Panther Group LLC

Synkly Privacy Policy

Last updated: June 17, 2026

Revision: 2026-06-17

This Privacy Policy explains how Panther Group LLC, operating under the trade name Synkly ("Panther Group," "we," "us," or "our"), collects, uses, discloses, retains, and protects information when you use Synkly, including our mobile applications, websites, and related services (collectively, the "Services").

Contact: privacy@panthergroupllc.com

Synkly is designed for appointment booking and related patient, provider, office, document, notification, and account workflows. Some information handled through the Services may be sensitive health, insurance, appointment, identity, or healthcare-adjacent information. Do not use Synkly for emergencies.

Important Healthcare and Emergency Notice

Synkly is not an emergency service. If you have a medical emergency, call 911 or your local emergency number immediately.

Synkly is not intended to replace professional medical judgment, diagnosis, treatment, or advice from a licensed healthcare professional. Healthcare providers and offices using Synkly remain responsible for their own clinical, legal, privacy, security, and recordkeeping obligations.

Information We Collect

We may collect the following categories of information depending on how you use the Services:

Account and Profile Information

• Name
• Email address
• Phone number
• Password or authentication credentials
• Date of birth
• Address
• Profile photo, if you choose to add one
• Account status, authentication status, and security-related information

Dependent, Minor, and Guardian Information

If you use dependent features, we may collect information about dependents or minors that you, another authorized guardian, a healthcare office, or a provider submits or manages through the Services. This may include dependent name, date of birth, relationship or guardian linkage, inherited or associated address information, guardian contact information, appointment history, insurance information, uploaded cards or documents, forms, signatures, health conditions, and related workflow records.

Appointment and Office Information

• Appointment requests, bookings, confirmations, cancellations, and history
• Provider, office, business, location, and availability information
• Appointment notes or intake-related details you choose to provide
• Communications and notifications related to appointments or account activity

Health, Insurance, and Document Information

Depending on the features you use and the offices or providers connected to your account, Synkly may process information such as:

• Insurance card or insurance coverage information
• Uploaded documents, forms, identification images, or profile images
• Patient intake information
• Consent forms, acknowledgments, signatures, and related records
• Health-related information you enter or upload, including medical history, allergies, medications, conditions, family history, or similar information
• Text extracted from documents or images using optical character recognition (OCR), including Google Cloud Vision, when you choose to use those features or when an authorized office uses those features for administrative intake, document, or insurance workflows

Device, Permission, and Technical Information

We may collect:

• Device type, operating system, app version, language, and region settings
• Push notification tokens and notification preference data
• Crash reports, diagnostic information, and performance data
• Security logs, access logs, audit records, and fraud-prevention signals
• Approximate or precise location information when you grant location permission and use location-based features, such as finding nearby offices
• Camera, photo library, and file information when you grant permission and choose to upload or capture content

Analytics Information

Synkly may use Firebase Analytics, Firebase Crashlytics, and limited diagnostic tooling for app reliability, crash investigation, security, and performance monitoring. These tools are configured and restricted to exclude Protected Health Information (PHI), clinical content, insurance information, uploaded document content, OCR text, patient names, patient phone numbers, appointment details, diagnoses, conditions, intake form content, and other direct patient identifiers. Synkly does not intentionally transmit PHI or clinical data to analytics or crash reporting services. If you believe sensitive information was included in a crash report or diagnostic event, contact security@panthergroupllc.com.

Search and Market-Demand Analytics

When you search or browse care categories in Synkly, we may use privacy-protected, thresholded aggregate signals to understand care demand by general area. These signals may include the category or subcategory searched, service intent, general market area or coarse location area, search mode, radius range, result count ranges, and whether a search returned few or no results.

Synkly does not store raw search text, exact location history, user identifiers, contact information, appointment information, provider identifiers, clinic identifiers, or PHI in these aggregate demand counters.

We may use aggregated and de-identified demand insights to improve provider discovery, identify underserved areas, prioritize provider onboarding, and support internal business development. We do not sell personal health information, individual search history, exact location history, patient profiles, or user-level demand data.

