Privacy Policy

Circa is a calendar app designed to keep your data minimal and private. This policy explains what we collect, how we use it, and the choices you have. If anything here is unclear, email us at support@circacal.com.

1. Information We Collect

We collect as little as possible. When you first take an action that requires our servers (creating or joining a shared space), Circa creates an anonymous account for you. We do not ask for your email, phone number, or real name.

Account: an anonymous user ID and the display name you choose.

Personal calendar data (events, moments, categories, notes, reminders) stays on your device and syncs privately through your own iCloud account using Apple's CloudKit. We never see it and it never touches our servers.

Shared space data: when you create or join a shared space, the events, dates, notes, RSVPs, space name, and emoji you choose are stored on our servers so other members can see them. Your display name and avatar color are visible to other members of the same space.

Subscription & purchase data: when you subscribe to Circa Pro, Apple processes the payment. Apple shares a purchase receipt with us (and with RevenueCat, our subscription-management partner) that includes a transaction ID, your anonymous subscription status, and the product you purchased. We never receive your credit card number, billing address, or Apple ID. This information lets us deliver the features your subscription unlocks across your devices.

We do not collect: email, phone number, real name, address, payment info, location, contacts, photos, microphone recordings, advertising identifiers, or browsing history. Circa does not use advertising SDKs, personalized advertising, or cross-app tracking, and we never sell your data.

Diagnostics & product analytics: to keep Circa stable and improve onboarding, features, and overall product experience, we collect a small set of privacy-focused signals tied only to your anonymous or pseudonymous app identity. The content of your events — titles, notes, attendee names — is never sent to analytics or crash-reporting providers. This data is not sold, not used for advertising, and not used for cross-app tracking.

• Device ID — a Mixpanel-generated install identifier.
• Product Interaction Data — screen views, onboarding completion, feature usage, and subscription/paywall events (Mixpanel).
• Crash Data and Performance Data — stack traces, hangs, and launch timing (Sentry, with Mixpanel for performance signals). Personal event content such as titles, notes, and attendee names is stripped on-device before transmission.

2. Permissions Circa Requests

Microphone & Speech Recognition: only if you tap the voice button to dictate an event. Audio is transcribed on your device by Apple's Speech framework and discarded immediately. The audio itself is never uploaded or stored.

Notifications: used only to remind you of your own events on your device. All reminders are scheduled locally; we do not send push notifications from our servers.

3. Invite Links

When you invite someone to a shared space, the link contains a token that lets the recipient preview the space before joining. Anyone who opens the link can see the space's name, emoji, member count, and the inviter's display name. Only share invite links with people you trust.

4. How We Use Your Information

We use the data above only to operate Circa: to authenticate your device, sync shared spaces between members, and deliver the features you use. We do not use your data for advertising, profiling, or training AI models. We do not sell your data to anyone. We also use subscription data to verify your entitlement to Circa Pro features (creating shared spaces, voice-to-event, widgets) and to restore your purchases on a new device when you tap "Restore Purchases."

5. Third-Party Services

We rely on a small set of providers to operate and improve Circa. We do not use advertising SDKs, and none of these providers receive the content of your events.

Infrastructure & authentication. Shared-space data and anonymous accounts are hosted with Supabase. Personal on-device data syncs through Apple iCloud under Apple's privacy policy.

• Supabase: https://supabase.com/privacy
• Apple: https://www.apple.com/legal/privacy/

Subscription management. RevenueCat processes anonymous Apple subscription receipts and entitlement status on our behalf so the same subscription works across your devices.

• RevenueCat: https://www.revenuecat.com/privacy

Product analytics. Mixpanel receives anonymous or pseudonymous product-usage signals — screen views, onboarding completion, feature usage, and subscription/paywall events — used only to improve the app. No event titles, notes, or attendee names are sent.

• Mixpanel: https://mixpanel.com/legal/privacy-policy/

Diagnostics & crash reporting. Sentry receives crash reports, error traces, and performance diagnostics. Personal event content is scrubbed on-device before any report is sent.

• Sentry (Functional Software Inc.): https://sentry.io/privacy/

6. Security

Data in transit is encrypted with TLS. Data at rest is protected by industry-standard encryption provided by Apple iCloud and our hosting provider. No system is perfectly secure, but we work to keep your data safe.

7. Data Retention & Deletion

You can delete your account at any time from Settings → Delete Account inside the app. Doing so permanently removes your profile, your shared events and RSVPs, and wipes Circa's data from your device. Spaces you created may continue to exist for other members. Server backups may retain residual copies for a short period before being overwritten in the normal course of operations.

If you delete your account while you have an active subscription, your Circa data is removed from our servers but your Apple subscription continues to bill until you cancel it directly with Apple. Apple is the only entity that can cancel or refund a subscription. See https://apps.apple.com/account/subscriptions to manage subscriptions.

8. Children

Circa is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has used Circa, contact us and we will delete the account.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of Circa after a change means you accept the updated policy.

10. Contact

Questions about this policy or your data? Email support@circacal.com.