Privacy Policy

01Who We Are

UrCircle is a social routine app designed to help people build routines, discover activities, make plans, and meet new people through shared activities.

UrCircle is currently operated by Louis Mazet in Luxembourg.

For personal data processed directly by UrCircle, Louis Mazet acts as the data controller for the purposes of applicable data protection law.

Contact:
louis@urcircle.app

If UrCircle is later operated by an incorporated company, this Privacy Policy will be updated to identify that legal entity and its relevant contact details.

02Scope of This Privacy Policy

This Privacy Policy explains how UrCircle handles personal information when you:

• visit urcircle.app;
• register for the UrCircle beta;
• create or use an UrCircle account;
• use the UrCircle mobile application;
• participate in routines and social features;
• upload content;
• contact UrCircle.

It covers information processed directly by UrCircle and information processed through third-party infrastructure used to provide the service.

03Information We Collect

A. Beta signup information

When you register for the UrCircle beta through urcircle.app, we collect:

• your first name;
• your email address;
• the date and technical records necessary to process and secure the signup request.

B. Account and profile information

When you create or use an UrCircle account, we may process:

• your email address;
• authentication and account identifiers;
• your first name or display name;
• profile information you choose to provide;
• your profile photo or avatar;
• your city, neighborhood, or similar location information that you choose to provide.

C. Routine and activity information

When you use UrCircle’s routine and activity features, we may process information such as:

• routines you create;
• routines you join;
• activity type;
• dates and times;
• availability you choose to provide;
• meeting places you select;
• participation status;
• invitations;
• join requests;
• activity preferences.

D. Social information

Because UrCircle includes social features, we may process:

• connections or friendships within UrCircle;
• invitations you send or receive;
• participation in shared activities;
• interactions with routines;
• other social information submitted through those features.

Social information may be visible to other users according to the features and access rules of UrCircle.

E. Content you provide

When you voluntarily upload or share content through UrCircle, we may process:

• photos;
• videos;
• Moments;
• other content you choose to provide.

F. Location-related information

UrCircle may process location information that you intentionally provide, including:

• city;
• neighborhood;
• selected activity location;
• meeting point.

UrCircle does not currently use continuous background location tracking as part of its core beta experience.

If location functionality changes materially, this Privacy Policy and the relevant permission flows will be updated.

G. Technical and security information

When you use the website or application, UrCircle’s infrastructure providers may process standard technical information required to operate, protect, and troubleshoot the service.

Depending on the service and request, this may include:

• IP address;
• request date and time;
• browser or device-related information;
• server and security logs;
• error or diagnostic information.

UrCircle does not use this technical information for third-party behavioral advertising.

H. Moderation and safety information

UrCircle may process moderation and safety information, including:

• reports submitted about users;
• report reasons and optional details;
• user blocking relationships.

A report may identify the person who submitted it, the person it is about, and the circumstances described in it. Those circumstances may include an incident that occurred offline and is connected to a routine.

04How We Collect Information

Personal information may be collected:

• directly from you when you register for the beta;
• directly from you when you create or update an account or profile;
• when you create, join, or interact with routines;
• when you send invitations or join requests;
• when you upload content;
• when you submit a report or block another user;
• when you choose meeting points, neighborhoods, or other activity information;
• when you contact UrCircle;
• automatically through infrastructure necessary to operate and secure the website and application.

05How We Use Personal Information

UrCircle uses personal information to:

• provide and operate the UrCircle website and application;
• create and maintain user accounts;
• manage beta registrations;
• provide routine creation, participation, and discovery functionality;
• provide invitation and social functionality;
• display content that users voluntarily submit, where the applicable feature and access rules allow other users to see it;
• communicate about beta access and important service information;
• respond to support and privacy requests;
• maintain security;
• prevent abuse and fraud;
• investigate reports, enforce safety rules, prevent abuse, and protect users, including reports about behavior connected to routines and incidents that occurred offline;
• diagnose technical problems;
• maintain and improve the reliability and usability of UrCircle;
• comply with applicable legal obligations.

