Privacy Policy

Your Circle is the product and consumer brand. The service is operated by Montrelle House GmbH, Zurich, Switzerland (company identification number CHE-308.422.547), which is the data controller for the personal information processed through Your Circle.

You can reach us at any time at hello@joinyourcircle.com.

These are the categories of information Your Circle actually holds:

• Account and identity. Your email address and sign-in credentials, held by our authentication provider, your name and the name you prefer to be called.
• Where you are. Your city and broad region, and the regions relevant to a particular piece of your experience or to something you are looking for. We do not collect precise device location.
• What you have lived and done. The experience you describe — professional, business, education and family, philanthropy, property, relocation, sport, travel and life, and anything else you add — together with the role you held, the timeframe, context and outcome, and how discoverable you want each entry to be. Where you describe yourself in your own words, in writing or by voice, that description is kept as the source of the structured entries.
• Interests and direction. Your interests, what you are open to, and what you are currently looking for or asking about, in your own words.
• Sports and availability. The sports you add, your level, how you like to play and any optional regular or specific availability you provide. Your full availability is private; another member may only see that a genuine compatible overlap exists.
• A portrait, if you add one. Stored privately and never served from a public address; it is shown to other members only through short-lived, expiring links.
• What you do here. Whom you express interest in, which introductions you accept or decline, and the messages you exchange in a private conversation after an introduction opens. Messages are stored on our database in readable form so the conversation persists for both people; they are not end-to-end encrypted.
• Feedback and standing. The feedback you give after a connection, and the feedback others give about connecting with you, together with the signals derived from it.
• Records that keep the service safe. Your acceptance of these documents and your confirmation that you are 18 or older — the confirmation itself, with the time and the place in the service where you gave it. We do not ask for or store a date of birth. Alongside it: a record that an automated analysis ran (its purpose, the model used and the size of the input, not the text itself), rate-limit records used to prevent abuse, and administrative action logs.

To operate your account and provide the service you asked for; to understand your experience well enough to surface people who are genuinely relevant to you; to open introductions only where interest is mutual; and to keep the network safe and free from abuse. The legal basis is the performance of our agreement with you for everything needed to run the service, our legitimate interest in the safety and integrity of the network, and your consent where we ask for it. Where consent is the basis, you may withdraw it.

Your Circle uses no advertising cookies, no advertising pixels and no cross-site tracking. Our typefaces are served from this site itself, so loading Your Circle makes no request to any third-party font or content network and discloses your address to none. This is the complete list of what is kept in your browser:

• Your sign-in session — held in your browser so you stay signed in, until you sign out or it expires. Essential.
• Your 18+ confirmation, an invitation token you arrived with, and reviewer mode — held only for the current browser tab. Essential.
• A random visit reference — a value with no connection to you, held only for the current tab, used so that the first-party measurement below reads as one visit rather than scattered moments.
• How you found us — the sanitised record described below, kept for 90 days, then discarded. You can switch this off.
• Your privacy choices — the choices you make in Privacy choices, so we can honour them on your next visit. It contains two words, a date and the version of this notice, and no identifier. Essential.
• No analytics or advertising cookies. Your Circle sets none, because it uses no third-party analytics and no advertising technology at all.

All of the above is first-party — set by this site, readable only by this site. You can review or change every non-essential choice at any time through Privacy choices in the footer of every page.

To make matching better we measure how the product itself is used, in our own database. Nothing about this is shared with anyone, and no third party is contacted.

What is recorded is a closed list: which screen you were on, which meaningful moment occurred (a recommendation shown, an interest expressed, an introduction opened), which member profile was surfaced to which member, at what position, with what score band and which categories of shared ground, and which version of our matching logic produced it. Alongside it: identifiers, numbers, true/false values and words from a fixed vocabulary — nothing else can be sent, and anything else is discarded twice, once in your browser and again on our servers.

Never recorded here: your profile or the words you wrote, what you are looking for, your searches, your messages, your feedback notes, your name, your email address or your portrait.

The legal basis is our legitimate interest in understanding and improving our own service. These records are kept for 730 days, are deleted when your account is deleted, and are unreachable through our public interface — only our server code can write them. You can object and switch this measurement off at any time in Privacy choices; nothing further is recorded from that browser, and the product continues to work and to recommend people exactly as before.

When you first arrive we note how you got here, once, and never again — a later visit cannot change it. That record is: the five standard campaign parameters if the link carried them (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the host name of the site you came from, the page you landed on, the moment, and a single word for the channel.

What this deliberately cannot capture: the full address you came from, and therefore no search terms carried in it; any other parameter in the link; your IP address; any device fingerprint; any free text. Every value is shortened, restricted to ordinary characters, and dropped entirely if it looks like an email address.

