SRA SYNDICATE

Privacy policy

What this site and the private pilot collect, and how to remove it.

The public website and the private pilot are covered separately, so the scope of each is clear.

Effective
2026-10-24
Operator
SRA Syndicate LLC
Website tracking
NoneNo ad pixels or third-party analytics
Health data on this site
NoneNo uploads, accounts or connections
Health records sold
Never
Contact
ops@srasyndicate.io

Contents

  1. 01 / Who and what this covers
  2. 02 / Website and contact
  3. 03 / The private pilot
  4. 04 / Sharing, sale and AI
  5. 05 / Retention and control
  6. 06 / Changes and contact

01

Who and what this covers

SRA Syndicate LLC is an applied AI and infrastructure practice that operates this website. It also runs a private health-data pilot, described in section 03. Contact: ops@srasyndicate.io.

This policy covers information associated with these public pages, correspondence with us, and the private pilot described below. It does not replace the privacy policies of device manufacturers, email services or hosting providers. A future product, integration or materially different use of information will get an applicable notice before that use begins.

02

Website and contact information

When you browse

The website serves informational pages. It adds no advertising pixels, cross-site tracking scripts or third-party analytics. There are no public user accounts, payment forms or health-data upload forms.

Hosting and delivery providers may process technical request information, such as IP addresses, browser information, requested URLs and request times, to serve pages, operate their services and protect against abuse. They may use platform-level cookies or storage for their own service functions. This site is hosted on Amazon Web Services (Amazon S3, Amazon CloudFront and Amazon Route 53), and request logging is not enabled; see the AWS Privacy Notice.

When you contact us

If you email us, we receive your email address, your message and anything you choose to include. We use it to respond and to manage the related inquiry. Messages are processed through our business email service, Google Workspace. Please do not send health records or account credentials by email.

03

The private pilot

The pilot is in private development and is not open for registration. Its local collector reads health records only from accounts whose owner has explicitly authorized it through the provider's own connection flow.

Information and purpose

The collector stores the measurements a provider makes available, with their measurement times, source identifiers and revisions, and the times the collector fetched and received them. It uses this information to keep a faithful local history and to verify automatic synchronization. Operational logs record event names and times, not health values or credentials.

Where it is stored

Pilot health records are stored in encrypted local files on the pilot computer. Connection credentials and encryption keys are kept in the operating system's credential store. This website never receives those records.

The pilot's storage controls do not manage operating-system memory, crash reports or backups made outside the application. Device manufacturers continue to process records in their own apps and cloud services under their own terms.

Connections in development

Additional activity, sleep and recovery connections are being investigated. Listing one in a project description does not mean it is connected or collecting. Each needs the provider's permissions and the account owner's authorization first.

04

Sharing, sale and AI processing

We do not sell pilot health records or use them for advertising. The collector does not send provider health records to an AI model for prompting, training or evaluation. This website does not expose pilot records to visitors, hosting providers or analytics services.

Any future external processing of provider-sourced health data must be covered by the provider's permissions, the account owner's authorization and a notice describing that processing, before it begins. Authorizing a provider connection is not treated as permission for future uses.

Website requests and correspondence are handled by the service providers named above. Information may also be disclosed when required by law or legal process; any request is assessed against the information actually held.

05

Retention and your control

Local pilot records

The pilot keeps its imported history until the account owner deletes it. Disconnect pauses collection and removes the saved authorization, keeping existing history. Delete removes the history stored by the collector and disconnects it. If local cleanup fails, the application reports the deletion as incomplete and allows a retry.

Local deletion does not remove records held by the device manufacturer or copies in backups made outside the application. Access can also be revoked at the provider.

Correspondence and website infrastructure

Business messages stay in our mailbox until deleted. You can ask us for access to, correction of or deletion of information you have provided. We may need to verify the request and may retain information where the law requires it. Technical records held by hosting and delivery providers follow their retention practices.

06

Changes and contact

We update this page and its effective date when the website's practices or the pilot change. A materially different product or use of health information gets an applicable notice before that processing begins.

Privacy questions and requests: ops@srasyndicate.io.