Users may voluntarily submit content. Who can later see it is determined by UrCircle’s applicable feature and access rules. This does not mean a user can individually control every audience or visibility setting.

Safety and moderation use of this information does not mean UrCircle continuously monitors the service, intervenes in an emergency, or responds within a specific time.

UrCircle does not sell personal information.

UrCircle does not currently use personal information for third-party behavioral advertising or cross-app advertising tracking.

06Legal Bases for Processing

For processing subject to the GDPR, UrCircle relies on the legal basis appropriate to each purpose.

Consent

We may rely on consent where you voluntarily:

• register for the beta and request communications directly related to beta access;
• provide optional information;
• grant an optional device or system permission where consent is required.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

Performance of a service requested by you

We process information where necessary to:

• create and maintain your UrCircle account;
• provide routines and participation functionality;
• provide invitations and social functionality;
• provide other core features that you request through the application.

Legitimate interests

We may process limited information where necessary for legitimate interests such as:

• protecting UrCircle and its users;
• preventing abuse and fraud;
• maintaining service security;
• diagnosing technical problems;
• improving reliability and performance;
• limited review of reports and other safety and moderation information, where legitimate interests are a legally appropriate basis.

When relying on legitimate interests, UrCircle considers the impact of the processing on users and their privacy rights.

Legitimate interests do not, by themselves, authorize unrestricted processing of health data, information about a person’s sexual life, criminal allegations, or other information regulated more strictly by Articles 9 and 10 of the GDPR. Where those rules apply, UrCircle processes the information only on a basis those Articles allow.

Legal obligations

We may process or retain information when necessary to comply with applicable laws, lawful requests, or legal claims. Where a legal obligation applies, limited safety and moderation processing may rely on that obligation.

07Information Visible to Other Users

UrCircle is a social product.

Profiles, routines, participation information, and Moments may be visible to other users according to the applicable feature and its access rules. Other users may also be able to see information including:

• your profile;
• your profile photo or avatar;
• routines you create;
• routines you join;
• selected activities;
• availability or plans you provide;
• Moments you submit;
• participation information;
• other information you submit through a social feature.

Choosing to submit information is separate from the access rules that determine who can later view it. This Privacy Policy does not describe a privacy setting or other control beyond those access rules.

For the upcoming beta, the intended access rules for Moments are these. Friends may view Moments on each other’s profiles even if they did not participate in the associated routine. Premium access may allow a user to view additional Moments without participating in the associated routine. Blocking and other access restrictions still apply. These rules describe the beta UrCircle is preparing. They do not mean those features have already been publicly launched.

Your account email address is not intended to be displayed publicly to other UrCircle users.

You should only submit information you are comfortable providing through the relevant feature.

08Third Parties and Service Providers

UrCircle currently relies on third-party services to operate parts of the website and application.

These include:

Supabase

Used for database, authentication, storage, and backend infrastructure.

Vercel

Used for hosting, deployment, and server-side functionality for urcircle.app.

Apple

Used for Apple platform services and, where applicable, TestFlight and App Store distribution.

Microsoft

Used for email services associated with the @urcircle.app domain.

Resend

Used to deliver transactional and authentication-related emails.

Depending on the service, a third party may process information on UrCircle’s behalf or under its own applicable terms and privacy obligations.

Where UrCircle engages a provider to process personal information on its behalf, UrCircle seeks to use providers offering contractual, technical, and organizational protections appropriate to the information processed and consistent with applicable law and this Privacy Policy.

UrCircle does not authorize these providers to use UrCircle user information for unrelated third-party behavioral advertising on UrCircle’s behalf.

09International Data Transfers

Some of the service providers used by UrCircle may process information in countries other than the country where you live.

Where applicable data protection law requires safeguards for an international transfer, UrCircle and/or its service providers use legally recognized transfer mechanisms and protections available under applicable law.

These may include, where applicable:

• adequacy decisions;
• standard contractual clauses;
• other legally recognized safeguards.