How We Collect Information

We collect information:

• Directly from you when you create an account, complete forms, book appointments, upload documents, or use app features
• From healthcare offices, providers, staff, or businesses connected to appointment and patient workflows
• Automatically from your device and app activity when needed for security, diagnostics, notifications, sanitized analytics, crash investigation, and service operation
• From service providers that help us operate the Services, such as Firebase, Google Cloud, Google Cloud Vision/OCR, Google Maps, push notification providers, hosting, storage, authentication, Stripe-hosted billing surfaces, sanitized analytics, and crash reporting services

How We Use Information

We use information to:

• Create, authenticate, secure, and manage your account
• Let you search for offices or providers, book appointments, and manage appointment activity
• Support patient intake, consent, document, insurance, and related workflows
• Manage dependent profiles and guardian access
• Book, confirm, reschedule, cancel, and support appointments for dependents
• Route dependent-related reminders, forms, insurance, identity, and office communications through the authorized guardian or contact path
• Send transactional notifications about appointments, account activity, security, or requested services
• Provide customer support and respond to requests
• Maintain audit logs and security records
• Detect, investigate, and prevent fraud, abuse, security incidents, or unauthorized access
• Improve reliability, performance, accessibility, and product quality
• Comply with legal, regulatory, contractual, audit, recordkeeping, and dispute-resolution obligations

SMS Appointment Reminder Privacy

If you opt in to Synkly SMS appointment reminders, we use your verified phone number, SMS consent status, notification preferences, appointment reminder state, and related delivery or reply metadata to send and manage transactional appointment reminder messages, opt-out confirmations, opt-in confirmations, and help responses.

Synkly SMS appointment reminders are optional and are not used for marketing or promotional messages. No mobile information will be shared with third party/affiliates for marketing or promotional purposes. SMS opt-in consent and phone numbers collected for SMS are not sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes.

We may share SMS-related information with service providers that help us deliver, secure, troubleshoot, or support the SMS reminder program, but only as needed for those operational purposes and subject to applicable agreements. You can opt out of SMS appointment reminders by replying STOP to a Synkly SMS message or by changing your notification preferences in the Synkly app.

How We Share Information

We may share information as described below:

With Healthcare Offices, Providers, and Authorized Staff

Information related to appointments, intake, documents, insurance, consent, or patient workflows may be shared with the healthcare offices, providers, staff, or businesses involved in providing or managing those services.

For dependent appointments or workflows, dependent patient information and guardian contact information may be shared with the healthcare offices, providers, staff, or businesses involved in the dependent's care or administrative workflow.

With Authorized Guardians

Dependent information may be visible to guardians or authorized users who have been granted access to the dependent profile, subject to the access controls available in the Services.

With Service Providers

We may use vendors and infrastructure providers to operate the Services, including authentication, database, storage, hosting, push notifications, maps, payment processing, sanitized analytics, crash reporting, OCR, security, and support tools. These may include Firebase and Google Cloud services, Google Cloud Vision for OCR, Stripe for checkout, billing, payment-method, invoice, and subscription workflows, and other approved vendors. These service providers may process information on our behalf according to their agreements with us. Raw card numbers are handled by Stripe-hosted payment surfaces and are not stored by Synkly.

For Legal, Security, and Compliance Reasons

We may disclose information when we believe it is necessary to comply with law, regulation, legal process, professional obligations, security requirements, fraud prevention, audit obligations, or to protect the rights, safety, and security of users, providers, Panther Group, or others.

Business Transfers

If Panther Group is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to appropriate protections.

No Sale of Health Information

We do not sell personal health information. We do not use personal health information for third-party advertising. We do not share personal health information with data brokers.

If our practices change in a way that requires consent or additional notice under applicable law, we will update this Privacy Policy and obtain consent where required.

Permissions

Synkly may request device permissions only when needed for app features:

• Notifications: to send appointment, account, and transactional alerts
• Location: to help find nearby offices or location-based appointment options
• Camera: to capture profile photos, insurance cards, documents, or other uploaded content
• Photos or files: to select and upload images, documents, or related records

You can change device permissions through your device settings. Some features may not work if a required permission is disabled.