It is kept in your browser for 90 days so that it can be attached to your membership if you go on to join, because the source is only knowable before you sign up and your account only exists afterwards. Once attached it cannot be altered, is readable only by our server code, and is deleted with your account. The legal basis is our legitimate interest in knowing which channels bring us members. We do not claim this is exempt from your choice: you can switch it off in Privacy choices, which also deletes what is stored.

Your Circle uses no third-party analytics service. There is no Google Analytics, no tag manager, no consent management platform, no advertising pixel and no cross-site tracking anywhere in the product. This is a technical fact, not a setting: no such code exists in the pages we serve, so no request is made to any analytics or advertising company and your address is disclosed to none of them.

Everything we measure is described in the two sections above and stays in our own database. Our own measurement code never records or transmits your IP address, and we build no advertising or cross-site profile of anyone.

If that ever changes we will say so here, bump the version of this notice, and ask for your consent before anything third-party loads.

Inside Your Circle there is a Give feedback option. If you use it, we keep exactly what you write or dictate there, because you wrote it for us on purpose. This is the one place where your own words are stored as words — and it is deliberately separate from measurement, which never records free text at all.

Alongside your message we keep only what is needed to understand it: which screen you were on, when you sent it, which build of the app you were using, whether you were on a phone or a desktop, whether you spoke or typed, and your member identifier. We do not attach your profile, what you are looking for, your searches, your messages, recommendations you were shown, or your email address.

If you speak your feedback, the recording is sent once for transcription, comes straight back to you to read and correct, and is then discarded. The audio is never stored in our database or in file storage, and only the text you approve is submitted.

So that we read it promptly, a copy of your message and the same context described above is also sent to an internal Your Circle inbox through our email provider. Nothing further is added, and no other member data travels with it.

Feedback is private to us. No other member can read it. It is used to improve Your Circle and never to measure, score, rank or match you, and it is deleted with your account. The legal basis is our legitimate interest in improving the service on the basis of what you have chosen to tell us.

Your Circle emails you only when something has actually happened that concerns you. There are no newsletters, no reminders, no digests and no marketing. Today that means account emails — confirming your address, resetting your password — and service emails about connections:

• Someone would like to meet you. When another member decides they would be interested in meeting you, we tell you, with their first name and the same short explanation of why the two of you were surfaced to each other that you see in the app. Your answer stays private, and if you are not interested they are never told.
• You both chose to meet. When interest is mutual, we tell you both once, with the other member’s first name and a link into the connection.
• A connection sent you a message. We may tell you once within a 30-minute window while the conversation is unread and not open. The email names the sender but never includes the message itself.

These emails never contain contact details, email addresses, your profile narrative, what you are looking for, your searches, message contents or a portrait, and they carry no tracking pixels, advertising tags or third-party analytics of any kind. Connection emails are sent once per event and message emails are limited to one per conversation window; if delivery fails, nothing about your connection changes. We keep only an operational record that the email was attempted and whether it succeeded — never its content. These are service messages that form part of the product, so there is no unsubscribe from them other than closing your account; the legal basis is performance of our agreement with you.

• Running your account and the service — performance of our agreement with you.
• Safety, abuse prevention, standing — our legitimate interests.
• First-party product measurement and how you found us — our legitimate interests, with the opt-outs described above.
• Your 18+ confirmation and document acceptances — our legal obligation and legitimate interest in being able to evidence them.

Two things here are done by machine, and we want you to know exactly which.

Understanding what you tell us. When you describe yourself, an AI model is used to turn that description into structured entries — a piece of experience, an interest, or what you are looking for. The model only proposes; nothing enters your profile until you have seen it and confirmed it. Alongside each proposal we keep the fragment of your own words it came from, so you can always see why something was suggested. If you speak instead of typing, the recording is sent to the same provider to be transcribed and is not stored by us: we keep the transcript you then work with, not the audio.

Deciding who is surfaced to you. Which members appear as suggestions, and the short explanation of why the two of you might be worth knowing, are produced by our own logic running on our servers, comparing your experience and what you are looking for against other members', weighted by the standing described below. This part is not an AI model. It does not release contact details and it never opens an introduction on its own: an introduction requires your explicit choice and the other person's, and no decision with a legal or similarly significant effect on you is made by automated means alone.

Where AI processing takes place, the provider acts on our instructions as a processor and does not use your text to train its own models. We keep a record that an analysis ran — its purpose, the model, and how much text went in — but not the text itself. If you would rather no AI analysis touched your words, write your entries yourself rather than using the assisted drafting, and do not use voice input.

After a connection, either person can give feedback: how relevant it was, how credible the experience proved, how valuable the conversation was, and how the other person conducted themselves. That feedback is turned into signals held against your account and shapes how prominently you are surfaced to others.

Other members never see your ratings, scores or individual pieces of feedback about you. They see, at most, a plain-language sense of where you are established and how reliably you engage. Individual signals are visible only to us, and are used to keep the network worth being part of. If you believe your standing rests on feedback that is unfair or inaccurate, write to us and we will look at it.

