Privacy Notice
Last updated: October 26, 2026
1. Who we are
The controller of your personal data is PT ROAS ANIMA WORLDWIDE (trading as Sylen), company registration no. (NIB) 2006240057159, Jalan Raya Anyar Gang III No. 2, Kabupaten Badung, Bali 80361, Indonesia. Privacy contact: privacy@sylen.app.
This notice covers sylen.app, our sign-up and purchase flow, and the Sylen web app (the “Service”).
2. Data we collect
- Account data. Your email address. If you sign in with Google, we also receive your name, profile picture, and Google account identifier. We don’t receive your Google password. If you sign in with an email and password, your password is stored by our sign-in provider in protected (hashed) form, and we can’t see it.
- Purchase data from Paddle. Your email, country (and postal code where Paddle collects it), transaction ID, product, price, tax, and payment status. We never receive your full card details.
- Answers before you buy. In our sign-up flow you may share context about your decision (for example, what’s on the table and when you need to decide), ratings of how important the decision is and how confident you feel, and a short answer in your own words.
- Path data. How you rank what matters to you, your choices in scenarios, your pace and progress, the decision you name, the date of your first step, your choice map, your decision brief, and your generated summary.
- Sharing data. Whether you created a share link, and when.
- Support data. Messages you send us and our replies.
- Technical data. IP address, browser and device type, and logs needed to run and secure the Service.
- Website statistics. Aggregated, cookie-free statistics about visits to sylen.app (such as pages viewed, referring site, country, and device type).
Sensitive information. We don’t ask for sensitive information. Please don’t include it (for example, details about your health) in free-text answers. If you do, we use it only to provide the Service as part of your path data, and you can ask us to delete it.
3. Why we use your data, and our legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Provide your account, path, mirrors, choice map, and brief | Account, answers, path, sharing | Performance of our contract with you |
| Generate your summary with AI | Answers, path | Performance of contract |
| Process your purchase and give you access | Purchase | Performance of contract; legal obligation (records) |
| Answer your questions | Support, account | Performance of contract; legitimate interests |
| Keep the Service secure, prevent fraud, fix errors | Technical, account | Legitimate interests |
| Improve the Service using aggregated statistics that don’t identify you | Path (aggregated), website statistics | Legitimate interests |
| Comply with tax, accounting, and other legal requirements | Purchase | Legal obligation |
| Send service emails (access, receipts, path reminders you can turn off, important changes) | Account | Performance of contract |
We don’t send marketing emails. If we do in the future, we will ask for your consent where the law requires it.
4. Who we share data with
We do not sell your personal data. We share it only as needed to run the Service:
- Paddle.com: our online reseller and Merchant of Record. Paddle processes orders, payments, taxes, and refunds, and acts as an independent controller for data it collects at checkout under its own privacy notice.
- RevenueCat: our sign-up and purchase flow, and purchase status.
- Cloudflare: hosting for sylen.app and the web app, database, security, and website statistics.
- Google (Firebase Authentication): sign-in.
- Google (Google Workspace): our email for support@sylen.app and privacy@sylen.app.
- Anthropic: the AI model that generates your summary.
- An email delivery provider: to send service emails, such as path reminders.
- Professional advisers (such as lawyers and accountants), authorities where the law requires it, and a successor business if Sylen is reorganized or sold.
Our service providers process data on our behalf under contract. Before we add a new type of recipient (for example, an advertising partner), we will update this notice and ask for consent where the law requires it.
5. AI processing
To create your summary, we send your choices and answers, including any free-text answers, to Anthropic’s AI model through its API. The summary is generated automatically. It doesn’t decide anything for you, and we don’t make decisions that have legal or similarly significant effects on you based solely on automated processing.
6. International transfers
We are based in Indonesia, and our providers process data in the United States and other countries. Where the law requires it, we rely on appropriate safeguards, such as standard contractual clauses offered by our providers.
7. How long we keep data
- Account, path data, brief, and summary: for your 12-month access period plus 30 days, then deleted. Earlier if you ask.
- Share links: turned off when your access ends, or earlier if you ask.
- Purchase records: as long as tax and accounting laws require.
- Support messages: 24 months after your last message.
- Technical logs: up to 30 days, unless needed longer to investigate a security incident.
- Website statistics: kept only in aggregated form.
8. Your rights
Depending on where you live, you may have the right to access, correct, or delete your personal data; restrict or object to how we use it; receive a copy in a portable format; withdraw consent; and complain to a data protection authority.
- If you are in the EU, EEA, or UK, you can complain to your local supervisory authority.
- Indonesian residents have rights under Law No. 27 of 2022 on Personal Data Protection.
- If you live in a US state with a privacy law, you may have rights to access, correct, and delete your data.
To make a request, email privacy@sylen.app. We may need to verify your identity. We respond within the period required by applicable law, and in any case within 30 days.
9. Security
We use encryption in transit (HTTPS), limit access to personal data to people who need it, and work with established providers that run their own security programs. No system is completely secure. If a breach affects your data, we will notify you and the relevant authorities as the law requires.
10. Cookies
sylen.app does not use cookies. Our website statistics are cookie-free. The sign-up flow and web app use only cookies or similar browser storage that are strictly necessary to sign you in and keep your session and purchase working. If we add other cookies (for example, for advertising measurement), we will update this notice first and ask for consent where the law requires it.
11. Children
The Service is for people aged 18 and over. We don’t knowingly collect data from anyone under 18. If you believe we have, contact privacy@sylen.app and we will delete it.
12. Changes to this notice
We will post updates here with a new date and, for material changes, notify users by email.
13. Contact
privacy@sylen.app · PT ROAS ANIMA WORLDWIDE, Jalan Raya Anyar Gang III No. 2, Kabupaten Badung, Bali 80361, Indonesia.