Privacy Policy
Last updated: September 28, 2026 · Draft — not yet legally binding
1. Information We Collect
We collect information you provide directly, including: your name and email address (required for registration); your profile photo (optional); your goal story, category, and other profile content you choose to share; payment information (processed securely by Stripe — we never store card details); and your selected sponsorship circle members.
2. How We Use Your Information
We use the information we collect to: create and maintain your account; display your public profile to other members (if set to public); process sponsorship payments (when live); send transactional emails such as email verification and receipts; improve the Platform's features and experience; and comply with legal obligations.
3. Information Sharing
We do not sell, rent, or trade your personal information to third parties. We may share limited information with: payment processors (Stripe) to facilitate transactions; email service providers to deliver system notifications; and legal authorities when required by law. Your public profile information (name, photo, story, goal) is visible to other members when your profile is set to public.
4. Your Profile Visibility
You have full control over your profile visibility. You can toggle your profile between Public and Private at any time from your Settings page. When set to Private, your profile will not appear in the Members section and cannot be selected by other members for sponsorship.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your profile, story, and associated data within 30 days, except where required by law (e.g., payment records).
6. Security
We implement industry-standard security measures including HTTPS encryption, CSRF protection, and hashed passwords. However, no system is 100% secure. We encourage you to use a strong, unique password and to report any suspicious activity to us immediately.
7. Cookies
We use session cookies to keep you logged in and to protect forms (CSRF tokens). We do not use advertising or tracking cookies. Your browser settings allow you to control cookie preferences.
8. Third-Party Services
The Platform may integrate with third-party services including: Google (for optional OAuth sign-in) and Stripe (for payment processing). These services have their own privacy policies, which we encourage you to review.
9. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
10. Your Rights
You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; withdraw consent for data processing where applicable. To exercise these rights, contact us at hello@dayonecircle.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance.
12. Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at hello@dayonecircle.com.
Draft Notice: This Privacy Policy is a draft only and is not legally binding until reviewed by qualified legal counsel and officially published. It is provided here for concept purposes only.