When you create your profile we record that you accepted the version of these documents then in force — the Terms of Service, this Privacy Policy, and the automated and AI processing described above. The record holds which document, which version and when. The version of this Privacy Policy currently in force is 16 September 2026; the Terms of Service in force are 24 August 2026.

Contact details are never released automatically. Another member sees your profile as you have chosen to present it, and only the entries you marked as discoverable; your portrait is shown through an expiring link. Where you have chosen to remain less visible, you may be represented to a relevant member only by a general description of your experience rather than by name. Direct contact becomes possible only after both people have privately agreed to an introduction, and what is said inside that conversation is visible only to its participants.

We do not sell personal information, and we do not share it with advertisers. We rely on a small number of service providers, each acting on our instructions and only to deliver the service:

• Supabase — hosting of our database, authentication, private file storage, and the delivery of account emails such as confirmation and password reset.
• Lovable — application hosting, and the gateway through which our AI requests are sent.
• Mailgun — delivery of the emails Your Circle sends you, on European infrastructure.
• Google — the Gemini model used for the transcription and drafting described above, and nothing else. Our typefaces are served from this site, and we use no Google analytics or advertising product, so nothing else on Your Circle contacts Google.

We may also disclose information where the law requires it, or where it is necessary to protect a person from serious harm.

Your data is held on European infrastructure. Some of our providers nevertheless process data outside Switzerland and the EU/EEA, including in the United States: Google (the AI model only) and our application host. Those transfers rely on the European Commission’s standard contractual clauses, on the EU–US Data Privacy Framework and its Swiss and UK extensions where the provider is certified, and on our assessment of the safeguards in each case. You can ask us for the detail at hello@joinyourcircle.com.

We keep your profile and the content you have added for as long as your account exists. Shared records such as messages and feedback persist for as long as the other person's own history requires, detached from you once you leave. Your acceptance of these documents and your age confirmation are kept for as long as they are the evidence that you agreed, and records that let us keep a closed abusive account from returning are kept beyond the life of your account.

The operational records are deleted automatically, on a schedule, by age:

• Rate-limit records — 7 days. Only the most recent hours are ever consulted.
• Records that an automated analysis ran — 180 days, long enough for us to answer your question about what ran and why.
• Administrative action logs — 2 years, because they are what makes operator access accountable.
• First-party product measurement — 730 days, and immediately on deletion of your account.
• How you found us — 90 days in your browser; the record attached to your membership lives only as long as your account does and is deleted with it.

You can close your account at any time from within the product. We want to be precise about what happens, rather than promise something instant and absolute that would not be true.

Immediately. Your profile and the content that belongs only to you are removed from the service, your uploaded portrait is deleted from private storage, you disappear from other members' discovery and suggestions, and your live sessions are ended. Your account can no longer be used to sign in.

Detached rather than destroyed. Records that are shared with another person — a message inside a conversation, feedback another member received — are separated from your identity rather than deleted, so that the other person's own history is not rewritten. What remains is no longer attributable to you.

Anonymised records. Deletions are logged against a random reference rather than against you, so we can demonstrate that a deletion happened without keeping a list of who left.

Where removal cannot complete at once. Removing the sign-in identity itself depends on our authentication provider. If that step does not succeed in the moment, the identity is immediately disabled and made unusable — sign-in blocked, credentials invalidated, and your email address detached from it, so it cannot be recovered or reset by anyone — and it is queued for final removal, which may require action by our team. In that case the account is closed from your side straight away and the remaining removal is completed afterwards. Backups and provider-side logs may also retain traces for a short period before they expire on their normal cycle.

If you would like written confirmation once removal has fully completed, ask us at hello@joinyourcircle.com.

Privacy choices appears in the footer of every page, in your account inside Your Circle, and on this page. It shows what is essential, and lets you turn first-party product measurement on or off and turn “how you found us” on or off (switching it off deletes what is stored). Every change takes effect immediately. There is no consent banner, because there is nothing here that requires prior consent.

Your choices are remembered in your own browser, so they apply on every visit from it and are stored nowhere else if you are not signed in. If you are signed in we also keep a dated record of the choice against your account, so that we can show later what you chose and when. You may need to make the choices again in another browser, on another device, or after clearing site data.

Open Privacy choices

You may access, correct, export or delete your data, object to certain processing, and withdraw consent where processing rests on it. Export and deletion are both available directly inside the product.

To exercise any of these rights, write to hello@joinyourcircle.com. If you believe we have handled your data improperly, you may also contact the Swiss Federal Data Protection and Information Commissioner, or your local supervisory authority in the EU/EEA.

If this policy changes materially, we will make the new version available here and record the version in force. Montrelle House GmbH remains the responsible entity for any version of this policy.