1. Terms of Use / User Agreement

Effective date: April 03, 2025 App / Service: SYNC Company: RAB CORP Pvt Ltd Registered / physical address in India: B401 Ashwini Paradise, Gangadham chowk Kondhwa Bibvewadi road Pune 37

1.1 Acceptance of these Terms

These Terms of Use / User Agreement (“Terms”) are a binding agreement between you and RAB CORP Pvt Ltd (“Company”, “we”, “us”, or “our”) for your access to and use of SYNC, including the SYNC mobile application, website, application programming interfaces, software, servers, communication tools, support channels, and related services (together, the “Services”).

By creating an account, using the Services, downloading the app, sending or receiving messages, joining a group, using a channel or broadcast feature, uploading or forwarding content, reacting to messages, contacting support, or otherwise accessing SYNC, you agree to these Terms and to the Privacy Policy, Community Guidelines / Acceptable Use Policy, Grievance Redressal Policy, Child Safety Policy, Law Enforcement Guidelines, End-to-End Encryption Notice, and any additional feature-specific terms notified by us from time to time.

If you do not agree to these Terms, you must not access or use the Services.

1.2 Definitions

For consistency across our legal documents, the following terms have the meanings set out below.

“Account” means the user account, profile, phone identity, email identity, handle, channel identity, group identity, or other login or presence through which you access SYNC.

“Applicable Law” means all laws, rules, regulations, orders, directions, judgments, and binding requirements applicable in the Republic of India and any other jurisdiction that lawfully applies to your use of the Services.

“Company Content” means software, design, logos, marks, documentation, policies, interfaces, workflows, databases, text, graphics, and other materials owned by or licensed to us, excluding User Content.

“Computer Resource” has the meaning assigned to it under the Information Technology Act, 2000 and includes the systems, servers, software, networks, devices, applications, and data resources used for SYNC.

“Content” means any message, text, image, photograph, audio, video, file, document, contact card, location, sticker, emoji reaction, profile information, username, group name, group image, channel post, broadcast, link, metadata submitted by you, or other information created, generated, modified, uploaded, displayed, published, transmitted, stored, updated, shared, forwarded, or otherwise made available through the Services.

“E2EE” or “end-to-end encryption” means encryption designed so that the content of supported private messages is encrypted on the sender’s device and can be decrypted only on the recipient’s device or devices, subject to the details explained in the End-to-End Encryption Notice.

“Grievance Officer” means the person designated by us to receive and process complaints under the IT Rules and these Terms. The current placeholder is Ashish Bhawkar, Ashish.bhawkar@rabcorp.co.in.

“IT Rules” means the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended, consolidated, or replaced from time to time.

“Personal Data” means digital personal data processed by us as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable.

“Report” means a user report, complaint, grievance, abuse report, safety report, legal notice, or other communication submitted to us in relation to the Services or Content.

“Significant Social Media Intermediary” or “SSMI” means a social media intermediary that is required to comply with additional obligations under the IT Rules after crossing the user threshold notified by the Central Government or where otherwise directed under Applicable Law.

“Synthetically Generated Information” or “SGI” means audio, visual, or audio-visual information that has been created, generated, modified, or altered using a computer resource and that may be perceived as true or as depicting a natural person or real-world event, subject to the exclusions and details under Applicable Law.

“User”, “you”, or “your” means any person who accesses or uses the Services.

“User Content” means Content created, generated, modified, uploaded, shared, forwarded, stored, transmitted, displayed, or otherwise made available by or on behalf of a User.

1.3 Nature of SYNC

SYNC is a privacy-first, messaging and communication service. The Services may include private one-to-one chats, group chats, media and file sharing, reactions, forwarding, channels, broadcasts, account profiles, contact discovery, user handles, connection requests, privacy settings, reporting tools, support tools, and security features.

We act as an intermediary in relation to User Content transmitted, stored, or made available through the Services, subject to our rights and obligations under Applicable Law. Users are responsible for the User Content they create, upload, share, forward, or otherwise make available through the Services.

We do not claim ownership over User Content. We do not pre-screen all private communications. We may, however, process Reports, enforce these Terms, remove or disable access to Content where permitted or required, preserve evidence, respond to lawful orders, operate safety tools, and take other actions described in these Terms and the Community Guidelines.

1.4 Account creation, eligibility, and authority

You must provide accurate, current, and complete information when creating or using an Account. Depending on the feature, this may include your phone number, email address, display name, user handle, profile information, device information, verification information, or other details reasonably required for authentication, security, communication, legal compliance, or operation of the Services.

