Privacy

Who is responsible

Circle (joincircle.co) is the data controller for everything described here, within the meaning of Turkish law no. 6698 on the Protection of Personal Data (KVKK). Questions, requests and complaints go to ozgur@joincircle.co and are answered by a person.

What is collected

Your account. An email address, a username, and a password. The password is handled by our authentication provider and stored only as a hash — it is never visible to us.

How you play. The predictions and bonus picks you make, the circles you belong to, and the points those earn. This is the substance of the game and cannot be turned off while you play.

What you write. Messages and GIFs you post in a circle's chat are stored and are visible to the other members of that circle. Treat a circle chat as you would any group chat: it is private to the circle, not to you.

Push notifications (iOS). If you allow notifications, the app stores a device token issued by Apple and your notification preferences, so it knows where to send an alert and which ones you want. Refusing the permission, or turning every switch off, leaves nothing to store.

Cookies. Three, all functional, none for advertising: a sign-in session cookie, your language choice, and your time zone so kickoff times display correctly. There is no cookie banner because there is nothing to consent to.

What is not collected

There is no analytics package, no advertising SDK, no tracking pixel and no third-party script of any kind in the app or on this site. Nothing you do in Circle is profiled, scored for advertising, or sold. There is nothing to opt out of, because it was never built in.

Nor is any of it sold. Circle does not sell your personal information and does not share it for anyone else's advertising. There is no advertising business here to sell it to.

Who else touches it

Four processors, each doing one job:

Supabase. Stores the database and runs authentication.

Render. Hosts the website and the background jobs that keep scores current.

Apple. Delivers push notifications to your device. Apple receives the notification and its token, not your account.

GIPHY. Serves GIF search results. Searches are proxied through our server, so GIPHY receives the search term but never your IP address or your identity.

Match scores, fixtures and squads come from a football data provider. No personal data goes to them; that traffic runs one way.

Where it is kept, and for how long

Data is stored on servers operated by the processors above, which sit outside Türkiye and outside the United Kingdom. Those transfers are made under the data-processing terms each provider publishes, which incorporate the standard contractual clauses that the KVKK and the UK GDPR both look for. A copy is available on request.

Your account and its history are kept while the account exists. Delete the account and they go with it.

Deleting your account

You can delete your account from inside the app — on iOS, the gear menu on your profile — and from the website. Deletion removes your account, your predictions, your messages and your device tokens. It is immediate and it is not reversible. If you would rather someone did it for you, email ozgur@joincircle.co.

Your rights

Wherever you are, you may ask what is held about you, ask for a copy, have it corrected, have it deleted, and object to how it is processed. Those rights come from article 11 of the KVKK in Türkiye, from the UK GDPR and the Data Protection Act 2018 in the United Kingdom, and from the GDPR in the European Economic Area. Email ozgur@joincircle.co and you will get an answer within thirty days — in practice, much sooner.

If the answer does not satisfy you, you can take it to a regulator: the Personal Data Protection Authority (KVKK) in Türkiye, or the Information Commissioner's Office (ICO) in the United Kingdom.

Age

Circle is not for children. You must be at least 16 to hold an account. If an account turns out to belong to someone younger it will be deleted along with its data.

Changes

If this policy changes in a way that matters, the date at the top changes and the app says so before the change takes effect. Silent rewrites are not how this will work.