Privacy Policy
Effective date: June 22, 2026
OneCircle is a social app for college students in India — a place to follow your campus feed, watch reels, join clubs, message friends, and show off your work. This policy explains, in plain terms, what data we collect, why, and what control you have over it.
1. Who we are & what this covers
This Privacy Policy applies to the OneCircle mobile app and our website at onecircleapp.com. In this document, "we", "us", and "OneCircle" refer to the team that builds and operates OneCircle. "You" means anyone who creates an account or uses the app.
If you have any questions about your privacy, you can always reach us at [email protected].
2. Information we collect
We only collect what we need to run the app. That includes:
Account information
- Your email address, name, and username
- Your college, department, and year of study
Profile data
- Your bio, profile photo (avatar), and cover image
- Your skills and links you choose to add, such as LinkedIn and GitHub
Content you create
- Posts, comments, and reels you publish
- Messages you send in one-on-one and group chats
- The clubs and communities you join or follow
Usage & technical data
- Session and usage analytics — how you move through the app, which helps us understand what's working and fix what isn't
- Your reel-view history, used to avoid showing you the same reels and to improve recommendations
- Device push notification tokens, so we can send you notifications you've opted into
We do not collect your precise location. OneCircle does not track or store GPS coordinates. The only "location" we know is the college you tell us you're part of.
3. How we use your information
- To provide the service — create your account, show your profile, and run posts, reels, clubs, and chat.
- To personalise your campus feed — surface posts, reels, clubs, and people relevant to your college and interests.
- To enable clubs & messaging — let you join communities and communicate with other students.
- For security & abuse prevention — detect bots, spam, and harmful content, and keep accounts safe.
- For product analytics — measure how features are used so we can improve the app and fix bugs.
We do not use your personal data for advertising, and we do not show ads in OneCircle.
4. Legal bases & your jurisdiction
Where data protection law requires a legal basis for processing (such as the EU/UK GDPR), we rely on the following:
- Performance of a contract — to deliver the core features you sign up for.
- Legitimate interests — to keep the platform safe, prevent abuse, and improve our product, balanced against your rights.
- Consent — for things like push notifications and camera/photo access, which you can grant or revoke at any time.
- Legal obligation — where we are required to retain or disclose data by law.
OneCircle is built for students in India, so the Digital Personal Data Protection Act, 2023 (DPDP Act) applies to our handling of your personal data. We act as the data fiduciary for the information you share with us, process it for the limited purposes described here, and honour the rights it grants you.
5. Service providers & subprocessors
We use a small number of trusted third parties to operate OneCircle. We share only the data each one needs to do its job, and your data may be processed on their infrastructure. We never sell your data to anyone.
- Supabase — hosting, database, authentication, and file storage. This is where your account, content, and uploaded media live.
- Cloudflare — media delivery and edge network for fast, reliable content, and Turnstile CAPTCHA for bot protection on sign-up and login.
- Sentry — crash and error reporting, so we can find and fix problems in the app.
- Google (Gemini AI) — automated moderation of user content to help keep OneCircle safe and detect harmful material.
- Resend — sending transactional emails such as email verification and password reset.
Each of these providers may process data on servers located outside India. We choose providers that maintain strong security and privacy practices. We may also disclose information if required by law or to protect the safety of our users.
6. App permissions
OneCircle asks for device permissions only when a feature needs them, and only after you take an action:
- Camera & photo library — to set your profile and cover photos and to add images to your posts.
- Microphone — to record audio when you create video posts.
You can review or revoke these permissions any time in your device settings.
7. Data security
- All data is encrypted in transit using HTTPS/TLS and encrypted at rest on our infrastructure.
- Database access is protected by row-level access controls, so users can only reach data they're authorised to see.
- CAPTCHA protection guards sign-up and login against automated abuse.
- We show no ads and we do not sell your personal data — full stop.
Messaging privacy
Your one-on-one and group chats are private to the people in the conversation. Our access controls prevent other users — including club heads, college moderators, and in-app administrators — from reading conversations they are not a part of.
Please note that OneCircle messages are not end-to-end encrypted. They are protected in transit (HTTPS/TLS) and encrypted at rest, but they are stored in a form that our platform can technically access. This means our operators may access message content only where strictly necessary — for example, to comply with a valid legal request, to investigate a safety report or abuse, or to keep the service running. We do not read your messages for advertising, and we never sell them. If you need to share highly sensitive information, please use a dedicated end-to-end encrypted service.
8. Data retention & your rights
We keep your personal data for as long as your account is active. When you delete your account, we remove your data as described below, except where we're required to keep certain records by law.
You have the right to:
- Access the personal data we hold about you
- Correct data that is inaccurate or out of date
- Delete your account and the data associated with it
Deleting your account
You can permanently delete your account directly in the app: go to Settings → Delete Account. This permanently removes your account, your content (posts, comments, reels, and messages), and the media you've uploaded. This action cannot be undone.
For step-by-step instructions, see our Delete Account guide. If you'd rather we handle it for you, email [email protected].
9. Children's privacy
OneCircle is intended for college students and is not designed for children. We do not knowingly collect personal information from anyone under the age of 13. If we learn that we have collected data from a child under 13, we will delete it. If you believe a child has provided us with personal data, please contact us.
10. Changes to this policy
We may update this Privacy Policy from time to time as OneCircle evolves. When we make significant changes, we'll update the effective date above and, where appropriate, notify you in the app. Continuing to use OneCircle after an update means you accept the revised policy.
11. Contact us
For any privacy questions, data requests, or concerns, reach us at [email protected]. We read every message and aim to respond promptly.