Our Promise

Complete transparency about your data

We monetize through premium memberships and voluntary donations — never through your data, because we have none worth selling.

📋 What We Collect

Email address — used for authentication and password recovery only
Circle User ID — your chosen display name (you pick it)
Device token — required to send you push notifications (APNs/FCM)
Membership tier — Standard, Gold, or Platinum (for feature access)
Profile visibility preference — public or private (you choose)
Theme choice — which visual theme you selected
Preferred language — for translation features
Account timestamps — when you created your account and last logged in

🔒 What We Encrypt & Can't Read

All private circle messages — encrypted with the Signal Protocol (same as Signal app). We literally cannot read them.
Event descriptions — encrypted per recipient. We see the title, not the details.
Photos and media — encrypted on your device before upload. We store encrypted blobs we can't decode.
Chat conversations — end-to-end encrypted between you and your contacts.

🚫 What We Don't Do

No advertisements — ever
No selling or sharing your data with data brokers
No tracking SDKs or analytics frameworks
No third-party ad networks
No profiling or behavioral targeting
No reading your encrypted messages (we can't, even if compelled)

💰 How We Make Money

Gold membership — more circles, global send, event deposits, polls, AI assistant (10/day)
Platinum membership — unlimited everything, translation, AI assistant (20/day)
Voluntary donations — from users who want to support the project
That's it. No hidden revenue streams.

🔗 Third Parties That Receive Limited Data

Apple / Google — if you use OAuth login (email, name)
Stripe — payment processing (email only, for receipts)
Brevo — sends verification/password-reset emails (email address only)
APNs / FCM — device tokens for push notifications (no message content)

⏰ Data Retention

Active account — data retained while your account exists
Deleted account — all data wiped within 30 days
Server logs — kept for ~90 days for security, then deleted
Encrypted content — remains until you or the circle owner deletes it