Privacy Policy

Last updated: 30 June 2026

This Privacy Policy explains what personal data Circl1 collects, how we use it, who we share it with, and the rights you have. By using Circl1, you agree to this Policy.

1. Who we are

Circl1 (the "App," "we," "us") is operated by Beacon Frontier, based in Gurugram, Haryana, India ("the Operator"). For any privacy question or request, contact our Grievance Officer at support@circl1.com.

We are the data fiduciary/controller for the personal data described below.

2. Information we collect

We collect only what we need to run the App.

Information you provide

• Account & sign-in: your email address and the sign-in method you choose (Sign in with Apple, Google, or an email magic link). We do not store passwords.
• Profile: your display name, profile photo, and your invite/connection code.
• Your content: the titles you add to your lists, your watch status and ratings, reactions, comments, and direct messages you send.
• Connections: the people you connect with and the circles you place them in (your social graph within the App).
• Reports & consent: content you report, users you block, and a record that you accepted these terms.

Information collected automatically

• Device & push: a push-notification token and your platform (iOS/Android) so we can deliver notifications you opt into.
• Usage analytics: privacy-minimised events about how the App is used (for example, which screens are opened and which features are used). These analytics do not include the content of your messages, comments, or the identities of other users.

We do not collect your precise location, contacts, or device advertising identifiers, and we do not use third-party advertising trackers.

3. How we use your information

• To create and operate your account and authenticate you.
• To provide the core features: lists, feeds, connections, comments, reactions, and direct messages.
• To send notifications you have enabled.
• To keep the App safe — to operate blocking and reporting and to enforce our Terms.
• To understand and improve the App through aggregate, privacy-minimised analytics.
• To comply with legal obligations.

4. Legal basis for processing

Under India's Digital Personal Data Protection Act, 2023 (and comparable laws where applicable), we process your data on the basis of your consent, given when you create an account and use the App, and to provide the service you request. You may withdraw consent at any time by deleting your account (see Section 7).

5. How we share your information

We do not sell your personal data. We share it only as follows:

• With other users, by your action: your display name, photo, and the content you share are visible to the people you are connected with, as designed by the App's privacy controls.
• Service providers who process data on our behalf under contract:
  • Supabase — database, authentication, and file storage.
  • Expo and Apple Push Notification service / Google Firebase Cloud Messaging — to deliver push notifications.
  • Apple and Google — for "Sign in with Apple" and "Sign in with Google" authentication.
• The Movie Database (TMDB): the App retrieves film and TV information from TMDB. This product uses the TMDB API but is not endorsed or certified by TMDB.
• Legal: where required by law, or to protect the rights, safety, and security of our users and the App.

6. Data retention

We keep your personal data for as long as your account is active. When you delete your account, we permanently delete your account and associated personal content (see Section 7). Some records may be retained for a limited period where required to comply with law or to resolve disputes.

7. Your rights and choices

• Access & correction: you can view and edit your profile in the App.
• Deletion: you can permanently delete your account at any time from your profile in the App. This removes your account and your personal content.
• Withdraw consent: deleting your account withdraws your consent to further processing.
• Notifications: you can turn notifications on or off in your device settings.
• Grievances: you may contact our Grievance Officer at support@circl1.com; we will respond within the timelines required by applicable law.

8. Security

We use industry-standard measures to protect your data, including encryption in transit, encrypted storage of authentication tokens on your device, and row-level access controls so that each user can only access data they are permitted to. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Age requirement

Circl1 is intended for adults and is not directed to minors. You must be at least 18 years of age to use Circl1, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us data, contact support@circl1.com and we will delete it.

10. International data transfers

Your data may be processed on servers operated by our service providers in locations outside your country of residence. Where this happens, we take steps to ensure your data remains protected consistent with this Policy and applicable law.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, where appropriate, ask you to re-accept within the App.

12. Contact

Operator: Beacon Frontier, Gurugram, Haryana, India.
Grievance Officer / contact: support@circl1.com.