You must be legally capable of entering into these Terms. If you are below eighteen years of age, you may use the Services only with verifiable parental consent, parental or legal guardian supervision, and only where your use is permitted by Applicable Law and our Child Safety Policy. We may restrict, suspend, or terminate Accounts where age, parental consent, safety, or legal requirements are not satisfied.

If you use the Services for or on behalf of an organisation, you represent that you are authorised to bind that organisation. The organisation is responsible for your use of the Services, and references to “you” will include that organisation where applicable.

1.5 Account security

You are responsible for maintaining the confidentiality and security of your Account, device, login credentials, passwords, OTPs, encryption keys stored on your device, and access to your phone number, email account, or device. You must not share OTPs, passwords, authentication tokens, or other access credentials with any person.

You must promptly notify us at support@rabcorp.co.in or through the in-app support mechanism if you suspect unauthorised access, compromise of your device, misuse of your Account, impersonation, or any security issue. We may require additional verification before restoring access or taking action.

We may use authentication controls, device binding, one-time passwords, Firebase authentication, email verification, encryption key management, rate limits, abuse detection, and other security measures. You must not attempt to bypass, weaken, disrupt, reverse engineer, or misuse any such measures.

1.6 User responsibilities

You agree to use the Services lawfully, responsibly, and respectfully. In particular, you must:

comply with these Terms, the Community Guidelines, the Privacy Policy, and Applicable Law;

ensure that you have the legal right to create, upload, share, forward, or transmit any Content;

respect the privacy, dignity, intellectual property, reputation, and safety of others;

use reporting, blocking, privacy, and grievance tools in good faith;

keep your Account details accurate and up to date;

not use the Services to cause harm to any person, child, organisation, public authority, or Computer Resource;

not use the Services to commit, facilitate, conceal, promote, or incite any offence or unlawful act;

not misuse forwarding, group, channel, broadcast, file sharing, or automated tools to spread unlawful or harmful Content;

not interfere with the functioning, security, integrity, or availability of the Services; and

cooperate with us where reasonably required for safety, security, legal compliance, or grievance redressal.

1.7 Prohibited conduct and prohibited Content

You must not host, display, upload, modify, publish, transmit, store, update, share, forward, create, generate, alter, or otherwise disseminate any Content or conduct that is prohibited under our Community Guidelines / Acceptable Use Policy or Applicable Law.

The detailed list of prohibited Content and conduct is set out in the Community Guidelines / Acceptable Use Policy, which forms part of these Terms. That policy includes, among other categories, Content that belongs to another person without rights; obscene, pornographic, paedophilic, sexually explicit, or privacy-invasive material; child sexual abuse material; Content harmful to children; Content insulting or harassing on the basis of gender; racially or ethnically objectionable Content; Content promoting enmity with intent to incite violence; intellectual property violations; misinformation or misleading information; impersonation; threats to sovereignty, security, public order, or friendly relations; incitement of cognisable offences; malware; spam; prohibited online gaming or gambling related misuse; unlawful deepfake or synthetic Content; and any Content that violates any law for the time being in force.

You must read the Community Guidelines carefully before using the Services. Violation of the Community Guidelines may lead to Content removal, disabling of access, suspension or termination of your Account, reporting to appropriate authorities where required, preservation of evidence, legal action, and other consequences described in these Terms.

1.8 End-to-end encryption and privacy of communications

SYNC is designed as a privacy-first service. Supported private one-to-one chats and supported group chats are protected by end-to-end encryption. This means that, for those supported features, the message content is encrypted on the sender’s device and is intended to be decrypted only on the recipient’s device or devices.

End-to-end encryption does not mean that all information connected with the Services is invisible to us. We may process account information, device information, delivery metadata, encrypted message envelopes, group and channel information, reports, support communications, security logs, and other information described in the Privacy Policy and End-to-End Encryption Notice.

When a User voluntarily reports a message, media file, profile, group, channel, broadcast, or other Content, the reporting tool may send us the reported Content, relevant metadata, and supporting details so that we can review, moderate, preserve, or disclose such information where permitted or required by Applicable Law.

You must not rely on end-to-end encryption to commit unlawful acts. We may take action against unlawful or prohibited conduct based on Reports, metadata, lawful orders, account information, safety signals, or other information lawfully available to us.

1.9 Groups, channels, broadcasts, forwarding, and virality controls

Groups, channels, broadcasts, and forwarding features are provided to help Users communicate. They must not be used to spread unlawful, harmful, misleading, abusive, private, sexual, violent, spam, malware, or unauthorised Content.

