Privacy Policy

Last updated: March 10, 2026

CoreSync Go ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

1. Information We Collect

Account Information: When you create an account, we collect your email address and authentication credentials through Firebase Authentication to provide you with a secure, personalized experience.

Task Data: Tasks you create, including shared tasks with other users, are stored in our cloud database (Google Firebase Firestore) to enable synchronization across devices and task sharing features.

Password Manager Data: Passwords you store are encrypted locally on your device and may be synced to our cloud database in encrypted form. We do not have access to your stored passwords in plain text.

Health & Fitness Data: With your permission, we collect:

• Step count data via your device's pedometer sensor
• Water intake records you manually enter
• Gym attendance and exercise records you manually enter
• Medicine tracking records you manually enter

Contacts: With your explicit permission, we may access your device contacts solely to enable the task sharing feature, allowing you to share tasks with people in your contact list.

Device Information: We collect Firebase Cloud Messaging (FCM) tokens to deliver push notifications about shared tasks and reminders.

2. How We Use Your Information

• To provide and maintain the app's core features (task management, password storage, gym tracking)
• To enable task sharing between users
• To send push notifications for shared tasks, reminders, and alerts you configure
• To synchronize your data across devices
• To track your health and fitness goals (steps, water intake, gym attendance)

3. Data Storage & Security

Your data is stored using Google Firebase services (Authentication, Firestore, Cloud Messaging). Sensitive data such as passwords is encrypted using industry-standard encryption before storage. We use Flutter Secure Storage and encryption libraries to protect your data on-device.

4. Third-Party Services

We use the following third-party services:

• Google Firebase (Authentication, Firestore, Cloud Messaging) — for user authentication, data storage, and push notifications. Firebase Privacy Policy
• Google Health Connect — for reading and writing step count data with your permission. Health Connect Privacy

5. Permissions

The app requests the following permissions, each with a specific purpose:

• Notifications: To deliver reminders and shared task alerts
• Contacts: To find users to share tasks with (only with your consent)
• Activity Recognition & Health Data: To track your steps and fitness activity
• Alarms: To schedule exact reminders for meals, water intake, and medicines

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your data is only shared in the following limited circumstances:

• Task data is shared with specific users you choose to share tasks with
• Data is processed by Google Firebase as our cloud infrastructure provider

7. Data Retention & Deletion

Your data is retained as long as you maintain an active account. You may delete your data at any time by deleting your account or removing individual records within the app. Upon account deletion, your data will be removed from our servers.

8. Children's Privacy

CoreSync Go is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: mujtabaulhasankhan@gmail.com