Privacy Policy

1. What We Collect

• Account info: email address, and if you sign in with Google, your name and profile photo as provided by Google.
• Profile info you add: username, city/state (optional).
• Circle activity: circles you create or join, contribution amounts and schedules, payout order, payment status you or other members mark (paid/confirmed/late/disputed), receipt photos you upload for a payment, ratings you give or receive, and messages you send in circle chat.
• Billing info (Plus subscribers only): we never see or store your card number. Stripe handles website subscription checkout, and Google Play/RevenueCat handle Android in-app subscription checkout. CircleSync receives only billing provider IDs, entitlement status, subscription status, and plan status needed to operate Plus.
• Basic technical data: standard server logs (IP address, browser type, timestamps) generated by our hosting provider (Vercel) and database provider (Supabase).

2. What We Don't Collect

We never collect or store payment card numbers, bank account numbers, or government ID numbers. CircleSync never handles or has custody of the money members send each other — that happens directly between members using whatever payment method they choose.

3. How We Use It

• To operate the core features of the app (circles, payments tracking, chat).
• To send you notifications about your circles (in-app, and to your email for account-related messages).
• To process Plus subscription payments through Stripe, Google Play, or RevenueCat as applicable.
• To detect and prevent fraud or abuse.

We do not sell your personal information.

4. Who We Share It With

• Other members of your circles— your username/name, payout order, payment status, and ratings are visible to other members of any circle you're in (this is core to how the app works).
• Supabase (database and authentication hosting).
• Stripe (payment processing for Plus subscriptions) — see Stripe's Privacy Policy.
• RevenueCat (subscription entitlement management for Android Plus purchases).
• Google(only if you choose "Continue with Google" to sign in, or if you buy/manage an Android Plus subscription through Google Play).
• Vercel (application hosting).

We do not share your data with advertisers.

5. How We Protect It

CircleSync uses HTTPS for app traffic, Supabase authentication for account access, row-level database security for member-only records, and a private receipt storage bucket with time-limited signed URLs for receipt images. Support access is limited to what is needed to operate the service, respond to requests, investigate abuse, or comply with legal obligations.

6. Data Retention & Deletion

We keep your data as long as your account is active. You can request deletion of your account and associated data from the account deletion page or by contacting us at support@monkwehstudios.com. Some records, such as completed payment history, payout order, disputes, or other shared circle records, may be retained in other members' view of that circle's history where needed to preserve the integrity of the group record. Where possible, those records are separated from your personal profile details after deletion. We may also retain limited information when needed for security, fraud prevention, dispute handling, legal compliance, tax/accounting records, or to document that a deletion request was completed.

7. Your Rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. Contact us at support@monkwehstudios.com to exercise these rights.

8. Children

CircleSync is not directed at children under 18 (or the age of majority in your jurisdiction) and we don't knowingly collect data from them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new effective date.

10. Contact

Questions about this policy: support@monkwehstudios.com