We may set limits on forwarding, group size, broadcast size, upload size, automated activity, rate of messaging, suspicious behaviour, repeated reporting, channel visibility, public discovery, invitations, or other product functions to reduce harm and protect Users. We may apply labels, warnings, limits, friction, review, or disablement to forwarded Content, viral Content, public or semi-public channels, or suspected harmful Content.

If you administer a group, channel, or broadcast list, you are responsible for using reasonable care to manage the space, remove unlawful or harmful Content where you have the ability to do so, avoid adding people without lawful basis or consent where required, and cooperate with Reports or lawful requirements.

1.10 Synthetic, manipulated, or deepfake Content

You must not use the Services to create, generate, modify, alter, publish, transmit, share, or disseminate unlawful SGI, deepfakes, morphed images, manipulated audio or video, false documents, false electronic records, non-consensual intimate imagery, child sexual abuse material, deceptive impersonation, or any synthetic Content that violates Applicable Law or our Community Guidelines.

Where the Services enable or facilitate SGI features, we may require disclosures, labels, metadata, unique identifiers, user declarations, technical checks, reporting tools, or other controls. You must not remove, conceal, manipulate, or bypass SGI labels, provenance metadata, safety notices, or technical identifiers.

1.11 Reporting and moderation

You may report Content, Accounts, groups, channels, broadcasts, or conduct that you believe violates these Terms, the Community Guidelines, or Applicable Law. Reports may be submitted through in-app reporting tools, the website, support@rabcorp.co.in, or Ashish Bhawkar, Ashish.bhawkar@rabcorp.co.in, as applicable.

We may review Reports manually, using automated tools, or using a combination of human and technical review. We may take actions including no action, warning, labelling, limiting forwarding, disabling sharing, removal or disablement of Content, suspension or termination of Accounts, preservation of records, blocking access, disabling features, or reporting to lawful authorities.

We may consider context, severity, legal risk, user safety, repeat conduct, public interest, privacy, free expression, technical feasibility, and other relevant factors. Where required or reasonably appropriate, we may give the affected User notice and a reasonable opportunity to dispute an action or request reinstatement, unless doing so would be unlawful, unsafe, harmful to an investigation, technically infeasible, or contrary to a lawful order.

1.12 Grievance redressal

Our Grievance Redressal Policy explains how complaints are received, acknowledged, reviewed, resolved, escalated, and appealed. The Grievance Officer’s placeholder details are:

Grievance Officer: Ashish Bhawkar Email: Ashish Bhawkar, Ashish.bhawkar@rabcorp.co.in Postal address: B401 Ashwini Paradise, Gangadham chowk Kondhwa Bibvewadi road Pune 37

We will acknowledge complaints within twenty-four hours and resolve them within seven days from receipt, subject to the special timelines, safety processes, and legal requirements described in the Grievance Redressal Policy. Certain harmful Content complaints may be resolved within thirty-six hours, and complaints involving private areas, nudity, sexual acts, impersonation, or artificially morphed images may require action within two hours, as described in that policy.

1.13 Lawful orders, legal requests, and cooperation with authorities

We may receive orders, notices, directions, preservation requests, information requests, takedown requests, interception, monitoring, decryption, first-originator, cyber security, or investigation-related requests from courts, competent authorities, government agencies, law enforcement authorities, CERT-In, or other lawful bodies.

We will process such requests in accordance with Applicable Law, the Law Enforcement Guidelines, and our commitment to privacy and security. We may disclose information under our control or possession where lawfully required. We cannot disclose plaintext content of end-to-end encrypted private messages that we do not possess, and we do not provide backdoors to encrypted communications.

If we become an SSMI providing messaging services, we may be required to enable identification of the first originator of information on our Computer Resource only in the manner, to the extent, and for the grounds permitted under Applicable Law. Such compliance does not require disclosure of message content or information about other Users beyond what Applicable Law requires.

1.14 Periodic user notifications

At least once every three months, we will inform Users in a simple and effective manner, through in-app notice, email, app screen, website notice, policy notice, or other appropriate means, about these Terms, the Privacy Policy, the Community Guidelines, prohibited Content categories, and the consequences of non-compliance.

Such notices may state that non-compliance may result in immediate suspension or termination of access or usage rights, removal or disabling of access to non-compliant Content, preservation of evidence, mandatory reporting to appropriate authorities where required, and potential penalty or punishment under the Information Technology Act, 2000 or any other Applicable Law.

