Privacy Policy

1. Scope

This Privacy Policy explains how Circulo ("we", "our", "us") collects, uses, stores and shares information when you use the Circulo mobile application and related services. This policy applies to users worldwide and is intended to comply with Google Play User Data requirements.

2. Data we collect

• Account and identity data: email, name, profile photo URL, internal user ID.
• Authentication data: Google Sign-In token validation data or email OTP verification data.
• Community and event data: communities joined, events created/joined, RSVP status, posts and comments.
• Location data: city and optional device location only when needed to suggest nearby communities/events or map points.
• Technical and security data: device/app metadata, request logs and error logs for reliability and fraud prevention.

3. How we use data

• Authenticate users and protect account access.
• Provide core app features (communities, events, memberships, comments, invitations).
• Show nearby communities/events and map references when location is provided.
• Operate moderation, abuse prevention and security controls.
• Send service messages such as OTP emails and account-related notifications.

4. Data sharing

We do not sell personal data. We may share data with service providers strictly to operate the app:

• Google for Sign-In and platform infrastructure features.
• Resend for email OTP delivery.
• Cloud hosting providers (such as Google Cloud) for backend and database operations.
• Maps/location providers for map rendering and location-based features.

We may disclose information when legally required, to enforce our terms, or to protect users, rights and safety.

5. Legal basis and consent

Depending on your jurisdiction, we process data based on consent, contract necessity, legal obligations and legitimate interests (such as security and abuse prevention). Where required, we request permission before accessing sensitive device data (for example, location).

6. Data retention

We retain data only as long as needed for service operation, legal compliance and security. Retention periods vary by data type and operational necessity.

7. Security

We use reasonable technical and organizational measures to protect data, including HTTPS/TLS in transit and restricted access controls. No method of transmission or storage is 100% secure.

8. User rights

You may request access, correction or deletion of your personal data, subject to legal and operational constraints. You may also request account deactivation.

9. Children's privacy

Circulo is not directed to children under the minimum age required by applicable law. We do not knowingly collect personal information from children in violation of applicable regulations.

10. International transfers

Your data may be processed in countries where our providers operate. We implement reasonable safeguards for cross-border data handling as required by law.

11. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be reflected by updating the date above and, when appropriate, by notifying users in-app or through official channels.

12. Contact

For privacy requests or questions, contact us at contactanos@circulo-app.org.

13. Account deletion requests

You can request account and associated data deletion by emailing contactanos@circulo-app.org from your registered account email with the subject "Account Deletion Request". We may retain limited data only when required for legal, security, fraud-prevention or regulatory reasons.