Privacy Policy

Effective date: March 31, 2026

Quiet Circle ("we", "us", "our") operates the Quiet Circle mobile application. This policy describes what data we collect, why, how we protect it, and your rights.

1. What We Collect

Data	Purpose	Stored Where
Name	Display in your circle	Server
Email address	Passwordless authentication, notifications	Server
Phone number (optional)	SMS authentication	Server
Motion and fitness data	Activity pattern detection (accelerometer, pedometer)	Device + Server
Device information	Device type, OS version, push token for notifications	Server
Purchase history	Subscription management via Apple/Google	Server (transaction IDs only)
Product interaction	App usage patterns (screens visited, features used)	Server

What we do NOT collect

Location data (GPS, Wi-Fi, cell tower) — never
Contacts or address book
Browsing history
Photos, videos, or audio
Payment card numbers (Apple and Google handle all payments)
Health data beyond motion/fitness

2. Why We Collect It

All data is collected solely for app functionality:

To authenticate you and manage your account
To detect normal activity patterns and alert your circle when something seems off
To manage your subscription
To send push notifications (alerts, circle updates)

We do not use your data for advertising, analytics, profiling, or personalization. We do not sell or share your data with third parties for marketing purposes.

3. Third-Party Services

Service	Data Shared	Purpose
Apple App Store / Google Play	Transaction IDs, purchase tokens	Subscription validation
SMTP email provider	Email address	Sending verification codes and notifications
SMS provider	Phone number	Sending verification codes

No data is sent to analytics services, advertising networks, AI services, or data brokers.

4. Data Storage and Security

All data is transmitted over HTTPS (encrypted in transit)
Sensitive tokens are stored in the iOS Keychain / Android Keystore
Authentication is passwordless via email/SMS codes
Server access is protected by JWT tokens with limited lifetimes
API endpoints are rate-limited to prevent abuse

5. Data Retention

Data	Retention
Activity signals	30 days, then automatically deleted
Verification codes	10 minutes
Alerts	1 year
Account data	Until you delete your account
Billing records	6 years (legal requirement)

6. Your Rights

Under GDPR (EU), CCPA (California), and applicable privacy laws, you have the right to:

Access — Request a copy of all data we hold about you
Delete — Delete your account and all associated data (Profile > Delete Account)
Export — Download your data in a structured format
Withdraw consent — Stop data collection at any time through app settings
Rectify — Update your name in the app; contact us to update email or phone
Object — Object to processing of your data

When you delete your account, we immediately revoke all access tokens and schedule complete data removal within 30 days.

7. Consent

During onboarding, you are asked to explicitly consent to data collection before any activity data is gathered. You can withdraw this consent at any time.

8. Children's Privacy

Quiet Circle is not directed at children under 13. If a minor is part of a circle, the circle creator is responsible for obtaining parental consent.

9. International Data Transfers

If you are in the EU, your data may be processed outside the EU for subscription validation (Apple/Google) and email/SMS delivery. These transfers are governed by Standard Contractual Clauses (SCCs).

10. Subscriptions

Subscriptions are managed through Apple App Store or Google Play. Payment is processed entirely by Apple or Google. Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current period.

11. Changes to This Policy

We may update this policy from time to time. The "effective date" at the top indicates when it was last updated.

12. Contact Us

Email: [email protected]
Support: https://quietcircle.app/support