Privacy Policy

CIRQL Ltd, a company registered in England and Wales. We are the data controller for everything described here, with one exception. When you buy a ticket, the organiser selling it is the merchant and is a controller of that sale alongside us. Their name is on your bank statement, not ours.

Reach us at info@cirql.uk. It goes to a founder.

Your account. Email address, a name, your time zone, and optionally a photo and a short bio. Sign-in is by a code emailed to you or by Google, so we never hold a password. If you sign in with Google, we receive your name and email address from them and nothing else.

Your memberships. Which communities you belong to, when you joined or left, your roles, your card number, and your answers to any profile questions a community asks. Each answer is visible according to the setting the organiser chose for that question.

What you post. Chat messages and their attachments, comments, reactions, poll votes, and photos or videos you add to an album or gallery. Photos are re-encoded on your device before upload and stripped of location data. Videos are not: a video keeps whatever metadata your camera wrote into it.

Events and tickets. Which events you registered for, your tickets, whether and when you were checked in at the door and by whom, and any refund requests. If you buy a ticket on the web without an account, we create one for you so the ticket has somewhere to live. We tell you this at checkout, no password is ever set on it, and it is anonymised 30 days after your last event if you never claim it.

Payments. Your card details go straight to Stripe and never reach us. We keep the order: what you bought, how much, when, and a Stripe reference. For organisers, Stripe holds bank and identity documents and we hold only your Stripe account ID.

Notifications. Your device's push token, your notification choices, a record of which notifications we sent and whether they arrived, and any marketing consent you gave, including the IP address and browser it came from, kept as evidence that you gave it.

Live video. If you host a live stream: the video, your name and the comments. Recordings are kept until the host or an organiser deletes them. If you are at an event where someone goes live, you may appear in their stream and recording. See "Being filmed" below.

Student verification. If a society requires it: your university email address, or a photo of your student ID or an enrolment document. Documents are deleted within an hour of a decision, and after 90 days if nobody decides.

How you use the app. Which screens you open and for how long, a count of how many times you tap or scroll on each, and key actions: joining, leaving, sending a message, buying a ticket, going live. This is sent to Amplitude under your account ID. It never includes what you typed, which message you reacted to, who you looked at or which poll option you chose. Screen names are patterns like "community chat", not the specific community you were in.

Reports and support. If you report content or ask for help: what you told us and, for a report, a copy of the thing you reported, so we can still act if the original is deleted.

This website. Browsing it collects nothing and sets no cookies. It has no forms. If you book a demo, that happens on Calendly's site.

Most of it is needed to run the thing you signed up for: an account, a community, an event, a ticket. Under UK GDPR that basis is contract.

Some of it is our legitimate interest in keeping the platform working and safe: knowing which parts of the app people use, stopping abuse, recording who did what when money or someone's membership was affected, and holding reports.

Some we are legally required to keep: financial records for tax, and evidence of consent.

Student verification and marketing emails rest on your consent, which you can withdraw. Marketing emails carry an unsubscribe link, and each community's emails can be muted separately from ours.

Other members see what you choose to show them: your name, photo, bio, posts, messages in channels they are in, and profile answers set to visible. Organisers also see who is in their community, who holds tickets, who turned up, and refund requests. They do not see your email address or reports you make.

Anonymous polls are anonymous to organisers and members. We store who voted so that nobody can vote twice. It is never displayed.

We see what we need to support you and keep the platform safe. We do not read your messages, and message text is never written to our logs or sent to analytics.

We do not sell your data, and we do not share it with anyone for their marketing.

These providers handle data on our instructions and may not use it for their own purposes.

• Supabase (region being confirmed): Runs our database, sign-in, file storage and live updates. Everything in the app lives here.
• Stripe (global): Takes every payment and holds organisers' bank and identity details. Card numbers go to Stripe and never to us.
• Amplitude (EU): Product analytics: which screens are used and which actions happen, keyed to your account. Never message text, names or what you tapped.
• Resend (region being confirmed): Sends our emails: sign-in codes, tickets, notifications.
• Expo (US): Delivers push notifications to your phone.
• LiveKit (region being confirmed): Carries live video when someone goes live, and uploads the recording to our storage.
• Vercel (global edge network): Hosts the organiser dashboard, the ticket pages and this website. Its request logs can include IP addresses.
• Calendly (US): Books demo calls from this website. Their policy applies once you are on their page.
• Google Workspace (region being confirmed): Our email. Anything you send to info@cirql.uk lives there.

Where a provider stores data outside the UK, the transfer relies on the UK's international data transfer rules. We are confirming the storage region for each provider marked above and will record it here when we have.

Any organiser or registered attendee of an event can go live from it, from an hour before it starts until an hour after it ends. A stream from a public event can be watched by anyone signed in to CIRQL; a stream from a members-only event can be watched by that community. Streams are recorded, and recordings are kept until a host or organiser deletes them. They can also appear in the community's gallery.

If you were in the room, you may be in the footage. There is not yet an in-app notice that a stream is being recorded, or a way to opt out while it is happening. We are saying that plainly rather than hiding it. If you appear in a recording and want it gone, email info@cirql.uk with the event and roughly when. We will take the recording down.

Automated moderation of live video is built into the app but is switched off. Before it is switched on, this page will change to say what leaves CIRQL and to whom.

Your account and what you have posted: for as long as you have an account. Chat attachments stay stored even after the message is deleted, so a report about it can still be investigated.

Order and payment records: at least 6 years, as UK tax law requires, with your name removed if you delete your account.

Notifications in your inbox: 1 year. Daily digest summaries: 30 days. Whether your phone is active: 24 hours.

Stream comments: 30 days after the stream ends. Recordings: until deleted. Content reports: 12 months, or 90 days if dismissed.

Student ID documents: within an hour of a decision, and at most 90 days if nobody decides.

Analytics in Amplitude: no retention period is set yet. We are telling you that rather than pretending otherwise. When it is set, this page will say what it is.

You can ask to see everything we hold about you, correct it, delete it, or have a copy to take elsewhere. You can object to processing based on legitimate interest and withdraw any consent you gave. Email info@cirql.uk. We answer within 30 days.

Deleting your account from inside the app is not available yet. Until it is, email us and we will do it by hand, within 30 days. Deletion removes your profile, memberships, tickets, notifications and the photos and videos you uploaded. Your messages and posts stay, with your name removed and the text replaced, so the conversations around them still make sense. Financial records stay for the tax period with your name removed. If you unsubscribed from anything, your email address stays on our suppression list so we never email it again. Footage you appear in is handled through the recording removal route above, because it belongs to the host's stream.

You can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.

You must be 13 or over to have a CIRQL account. We do not ask for your date of birth at sign-up; if it is ever recorded, it is used only to enforce this and is never shown to anyone. If you think we hold data about someone under 13, tell us and we will delete it.

When this page changes materially, we will say so in the app before it takes effect. The date at the top is always the last time it changed.