The exact infrastructure and processing locations may depend on the provider and service configuration.

10Data Retention

UrCircle keeps personal information only for as long as it remains reasonably necessary for the purpose for which it was collected or for another lawful purpose.

Retention is determined using criteria including:

• whether your account remains active;
• whether the information remains necessary to provide a feature you use;
• whether you remain registered for the beta;
• whether continued retention is necessary for security or fraud prevention;
• whether retention is necessary to resolve a dispute or legal claim;
• applicable legal obligations;
• whether limited retention of existing safety, abuse-prevention, incident, or legal-claim information is legally justified;
• technical backup and deletion cycles operated by infrastructure providers.

Beta signup information is retained while it remains necessary to manage beta access and communications you requested, unless you withdraw or request deletion earlier.

Account and profile information is generally retained while your UrCircle account remains active.

When information is no longer required, UrCircle will delete or anonymize it where reasonably possible, subject to lawful retention requirements and limited technical backup periods.

A deletion request may still leave a limited amount of existing safety, abuse-prevention, incident, or legal-claim information where retention is legally justified.

11Your Privacy Rights

Depending on where you live and the laws that apply, you may have rights regarding your personal information.

For individuals protected by the GDPR, these may include:

• the right to request access to your personal information;
• the right to request correction of inaccurate information;
• the right to request deletion of personal information;
• the right to request restriction of certain processing;
• the right to receive certain information in a portable format where applicable;
• the right to object to certain processing;
• the right to withdraw consent where processing is based on consent;
• the right to lodge a complaint with a competent data protection authority.

To exercise a privacy right, contact:
louis@urcircle.app

UrCircle may request information reasonably necessary to verify your identity before acting on a request.

Where the GDPR applies, requests will be handled within the periods required by applicable law.

If UrCircle cannot comply with a request, we will provide the information required by applicable law regarding that decision.

12Beta Signup Deletion

If you registered for the UrCircle beta through urcircle.app and would like your beta signup information removed, contact:

louis@urcircle.app

Please identify the email address used for your signup.

After appropriate verification, UrCircle will delete the beta signup information unless retention is legally required.

13UrCircle Account Deletion

Users can delete their UrCircle account directly from the UrCircle app.

Deletion removes the account and associated personal data and content that UrCircle is not legally required or permitted to retain.

Limited information may be retained only where required or permitted for:

• legal obligations;
• security;
• fraud prevention;
• dispute resolution;
• limited safety, abuse-prevention, or incident information, where retention is legally justified;
• technical backup cycles.

Users may also contact:

louis@urcircle.app

for privacy questions.

14Website Analytics, Cookies, and Advertising

UrCircle does not currently use third-party behavioral advertising on urcircle.app.

UrCircle does not currently use advertising trackers on the public website.

Standard technical and security information may still be processed by the hosting and infrastructure providers described in this Privacy Policy.

If UrCircle later introduces analytics, advertising technologies, or additional tracking technologies, this Privacy Policy and any consent mechanism required by law must be updated before those technologies are used.

15Automated Decision-Making

UrCircle does not currently use solely automated decision-making that produces legal effects or similarly significant effects on users.

If this changes materially, this Privacy Policy will be updated.

16Security

UrCircle uses reasonable technical and organizational measures designed to protect personal information from unauthorized access, alteration, loss, misuse, or disclosure.

These measures include access controls and the use of established infrastructure providers appropriate to the current stage of the service.

No internet-based system can guarantee absolute security.

17Changes to This Privacy Policy

UrCircle may update this Privacy Policy when the product, processing activities, service providers, or legal requirements change.

UrCircle will publish an accurate effective date, provide appropriate notice of material changes, and obtain any additional consent required by applicable law before the relevant processing.

18Contact and Complaints

For questions, privacy requests, or concerns:

Individuals protected by the GDPR also have the right to lodge a complaint with a competent supervisory authority.

Supervisory authority

Commission nationale pour la protection des données (CNPD)
cnpd.public.lu

You may also contact the competent supervisory authority in the country where you live or work where applicable.