Privacy Policy

OneCircle is a social app for college students in India — a place to follow your campus feed, watch reels, join clubs, message friends, and show off your work. This policy explains, in plain terms, what data we collect, why, and what control you have over it.

1. Who we are & what this covers

This Privacy Policy applies to the OneCircle mobile app and our website at onecircleapp.com. In this document, "we", "us", and "OneCircle" refer to the team that builds and operates OneCircle. "You" means anyone who creates an account or uses the app.

If you have any questions about your privacy, you can always reach us at adhilshamsuu@gmail.com.

2. Information we collect

We only collect what we need to run the app. That includes:

Account information

• Your email address, name, and username
• Your college, department, and year of study

Profile data

• Your bio, profile photo (avatar), and cover image
• Your skills and links you choose to add, such as LinkedIn and GitHub

Content you create

• Posts, comments, and reels you publish
• Messages you send in one-on-one and group chats
• The clubs and communities you join or follow

Usage & technical data

• Session and usage analytics — how you move through the app, which helps us understand what's working and fix what isn't
• Your reel-view history, used to avoid showing you the same reels and to improve recommendations
• Device push notification tokens, so we can send you notifications you've opted into

3. How we use your information

• To provide the service — create your account, show your profile, and run posts, reels, clubs, and chat.
• To personalise your campus feed — surface posts, reels, clubs, and people relevant to your college and interests.
• To enable clubs & messaging — let you join communities and communicate with other students.
• For security & abuse prevention — detect bots, spam, and harmful content, and keep accounts safe.
• For product analytics — measure how features are used so we can improve the app and fix bugs.

We do not use your personal data for advertising, and we do not show ads in OneCircle.

4. Legal bases & your jurisdiction

Where data protection law requires a legal basis for processing (such as the EU/UK GDPR), we rely on the following:

• Performance of a contract — to deliver the core features you sign up for.
• Legitimate interests — to keep the platform safe, prevent abuse, and improve our product, balanced against your rights.
• Consent — for things like push notifications and camera/photo access, which you can grant or revoke at any time.
• Legal obligation — where we are required to retain or disclose data by law.

OneCircle is built for students in India, so the Digital Personal Data Protection Act, 2023 (DPDP Act) applies to our handling of your personal data. We act as the data fiduciary for the information you share with us, process it for the limited purposes described here, and honour the rights it grants you.

5. Service providers & subprocessors

We use a small number of trusted third parties to operate OneCircle. We share only the data each one needs to do its job, and your data may be processed on their infrastructure. We never sell your data to anyone.

• Supabase — hosting, database, authentication, and file storage. This is where your account, content, and uploaded media live.
• Cloudflare — media delivery and edge network for fast, reliable content, and Turnstile CAPTCHA for bot protection on sign-up and login.
• Sentry — crash and error reporting, so we can find and fix problems in the app.
• Google (Gemini AI) — automated moderation of user content to help keep OneCircle safe and detect harmful material.
• Resend — sending transactional emails such as email verification and password reset.

Each of these providers may process data on servers located outside India. We choose providers that maintain strong security and privacy practices. We may also disclose information if required by law or to protect the safety of our users.

6. App permissions

OneCircle asks for device permissions only when a feature needs them, and only after you take an action:

• Camera & photo library — to set your profile and cover photos and to add images to your posts.
• Microphone — to record audio when you create video posts.

You can review or revoke these permissions any time in your device settings.

7. Data security

• All data is encrypted in transit using HTTPS/TLS and encrypted at rest on our infrastructure.
• Database access is protected by row-level access controls, so users can only reach data they're authorised to see.
• CAPTCHA protection guards sign-up and login against automated abuse.
• We show no ads and we do not sell your personal data — full stop.

8. Data retention & your rights

We keep your personal data for as long as your account is active. When you delete your account, we remove your data as described below, except where we're required to keep certain records by law.

You have the right to:

• Access the personal data we hold about you
• Correct data that is inaccurate or out of date
• Delete your account and the data associated with it

9. Children's privacy

OneCircle is intended for college students and is not designed for children. We do not knowingly collect personal information from anyone under the age of 13. If we learn that we have collected data from a child under 13, we will delete it. If you believe a child has provided us with personal data, please contact us.

10. Changes to this policy

We may update this Privacy Policy from time to time as OneCircle evolves. When we make significant changes, we'll update the effective date above and, where appropriate, notify you in the app. Continuing to use OneCircle after an update means you accept the revised policy.

11. Contact us

For any privacy questions, data requests, or concerns, reach us at adhilshamsuu@gmail.com. We read every message and aim to respond promptly.