Privacy Policy

Effective date: June 14, 2025

1. Who We Are

Cirqo ("we", "us", "our") is a pseudonymous social network available at cirqo.cc and via our mobile applications on iOS and Android. Our data controller contact is privacy@cirqo.cc.

2. Information We Collect

Information you provide: email address, username (pseudonymous), password (stored as a one-way bcrypt hash — we cannot read it), display name, bio, avatar configuration, and any content you post (posts, comments, direct messages).

Automatically collected: IP address (for security and rate-limiting, retained for 30 days), device type, session timestamps, and aggregate feature-interaction analytics that are not linked to individual identities in reports.

Payment information: we do not store card or banking details. Payments are processed by Stripe (web) or Apple / Google Play (in-app). We receive a subscription status token only.

3. How We Use Your Information

To provide, operate, and improve the Cirqo service.
To authenticate you and keep your account secure.
To send transactional emails (verification, password reset). We do not send marketing email.
To enforce our Terms of Service and Community Guidelines.
To calculate your Karma score based on community interaction.
To process subscription payments and manage your Plus membership.
To monitor for abuse, fraud, and platform integrity.

4. Third-Party Services

We use Stripe for web payments, Apple/Google for in-app payments, RevenueCat for subscription management, Cloudflare R2 for media storage, and DiceBear for avatar generation. We do not sell your personal data to any third party.

5. Data Retention

Data is retained while your account is active. On account deletion, all personal data is permanently erased within 30 days, except where retention is required by law.

6. Your Rights (GDPR / UK GDPR)

If you are in the UK or EEA you have the right to access, correct, delete, port, or object to processing of your data. Email privacy@cirqo.cc to exercise any right. You may also lodge a complaint with the UK ICO at ico.org.uk.

7. California Privacy Rights (CCPA)

California residents may request disclosure of personal information categories collected. We do not sell personal information. Submit requests to privacy@cirqo.cc.

8. Children's Privacy

Cirqo is intended for users aged 17 and older. We do not knowingly collect information from children under 13.

9. Security

We use TLS for data in transit, bcrypt for password hashing, short-lived JWT access tokens, and HTTP security headers.

10. International Transfers

Our servers are located in the EU. If you access Cirqo from outside the EU/UK, your data is transferred to and processed in the EU under appropriate safeguards.

11. Changes to This Policy

We will post changes here and update the effective date. Continued use after changes constitutes acceptance.

12. Contact

Questions? Email privacy@cirqo.cc.