Privacy Policy

• Location Data — Real-time GPS coordinates during active trips to enable live tracking and safety monitoring.
• Audio Recordings — Optional, off by default. Ambient audio during active trips, encrypted and auto-deleted after 14 days, or 90 days on a Premium account.
• Account Information — Name, email, username, and profile photo for account identification.
• Biometric Data — Face ID or Touch ID data is processed on-device only and never transmitted to our servers.
• Device Information — Device model, OS version, and battery level for app functionality and safety alerts.

• Safety Services — Powering real-time trip tracking, chaperone alerts, geofence monitoring, and emergency features.
• Notifications — Sending safety alerts, trip updates, check-in reminders, and panic notifications to chaperones.
• Service Improvement — Analyzing anonymized usage patterns to improve app reliability and safety features.
• Member Coordination — Facilitating mutual verification and real-time communication between you and your Close Circle Members.

• Trip Data — Trip routes and location history are automatically deleted after 90 days. Audio recordings go sooner — after 14 days, or after 90 days on a Premium account.
• Account Data — Retained while your account is active. Deleted permanently when you delete your account.
• PIN & Credentials — Stored securely in your device’s Keychain. Never transmitted to or stored on our servers.

• Encryption — All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
• Secure Infrastructure — Data is stored on Supabase (managed PostgreSQL) with the application backend hosted on Vercel. Legacy account data remains on Google Firebase until migration completes.
• On-Device Processing — Biometric authentication and PIN verification are processed entirely on your device.
• Regular Audits — We conduct regular security reviews and follow industry best practices for data protection.

• Access — Request a copy of all personal data we hold about you at any time.
• Deletion — Delete your account and all associated data permanently from the Settings screen.
• Data Portability — Request an export of your data in a machine-readable format.
• Opt-Out — Revoke location, microphone, or notification permissions at any time via device settings.

• Apple MapKit — Map rendering and geocoding. Subject to Apple’s Privacy Policy.
• Supabase — Authentication, database, file storage, and realtime updates.
• Vercel — Hosts the application backend that sends notifications and emergency messages.
• Sendbird — In-app chat and voice notes between you and your Close Circle Members.
• Twilio — Sends the emergency SMS to your emergency contact when you raise an SOS.
• RevenueCat — Manages subscription status. Receives no location, trip, or message data.
• Google Firebase — Legacy authentication and storage, retained until account migration completes.
• Apple StoreKit — In-app purchase and subscription management. Payments processed by Apple.

Close Circle is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information promptly. If you believe a child under 13 is using the App, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. When we make material changes, we will notify you through the App or via the email address associated with your account. Your continued use of Close Circle after such changes constitutes acceptance of the updated policy.