Privacy Policy

1. Who is responsible for your data

Circle ("Circle", "we", "us") is the data controller for the personal data described here. Contact us at privacy@yourfriendsatcircle.com for any privacy question, request or complaint.

Circle is operated from Stockholm, Sweden. If you need our full company details — legal entity name, postal address and organisation number — for a formal data request or complaint, email us at the address above and we will provide them.

2. Data we collect about you (the mom)

• Account data: email address, and — if you use Google sign-in — the name, email and profile picture Google shares with us.
• Profile data: your display name, neighbourhood or city, country of origin, the languages you speak and your free-text bio.
• Content you create: events you host (title, description, date, venue, photos), baby gear listings (description, price, condition, city, photos), messages you send in chats, and support groups you join.
• Consent records: which consents you gave and when, so we can prove a lawful basis for processing.
• Technical data: data needed to run the service securely, such as authentication sessions and server logs.

3. Data about your children

Circle is for adults. Children do not have accounts and cannot use the app. To match you with moms whose kids are a similar age, we store only:

• a nickname you choose for each child, and
• the child's age (in months or years).

Please do not enter your child's real name, birth date, school, photo, health information or any other identifying detail. Child nicknames and ages are shown to other moms in the app as part of your profile. You can edit or remove any child entry at any time from Profile → Edit, and deleting your account deletes these entries too.

4. Why we use your data and on what legal basis

• To provide the service — creating your account, showing profiles, matching, chat, events and gear listings. Legal basis: performance of a contract with you.
• Matching on kid ages and languages — legal basis: your explicit consent, given during onboarding.
• Approximate location (neighbourhood or city, or device location if you allow it) to show nearby moms and events. Legal basis: your consent.
• Safety and abuse prevention — reviewing reports and enforcing our Terms. Legal basis: our legitimate interest in keeping the community safe.
• Optional product updates by email — legal basis: your consent, which you can withdraw at any time.

Support groups in Circle are peer spaces. If you choose to write about your health or birth experience there, you are voluntarily making that information public to that group; please share only what you are comfortable sharing.

5. Who can see your data

• Other members: your display name, neighbourhood, origin, languages, bio, child nicknames and ages, and anything you post in events, gear listings, support groups or chats.
• Service providers: our hosting, database, authentication and file storage provider, which processes data on our instructions under a data processing agreement, and Google if you choose Google sign-in.
• Authorities: only where we are legally required to disclose data.

We do not sell your personal data and we do not use it for third-party advertising.

6. Storage, transfers and retention

Your data is stored with our managed cloud infrastructure provider. Where data is processed outside the EU/EEA, transfers rely on the EU Standard Contractual Clauses or another valid transfer mechanism.

We keep your profile and content while your account is active. When you delete your account, your profile, children entries, listings and events are deleted; limited records such as abuse reports or data required by law may be kept for as long as necessary for that purpose.

7. Your GDPR rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to withdraw consent at any time without affecting processing already carried out.

In the app, go to Profile → Privacy & data (GDPR) to export a copy of your data as a file or to erase your account and data. You can also email us and we will respond within one month.

If you believe we handle your data incorrectly you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.

8. Security

Access to your data is restricted by per-user database access rules, and uploaded photos are stored in private buckets served through time-limited links. No online service can be guaranteed to be completely secure, so please use a strong, unique password and tell us immediately if you suspect misuse of your account.

9. Changes to this policy

We will update this page when our processing changes and adjust the "last updated" date. If the change is significant we will ask you to review it in the app.