Privacy policy

Your memory is yours.

This policy explains what Cohinn collects when you use Syndicate and our website, why, who processes it for us, how long we keep it, and what you can ask of us. It is written to be read, and every statement in it describes how the product actually works today.

Effective 13 October 2026 · Syndicate is in private beta.

Who we are

Syndicate is made by Cohinn, a company registered in Singapore (UEN 202529378K). We are responsible for your personal data under Singapore’s Personal Data Protection Act 2012 (PDPA). Write to us at privacy@cohinn.com.

The short version

• What you know about someone is kept in your own memory. No one else’s agent can read it, and the people you meet never see it.
• When your agent asks someone else’s for an introduction, it sends only the request and the name of the person you want to meet — never your notes.
• If someone declines to introduce you, you see exactly what you would see if they did not know the person.
• We do not sell your data, show you ads, or use your data to train AI models.
• During the private beta we keep logs of conversations and voice notes, deleted after 30 days. That stops at public launch.

What we collect, and why

Your account

You sign in with Google. We receive your name, email address and a user ID from Google so we can sign you in, and we check your email address against the list of people invited to the private beta.

Your badge

The name and company you enter. This is the only thing about you shown to someone who scans your code or whom you scan.

Connections

Who you scanned and when. A connection exists only when both of you scan each other’s code; until then, only your own scan is recorded.

Voice notes

When you record a note after a scan, the audio is sent to us and to Google’s AI service to be turned into text. We keep the text, in your memory, under the name of the person it is about. We do not keep the audio.

Conversations with your agent

When you talk to your agent, your voice is streamed to Google’s speech model so the agent can reply. At the start of each conversation your agent is given your own memory — never anyone else’s.

Introductions

When you ask for an introduction we record who asked whom, the name of the person asked about, and whether it was accepted. Each side keeps its own record. What either of you knows about that person is never part of it.

Your calendar, if you connect it

If you choose to connect Google Calendar, your phone reads it directly from Google with read-only access that lasts an hour at a time. Your calendar is never sent to our servers, stored or logged, and we hold no long-term access to it. Your phone uses it in two ways:

• Where you met. When you scan someone, your phone reads only the events at that moment, works out which one you were at, and sends us just that event’s name and the date, which we save in your memory as where you met. You can remove it with one tap.
• Coming up. While the app is open, your phone reads your next 12 hours and compares them, on the phone, with the people in your own memory, so it can remind you who you’re about to meet and what you noted. Nothing about this is sent to us.

Cohinn’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you scan someone’s code without the app

If you scan a Syndicate code with your phone camera and choose to share your details, we keep exactly what you type — your name and company — with the time and the wording you agreed to, and show it only to the person whose code you scanned. We do not ask for your email or phone number, and we never contact you from that page. Ask us at privacy@cohinn.com to delete it at any time.

The waitlist

If you join the waitlist, we keep your email address only to invite you. No newsletter, and we never share it.

Logs

Like any online service we keep technical logs — for example, when you connected and whether a request succeeded. During the private beta these logs also include what is said: voice note transcripts, conversation transcripts, and messages between agents. We use them only to find faults and improve Syndicate, and they are deleted after 30 days. Logging what you say stops at public launch.

What we never do

• Sell your personal data, or use it for advertising.
• Use your data to train AI models. The AI providers we use are contractually barred from training on it too.
• Let one person’s agent read another person’s memory.

Who processes your data for us

We run Syndicate on Google Cloud and Firebase (Google LLC and its affiliates), acting on our instructions: hosting, database, sign-in, speech, transcription, AI models, agent memory, and screening of messages between agents. Google’s terms for these services state that Google will not use our customers’ data to train or fine-tune AI models without our permission, and we have not given it.

To keep conversations fast and able to reconnect, Google’s AI services may briefly hold copies of what is sent to them — for up to 24 hours — and may review prompts to detect abuse. None of this is used to train models.

Most data is stored and processed in Singapore. Live voice conversations are processed in the United States, and sign-in data, logs and some AI requests are handled on Google’s global infrastructure. Where data leaves Singapore, we rely on Google’s contractual commitments to protect it to a standard comparable to the PDPA.

How long we keep it

• Your memory, badge and connections: for as long as your account exists, or until you ask us to delete them.
• Details shared by camera scan: for as long as the account of the person you shared them with exists, or until you ask us to delete them.
• Logs: 30 days.
• Waitlist emails: until we invite you, or until you ask us to remove yours.
• Introduction records: while your account exists. We will set shorter limits before public launch and update this policy when we do.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, withdraw your consent, or ask us to delete your account and everything in it. Write to privacy@cohinn.com; we will reply within 30 days. If you are not satisfied with our answer, you can contact Singapore’s Personal Data Protection Commission.

Children

Syndicate is for professionals and is not intended for anyone under 18.

Changes

If we change how we handle your data, we will update this page and its effective date before the change takes effect, and tell beta users directly when the change matters to them.