Privacy Policy

This policy covers the Cercle mobile app (iOS and Android) and this website (cercle.events). Cercle is operated by a single independent developer, not a company with a separate legal entity yet — for any privacy question or deletion request, contact privacy@cercle.events.

We only collect what the product actually needs to function:

• Account: email address and hashed password (never stored in clear text) at signup, plus your display name. If you sign in with Apple or Google, we store the identifier that provider returns and, when they share it, the email on that account. We never see that provider's password.
• Preferences: city, languages, and precise activities from first-run setup — so we can show relevant clubs and events and skip repeating that setup on later visits.
• Location: your approximate city (used to filter clubs/events near you) and, only if you're a club admin creating an event, the venue pin you place on a map. We don't track your location in the background or store a location history.
• Photos: images you choose to upload for a club or event you manage.
• Attendance and reliability data: which events you RSVP to and whether you actually showed up (confirmed by an in-person code, a peer, or an admin scan) — this is what powers the show-up score, the core of the product.
• Push notification token: only if you enable notifications, so we can send you reminders and updates.
• Basic usage analytics: first-party, on our own servers — which screens get used and which actions get taken, so we know what to build next. We do not use third-party ad trackers, and we do not sell data to anyone.
• Event chat messages: messages you send in an event's chat, which opens 48h before the event and is archived afterward.
• Phone: optional. If you add a number we store it. If you verify it, we send a one-time SMS code. The code is stored only as a hash, expires after 10 minutes, and locks after five wrong attempts.
• Device: on the iOS and Android apps, an identifier that stays on that device after signup, so a second account on the same install cannot reset a show-up score. The website has no stable device identifier, so this check is skipped there.
• Payments: if you pay for a club or event, Whop processes the card. We keep that the payment succeeded and what it unlocked. We do not store your card number.
• Reports: if you report a club, event, or another member, we keep the report and its context so our moderation team can review it.

• We don't sell your data to anyone, ever.
• We don't run third-party ad trackers in the app.
• We don't access your device contacts.
• We don't track your location in the background.
• We don't use an AI system to talk to you, draft your profile, or calculate your show-up score.
• We don't train machine-learning models on your messages, photos, or attendance.

Cercle is not an AI product. We do not offer, under the Cercle name, an AI system that chats with you, generates text, images, audio or video, recognises emotions, or categorises biometric data. Club suggestions follow the city, languages and activity families you picked — a filter you set, not a model inferring who you are.

The EU Artificial Intelligence Act (Regulation (EU) 2024/1689), including the transparency duties in Article 50 that have applied since 2 August 2026, does not currently attach to a Cercle feature. If we later ship one — for example machine translation of a chat message, or an assistant that replies — we will say so clearly, at the latest the first time you use it, and that feature will not produce the show-up score. We do not send your messages, photos or attendance to anyone to train a model.

The percentage on your profile is the share of past events you RSVP'd to where someone then confirmed you were there in person — a code the host shows, a peer, or an admin scan at the door. With no history yet, the score stays at 100: being new is not a penalty. A more detailed view on your profile weights recent events more heavily; a confirmation from about 90 days ago counts half as much as one today. Staff can void a no-show you contest. They cannot add an attendance you did not have.

Members of clubs you join can see this score. It can decide whether you may propose an event, and whether an event that sets a minimum reliability bar will take your RSVP. It is not used for credit, employment, or access to an essential service. You can ask us to explain a result, or contest a specific no-show, at privacy@cercle.events.

• Contract: your account, the clubs and events you join, event chat, and the show-up score the service is built on.
• Consent: push notifications, optional phone verification, and location when you choose to use it. You can turn these off in Settings or in your device settings.
• Legitimate interests: first-party usage analytics, security, stopping a second account on the same device from resetting a score, and reviewing reports. You can object.
• Legal obligation: records we have to keep, including for payments or a lawful request.

Your profile, RSVP status and show-up score are visible to other members of clubs you join — that visibility is the point of the product. To run the service we use processors who act on our instructions only:

• Render (United States) — servers and the database.
• Resend — emails about your account.
• Twilio — the SMS code, only if you start phone verification.
• Expo — delivery of push notifications you opted into.
• Apple or Google — only if you choose their sign-in, and only to confirm it is you. We never see that password.
• Whop — checkout and payouts when a club or event is paid. Card numbers stay with Whop, not on our servers.

Some of these providers process data in the United States. When personal data leaves the EEA or the UK, the GDPR requires a transfer tool: an adequacy decision (including the EU-US Data Privacy Framework when that provider is certified) or the European Commission's standard contractual clauses. Email privacy@cercle.events to know which tool covers a given provider. None of them may use your data for their own advertising.

You can edit your preferences in Settings. Email privacy@cercle.events to ask for a copy of your data, a correction, deletion, restriction or portability, to object to processing based on legitimate interests, or to contest a no-show that feeds your score. We act on deletion requests within 30 days. A contest can void a no-show that should not count. It cannot create an attendance.

If you are in the EU/EEA or the UK, these are your rights under the GDPR. You can also complain to the data protection authority where you live. Cercle is not yet a registered company, so there is no lead authority tied to an establishment — write to privacy@cercle.events first and we will tell you which authority applies.

We keep your account data for as long as your account is active. Event chat messages are archived (not deleted) after the event, visible only to people who were in that chat. If you delete your account, we remove your personal data within 30 days, except where we're required to keep records for legal or fraud-prevention reasons.

If this policy changes materially, we'll update the date at the top of this page and, for significant changes, notify you in the app.