Privacy

To delete data without deleting your account, email hello@londoncircuit.uk from your account email. Tell us which profile information, selections or messages you want removed. We verify the request and normally process it within thirty days. Records needed for unresolved reports, disputes or legal obligations may be retained; backups expire separately.

To delete your whole account, use Profile → Account settings → Delete account, or request account deletion.

Attendance totals are public. Only signed-in members with an eligible profile and social access can see attendee names, photos, roles and any Instagram or LinkedIn links you add. Count Me In and Going make your attendance visible to those members. Joining a gallery hop can also show you as going to its included events.

Eligible members can open your profile from these lists and may see your past-event count and events you both attended. Your email address, Diary and art interests are not included in these profiles.

We automatically check new profile photos for a visible face and sunglasses. A small crop is sent through Vercel AI Gateway to Google Vertex AI, with zero data retention and no model training required. We send no name, email or social links with it and do not use this check to identify you. If the result is uncertain, you can request a review.

You can edit your profile and remove social links or Going selections. Other people may have already seen or copied information you made public. Contact us for account or data deletion.

Members can message friends or send a message request to an eligible non-friend. Circuit stores conversations so participants can access them on their devices. Other members cannot read your direct conversations.

Event and route chats are shared with eligible attendees. Circuit may access reported content to investigate abuse and provide support.

Block someone from their profile to stop contact. You can delete your own messages or report a message to Circuit. Reports of direct messages retain a copy for review, even if the message is later deleted. Group-chat reports retain report details, but deleted message text may no longer be available. Messages are not end-to-end encrypted.

The host can choose a gallery manually or opt in to automatic location sharing during a scheduled hop. Automatic sharing requires your device’s location permission. Signed-in members with an eligible profile and social access can see the shared location, accuracy and update time.

On the website, automatic updates run while Circuit is open and visible and pause when you switch apps or lock your phone. In the native app, a sharing session started inside Circuit can continue while your phone is locked or another app is open. Android shows an ongoing notification with a Stop action; iPhone shows its location indicator. Sharing ends thirty minutes after the hop ends, or after six hours at most. You can stop earlier or choose a gallery manually instead. Force-quitting Circuit or the operating system ending its process can stop updates; sharing does not restart automatically.

Each new position replaces the previous one; Circuit does not keep a location trail. After two minutes without a fresh update, the position is labelled Last known and shows its update time. That single position stays visible until the sharing session ends, up to thirty minutes after the hop ends or six hours after starting. An automated cleanup removes expired coordinates within a further five minutes. Manual gallery updates stay until you replace or clear them, or until thirty minutes after the hop ends. Service backups may retain earlier data temporarily.

Stopping while online clears the shared position. If you stop offline, Circuit stops collecting on that phone; reopen Circuit when connected so it can clear the last position. Until then, the position remains labelled with its age and disappears when the sharing session ends. Location coordinates are not included in Circuit’s optional analytics events.

We use your account details, sign-in information, profile, selections and messages to provide the features you request. This processing is necessary to provide our service under the Terms. If you use Google sign-in, we receive the account information needed to sign you in.

We use security and diagnostic records, including request information, to prevent abuse, investigate problems and keep Circuit reliable. This serves our legitimate interests in protecting the service and its members. We may retain relevant information to meet legal obligations or resolve disputes.

Supabase provides account, database and photo-storage services. Vercel hosts Circuit. Resend delivers sign-in emails, and your browser or device's push service delivers notifications you enable. Optional analytics are described separately below.

Temporary sign-in security counters use coded identifiers derived from an email address, network address or code challenge. The counters contain no raw emails, network addresses or verification codes. Their counting windows last up to 20 minutes; an hourly cleanup removes expired counters.

Account information, selections and conversations are stored while needed to provide your account, saved history and conversations across devices. They do not all expire automatically. You can remove supported items in the app or request account deletion from Profile → Account settings → Delete account, at londoncircuit.uk/delete-account, or by email. Account deletion requires email verification and explicit confirmation. Verified requests are processed within 30 days; submitting a request stops device notifications immediately. Consent records and abuse reports are kept separately to manage choices and investigate reports; expiry of an analytics choice does not automatically erase its consent record.

Deletion requests are reviewed for information we need to retain for unresolved reports, disputes or legal obligations. Removing something from the app does not necessarily remove it immediately from service backups or records of a reported conversation.

You can ask to access or correct your personal information, request deletion or restriction, and object to processing based on legitimate interests. Where applicable, you can request a portable copy and withdraw consent without affecting earlier lawful processing.

Contact hello@londoncircuit.uk. We may need to verify your identity. You can also raise a concern with the Information Commissioner’s Office.

If you enable notifications, Circuit stores a private subscription or push token for that device. Choose messages, invitations and reminders in Notifications. Native delivery uses Google Firebase Cloud Messaging on Android and Apple Push Notification service on iPhone.

Signing out or turning them off removes the server subscription used to deliver alerts. Turning them off retains the device’s notification permission and local registration for easier re-enabling; you can revoke permission in device or browser settings. Unused subscriptions expire after 30 days. Message text is excluded from alerts.

With permission, PostHog (EU) measures visits and activity using a browser ID stored in cookies and local storage. Signing in links visits across devices using a coded account ID.

Names, emails, social handles and messages are excluded. Session recordings are off.

With your signed-in account’s analytics permission, Circuit also stores your latest use of the website, Android app and iPhone app, including the reported app version. Each platform replaces its previous record, at most once every 15 minutes or when the version changes. Admins can view these records to improve reliability and support testing. There is no device identifier or browsing history in this record. Records expire after 90 days and are removed when you decline account analytics or your account is erased. Do Not Track and Global Privacy Control prevent new records on that device.

Vercel measures overall traffic and speed. Its visitor ID expires after 24 hours.

We also count participation from existing Going, connection, chat and Saved records to improve Circuit. These reports contain totals, not names or message text. This uses our legitimate interests in improving the service; contact us to object.

Allow or decline: remembered for 180 days. When signed in, your choice applies across devices on that account. Otherwise, it applies to this browser.

Dismiss: ask again in 7 days on this browser. Ignoring the card leaves PostHog off. Earlier browser refusals stay off until changed; earlier grants aren’t extended to other devices.

Change your choice here or in About. Withdrawing stops PostHog and clears its browser ID here. Other signed-in devices update when reopened or within 30 seconds while active and connected. Do Not Track is respected.

Circuit stores account choices and browser consent records. Admins can see your choice, date, expiry and notice version, linked to your account when signed in. These records contain no browsing history and are not sent to PostHog.