What data the SYNFONIX employee app for iOS and Android and the platform behind it process — and why.
Last updated: 8 October 2026
This policy applies to the mobile app “SYNFONIX” (iOS and Android) and the SYNFONIX platform it connects to. The app is intended for employees of companies that use SYNFONIX. Accounts are created exclusively by the respective employer; you cannot sign up in the app.
Your employer is the controller for the processing of your work data (e.g. rosters, working hours, service records). SYNAPTIX GmbH, Schönbrunner Straße 188, 1120 Vienna, Austria, operates the platform and the app and processes this data as a processor on behalf of your employer (Art. 28 GDPR).
For questions about the app, contact us at office@synaptix.at.
The app asks for a permission only when you use the related feature for the first time. You can revoke permissions at any time in your device settings; the other features remain available.
The data is processed to provide the app's features: shift planning, time tracking, documenting assignments, team communication and notifications. The legal basis is your employment relationship with your employer and your employer's legal obligations and legitimate interests (Art. 6(1)(b), (c) and (f) GDPR, where applicable in conjunction with Art. 88 GDPR and national employment law).
Photos, dictation and location are additional features that you use only on your own initiative.
For notifications we use Firebase Cloud Messaging (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA) and, on iPhones, also the Apple Push Notification service (Apple Inc., USA). For this, a device-specific push token is created and linked to your user account on our server. A notification contains a title, a text and a reference to the affected entry.
Google is certified under the EU-US Data Privacy Framework. You can turn off notifications at any time in your device settings. Push tokens that become invalid are removed automatically.
When you use dictation, the recording is sent via our server to OpenAI (OpenAI, L.L.C., San Francisco, USA) to be converted into text. We do not store the recording; only the recognised text is used, which you can review and edit before saving.
Depending on your employer's settings, the platform offers further AI features (e.g. text suggestions or summaries). The content needed for each feature is sent to OpenAI or Anthropic (Anthropic PBC, San Francisco, USA). According to both providers, data sent via their APIs is not used to train their models.
Transfers to the USA are based on the EU-US Data Privacy Framework or EU standard contractual clauses.
To show work locations, the app loads map tiles from OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). This transmits your IP address to the OpenStreetMap servers. The European Commission has adopted an adequacy decision for the United Kingdom.
When you capture your location in a form, the app determines the corresponding address using your operating system's geocoding service (Apple or Google).
The platform runs in data centres in Germany. We use the following service providers as processors:
Beyond that, we only disclose data if your employer instructs us to (for example to connected payroll systems) or if we are legally required to. We do not sell data.
Work data is stored for as long as your employer needs it for the employment relationship and statutory retention obligations, and is deleted on your employer's instruction.
On your device, the app stores sign-in data and cached content until you sign out or delete the app.
Your account is managed by your employer. If you want your account or your data deleted, please contact your employer. You can also send your request to office@synaptix.at; we will forward it to your employer and help them carry it out.
You have the right of access, rectification, erasure, restriction of processing, data portability and to object (Art. 15 to 21 GDPR). For your work data, please address such requests to your employer; we support them in handling them.
You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
We update this policy when the app, the platform or the legal requirements change. The version published here applies. Information about this website is in the synfonix.io privacy policy.