1.15 Intellectual property

You retain ownership of the rights that you lawfully hold in your User Content. By using the Services, you grant us a worldwide, non-exclusive, royalty-free, transferable, sublicensable licence to host, store, transmit, route, display, reproduce, process, modify for technical purposes, secure, back up, moderate, report, preserve, and otherwise use your User Content only as necessary to operate, improve, protect, enforce, and provide the Services and comply with Applicable Law.

You represent and warrant that you have all rights, licences, permissions, and consents needed to use, share, upload, forward, or transmit your User Content. You must not upload, share, forward, or transmit Content that infringes another person’s copyright, trademark, patent, trade secret, privacy right, publicity right, contractual right, or other proprietary right.

All Company Content is owned by or licensed to us. You may not copy, modify, distribute, reverse engineer, decompile, sell, sublicense, lease, misuse, or create derivative works from the Services or Company Content except as expressly permitted by us or by Applicable Law.

1.16 Software licence

Subject to your compliance with these Terms, we grant you a limited, revocable, non-exclusive, non-transferable, non-sublicensable licence to install and use the SYNC app on devices you own or control, solely for lawful personal or authorised organisational use. This licence does not permit you to interfere with, copy, sell, rent, exploit, reverse engineer, modify, disable, or bypass any part of the Services.

1.17 Privacy and data protection

Our processing of Personal Data is governed by the Privacy Policy. By using the Services, you acknowledge that we process Personal Data as described in that policy, including for account creation, authentication, message delivery, encryption key management, contact discovery, support, safety, grievance redressal, legal compliance, fraud prevention, security, and service improvement.

Where consent is required, you may withdraw consent through the available settings or by contacting us, subject to legal retention, service feasibility, security, safety, and compliance obligations. Withdrawal of consent may affect your ability to use some or all Services.

1.18 Suspension, termination, and removal

We may suspend, restrict, disable, or terminate your Account or access to the Services, and may remove or disable access to Content, if we reasonably believe that:

you have violated these Terms, the Community Guidelines, or Applicable Law;

your Account is used for unlawful, harmful, abusive, fraudulent, spam, malware, child safety, privacy, impersonation, synthetic content, or public order risks;

your use creates security, legal, operational, or reputational risk for us, Users, authorities, or third parties;

we are required or permitted to do so by a court, competent authority, government agency, law enforcement body, CERT-In, or Applicable Law;

your Account is inactive, compromised, unauthorised, or created through false information;

you misuse reporting, grievances, appeals, channels, forwarding, automation, scraping, or other product features; or

continuing to provide access would expose us, Users, or the Services to harm.

Suspension or termination may be immediate where required for safety, legal compliance, cyber security, child protection, evidence preservation, or prevention of harm. Termination does not affect rights, obligations, indemnities, limitations of liability, evidence preservation, legal requests, audit logs, or provisions that by their nature should survive.

1.19 Account deletion and retention after deletion

You may request deletion of your Account through the in-app process or by contacting support@rabcorp.co.in, subject to verification. Account deletion may remove your active profile and stop your ability to use the Services.

Deletion does not require us to delete information that must be retained for legal compliance, security, dispute resolution, audit, grievance redressal, evidence preservation, reporting obligations, CERT-In obligations, or other lawful purposes. We may retain registration information for at least one hundred and eighty days after cancellation or withdrawal of registration, preserve removed or disabled Content and associated records for at least one hundred and eighty days for investigation purposes, and retain logs or data for longer where required by law, court order, government agency, or our Privacy Policy.

1.20 Service changes, availability, and updates

We may modify, suspend, discontinue, restrict, update, or replace any part of the Services at any time, including features, limits, user interface, channels, encryption behaviour for supported features, safety tools, group functions, forwarding limits, reporting categories, account verification, or legal pages. We may also issue updates that you must install to continue using the Services securely.

We do not guarantee uninterrupted, error-free, or always-available access. The Services may be affected by maintenance, network issues, third-party services, cyber incidents, device limitations, force majeure, lawful orders, or other circumstances outside our control.

1.21 Third-party services

The Services may interoperate with or rely on third-party services such as hosting providers, SMS or email service providers, Firebase, push notification services, analytics or diagnostics tools, security services, app stores, payment processors if introduced, or other technology providers. Your use of third-party services may be subject to their own terms and policies. We are not responsible for third-party services except to the extent required by Applicable Law.

1.22 No misuse of the Services

You must not scrape, crawl, harvest, index, bulk collect, sell, rent, or misuse user data, contact data, metadata, keys, identifiers, groups, channels, or message flows. You must not use bots, scripts, automated accounts, emulators, SIM farms, fake identities, unauthorised APIs, spam tools, malware, phishing, social engineering, or other methods to abuse or overload the Services.

