing token — a short-lived random token used during the QR pairing flow. It expires automatically.
What we do NOT collect
We do not collect: location, contacts, photos, calendar, microphone, health data, advertising identifiers, web browsing history, or any data from other apps. We do not use third-party analytics or tracking SDKs. We do not show ads. The app does not track you across other companies' apps or websites (no App Tracking Transparency prompt is shown because no tracking takes place).
3. How we use your data
We use your data only for the following purposes:
- Provide the service. Show your own and paired devices' battery levels; deliver silent push notifications between paired devices; render your Settings screen.
- Authenticate you. Sign-in and password reset via Amazon Cognito.
- Send transactional pushes. "Battery updated" pushes from Slave to Master, and "request battery upload" pushes from Master to Slave. The app does not send marketing pushes.
- Comply with legal obligations. Respond to lawful requests when required.
We do not sell, rent, or trade your data. We do not use it to build advertising profiles.
4. Push notifications
PowrSync uses Apple's Push Notification service (APNs) to deliver silent, app-only pushes between paired devices. These pushes are background updates — they do not appear on your lock screen or in Notification Center.
You can revoke push permission at any time from iOS Settings -> PowrSync -> Notifications. The app remains functional without push; battery information will simply refresh more slowly (only when you open the app).
5. Where your data is stored
All PowrSync data is stored in the United States (AWS region us-east-1):
- Amazon Cognito (US) — account and password.
- Amazon DynamoDB (US) — device records, pair records, battery logs, pairing tokens.
- Amazon Simple Notification Service (US) — APNs endpoint references used to deliver pushes.
Data is encrypted in transit (TLS) and at rest (AWS-managed encryption keys). We use Amazon Web Services as our infrastructure provider; AWS acts as a data processor on our behalf.
6. How long we keep your data
| Data | Retention |
|---|---|
| Battery readings | Auto-deleted 7 days after upload (DynamoDB Time-to-Live) |
| Pairing tokens (QR codes) | Auto-deleted on use or short expiry |
| Device records, pair records | Until you delete your account |
| Account (email, password hash) | Until you delete your account |
7. Account deletion (your right to be forgotten)
You can permanently delete your account and all associated data from inside the app:
Settings -> Account -> Delete Account
Confirming this action immediately and permanently deletes:
- Your Cognito account (email and password hash)
- All of your device records
- All pair records (both directions — Masters paired with you and Slaves you've paired)
- All battery readings linked to your account
- All pairing tokens
- All push notification endpoints
This action cannot be undone, and we do not keep backups of deleted account data.
You may also stop using the app and delete it from your device. Deleting the app removes the local Keychain identifier and ends data collection from your device, but does not delete the server-side records — to delete those, use Settings -> Delete Account first.
8. Children
PowrSync is not directed to children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal data, contact us at the email above and we will delete it.
9. Security
We use industry-standard measures to protect your data:
- TLS encryption for all network traffic to and from our backend.
- AWS-managed encryption at rest for all stored data.
- Hashed (never plaintext) passwords managed by Amazon Cognito.
- Per-device API authentication so one user cannot access another user's records.
No internet service can be guaranteed 100% secure, but we work to minimize risk.
10. Your rights
Depending on where you live, you may have rights including:
- The right to access the data we hold about you.
- The right to correct inaccurate data.
- The right to delete your data (provided in-app — see section 7).
- The right to object to processing.
To exercise any of these rights, email support@lya3hc.site. The in-app Delete Account flow already covers the right to deletion in full.
11. International users
PowrSync is operated from Vietnam. Data is stored in the United States. By using the app you consent to your data being transferred to and processed in the United States. If you are in the European Economic Area, United Kingdom, or another region with data protection laws, the lawful basis for our processing is the performance of the contract (providing the service) and your consent.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be announced inside the app at least 30 days before they take effect; continued use of the app after that date constitutes acceptance.
13. Contact
Questions, requests, or complaints: support@lya3hc.site.