Data Retention

We retain information for as long as needed to provide the Services, operate the app, protect security, meet legal or regulatory obligations, support provider and office recordkeeping, maintain audit logs, resolve disputes, and enforce agreements.

Retention periods vary by information type. Some records, including appointment records, consent records, document records, audit logs, security logs, provider-related records, insurance-related records, or healthcare-related records, may need to be retained after an account deletion request where required or permitted by law, regulation, provider recordkeeping obligations, fraud prevention, security, audit, or dispute-resolution needs.

Archiving a dependent profile or removing a guardian's access may restrict future access but may not delete retained appointment, consent, insurance, document, audit, security, provider, or healthcare-related records.

Backup copies may persist for a limited period according to normal backup, disaster recovery, and security procedures.

Account Deletion

You may request deletion of your Synkly account in the app or by using our public account deletion instructions.

When you request deletion, we will begin a deletion review and processing workflow. We may delete, de-identify, anonymize, restrict, or retain information depending on the type of data and applicable legal, regulatory, security, audit, provider-record, and dispute-resolution requirements.

Information that may be deleted or disabled includes account access, authentication credentials, device tokens, notification tokens, and profile information that is not required for retention.

Information that may be retained includes records needed for legal compliance, security, audit, fraud prevention, provider recordkeeping, healthcare-related retention, dispute resolution, or enforcement of agreements.

To request account deletion outside the app, contact privacy@panthergroupllc.com or use the public account deletion page provided for Synkly.

Your Choices and Rights

Depending on your location and applicable law, you may have rights to:

• Access certain personal information
• Correct inaccurate information
• Request deletion of certain information
• Withdraw certain permissions
• Object to or restrict certain processing
• Request information about data practices

You can update some account information in the app. You can also contact us at privacy@panthergroupllc.com.

We may need to verify your identity before fulfilling certain requests.

Security

We use technical, administrative, and organizational safeguards designed to protect information. These may include authentication controls, access restrictions, encrypted transport, protected storage, audit logging, signed access links, OCR workflow controls, telemetry sanitization, monitoring, and other security measures.

No system is perfectly secure. You are responsible for protecting your login credentials, using a secure device, and notifying us at security@panthergroupllc.com if you believe your account has been compromised or you need to report a security concern.

Children

Synkly requires individuals who create or control a Synkly user account to be at least 18 years old. We do not knowingly permit individuals under 18 to create their own accounts, and the Services are not directed to children under 13 or to minors creating their own accounts.

Synkly may process information about minors or dependents when that information is provided, submitted, or managed by a parent, guardian, healthcare provider, healthcare office, or other authorized party where permitted by applicable law. In those cases, the authorized account holder, provider, office, or organization is responsible for using Synkly only with appropriate authority.

If you believe a minor has created an account or provided personal information to Synkly without proper authorization, contact us at privacy@panthergroupllc.com. We will investigate and take appropriate action, which may include disabling, deleting, or restricting the account or information, subject to applicable legal, security, audit, healthcare, and recordkeeping retention obligations.

Third-Party Services and Links

The Services may include third-party services, maps, links, provider information, or integrations. Third-party services are governed by their own privacy policies and terms. We are not responsible for third-party privacy or security practices.

HIPAA and Regulated Data

Some information handled through Synkly may be subject to healthcare privacy, security, or recordkeeping laws depending on the role of the healthcare provider, business, or office involved and the agreements in place.

Panther Group does not make a blanket public claim that every use of Synkly is HIPAA compliant. Covered entities, business associates, providers, offices, and other regulated parties are responsible for determining their own obligations and using Synkly only under appropriate agreements, configurations, and safeguards. When Synkly handles PHI for a covered entity, PHI workflows must remain under the applicable Business Associate Agreement, covered service configurations, and documented security controls.

International Use

Synkly is operated by Panther Group LLC. If you use the Services from outside the United States or Puerto Rico, your information may be processed in the United States or other locations where our service providers operate. By using the Services, you understand that laws in those locations may differ from laws in your jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law or through the Services. The "Last updated" date shows when this Privacy Policy was last revised.

Contact Us

Panther Group LLC
Email: privacy@panthergroupllc.com