You must not attempt to break, bypass, weaken, or undermine encryption, authentication, rate limits, reporting workflows, moderation systems, SGI labels, provenance metadata, content restrictions, or safety features.

1.23 Disclaimers

The Services are provided on an “as is” and “as available” basis, subject to Applicable Law. We do not warrant that the Services will be uninterrupted, error-free, secure from every possible threat, compatible with every device, or suitable for every purpose.

We do not endorse User Content. Users are responsible for the Content they create, upload, transmit, share, or forward. We are not liable for User Content except to the extent liability is mandatorily imposed by Applicable Law.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under Applicable Law.

1.24 Limitation of liability

To the maximum extent permitted by Applicable Law, RAB CORP Pvt Ltd, its directors, officers, employees, contractors, affiliates, licensors, and service providers will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, loss of profits, loss of data, loss of goodwill, business interruption, device compromise caused by your own conduct, unauthorised access caused by your failure to secure your device or credentials, User Content, third-party conduct, or inability to access the Services.

To the maximum extent permitted by Applicable Law, our aggregate liability for claims arising out of or relating to the Services or these Terms will be limited to the greater of: (a) the amount paid by you to us for the Services in the three months before the claim; or (b) INR 5000/-. This limitation does not apply where Applicable Law prohibits such limitation.

1.25 Indemnity

You agree to indemnify and hold harmless RAB CORP Pvt Ltd, its directors, officers, employees, contractors, affiliates, licensors, and service providers from and against claims, losses, damages, liabilities, penalties, costs, and expenses, including reasonable legal fees, arising from or related to:

your breach of these Terms, the Community Guidelines, or Applicable Law;

your User Content;

your misuse of the Services;

your infringement of third-party rights;

your unlawful or harmful use of groups, channels, broadcasts, forwarding, media, files, or SGI features;

your misrepresentation, impersonation, fraud, spam, malware, or abuse; or

your failure to obtain required rights, permissions, licences, or consents.

We reserve the right to assume the defence and control of any matter subject to indemnification, in which case you agree to cooperate with us.

1.26 Governing law and dispute resolution

These Terms are governed by the laws of the Republic of India.

Before commencing formal proceedings, you and we will attempt in good faith to resolve disputes through written notice and discussion for at least thirty days, unless urgent relief, child safety, cyber security, injunctive relief, evidence preservation, unlawful Content, or statutory proceedings require immediate action.

Subject to mandatory consumer rights and Applicable Law, any dispute arising out of or relating to these Terms or the Services shall be referred to arbitration under the Arbitration and Conciliation Act, 1996. The arbitration shall be conducted by a sole arbitrator appointed mutually by the parties. The seat and venue of arbitration shall be Pune, Maharashtra, India. The language of arbitration shall be English. The arbitral award shall be final and binding.

Subject to the arbitration clause and Applicable Law, the courts at Pune, Maharashtra, India shall have exclusive jurisdiction. We may seek injunctive, equitable, or urgent relief in any court of competent jurisdiction where necessary to protect the Services, Users, intellectual property, security, or legal compliance.

1.27 Notices and communications

We may communicate with you through the app, email, SMS, push notification, website notice, account screen, support channel, or any contact information associated with your Account. You are responsible for keeping your contact details updated.

You may send legal notices to RAB CORP Pvt Ltd at B401 Ashwini Paradise, Gangadham chowk Kondhwa Bibvewadi road Pune 37 and by email to legal@rabcorp.co.in. Reports and grievances should be sent through the mechanisms described in the Grievance Redressal Policy.

1.28 Updates to these Terms

We may update these Terms from time to time. We will publish the updated Terms on the website, in-app legal section, or other appropriate location. Where required or reasonably appropriate, we will notify you of material changes. Continued use of the Services after the effective date of updated Terms means that you accept the updated Terms.

1.29 Severability, waiver, and assignment

If any provision of these Terms is held invalid or unenforceable, the remaining provisions will remain in effect. Our failure to enforce a provision is not a waiver of that provision. You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign these Terms in connection with merger, acquisition, restructuring, sale of assets, change of control, or operation of law, subject to Applicable Law.

1.30 Contact

For support: support@rabcorp.co.in For grievances: Ashish Bhawkar, Ashish.bhawkar@rabcorp.co.in For privacy requests: privacy@rabcorp.co.in For lawful authority requests: law.enforcement@rabcorp.co.in Postal address: B401 Ashwini Paradise, Gangadham chowk Kondhwa Bibvewadi road Pune 37

03 April 2026