This is a short summary of where Symiko stores your data and how access is controlled. The privacy policy is what counts – it lists all service providers with their legal bases.
Where the data is stored
| What for | Service provider and location |
|---|---|
| Database, sign-in, files | Supabase (contracting party in Singapore), servers in Frankfurt am Main (Germany) |
| Delivery of website and app | Vercel, server functions in Frankfurt; static content via a worldwide network |
| Sending emails | Resend (USA) |
| Encrypted backups | Cloudflare (storage in the EU) and Apple iCloud |
| Push notifications in the app | Apple and Google via Expo |
For service providers outside the EU, the privacy policy names the legal basis for each transfer.
Who sees what
- You only see what your role allows. The database checks this itself, not just the app.
- Personnel files are kept by the employer, that is the partner. Head office does not see the personnel files of its partners' teams.
- Changes to files, pay, documents and permissions are recorded in the change log – with field names, without contents.
No tracking
Symiko uses no analytics, tracking or advertising services. The website sets no cookies; after you sign in, Symiko only stores what your session needs.
Exercise your rights yourself
- Copy of your data: Data access
- Delete your account: Delete your account
- You decide yourself whether your birthday is shown to the team: Show your birthday to the team