Privacy Policy

Effective Date: March 6, 2026  |  Last Updated: March 6, 2026

The Fluxone Inc. ("we," "us," or "our") operates the WorldCircle mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the App. By using WorldCircle, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

Category	Data
Account Registration	Email address, username, password (stored in hashed form only), phone number (country code and local number)
Profile	Profile photo, preferred language, language community selection, default location (country, state/province, city)
Messages & Content	Text messages, images, voice recordings, files, and location data shared in chat rooms or private conversations
Support Requests	Any information you provide when contacting our support team

1.2 Information Collected Automatically

Category	Data	Purpose
Device Identifier	iOS: Identifier for Vendor (IDFV); Android: ANDROID_ID	Prevent trial subscription abuse
Push Notification Token	Firebase Cloud Messaging (FCM) or Apple Push Notification service (APNs) device token	Deliver push notifications
Error & Performance Data	Crash reports, error stack traces, request metadata (URL, HTTP method, response status)	Diagnose and fix issues via Sentry

1.3 Information We Do Not Collect

• We do not collect payment card numbers, bank account details, or financial information. All payments are processed exclusively through Apple App Store or Google Play Store in-app purchase systems.
• We do not use advertising SDKs or third-party behavioral tracking tools.
• We do not access your device contacts, calendar, or browsing history.

2. How We Use Your Information

• Provide the Service: Create and manage your account, deliver messages in real time, display user profiles, and enable community features.
• Communications: Send transactional emails (account verification, password resets, moderation notices) via SendGrid.
• Safety & Moderation: Enforce our Terms of Service, investigate reports of abuse or policy violations, and issue bans or warnings.
• Subscription Management: Verify in-app purchases with Apple and Google to manage your subscription status.
• Improvements: Analyze aggregated, de-identified usage patterns to improve App performance, stability, and features.
• Error Monitoring: Use Sentry to track and resolve server errors. Sensitive data (passwords, authentication tokens, cookies) is stripped before transmission.

3. Device Permissions

The App may request the following device permissions. Each is optional and you can manage them in your device settings:

Permission	Purpose
Camera	Take photos to share in chat
Photo Library	Select existing photos to share in chat
Microphone	Record voice messages
Location (When In Use)	Share your location in chat messages
Notifications	Receive push notifications for new messages

4. Third-Party Services

We use the following third-party services that may process your data in accordance with their own privacy policies:

Service	Provider	Purpose	Data Shared
MongoDB Atlas	MongoDB, Inc.	Cloud database	All stored user and message data (encrypted at rest)
Redis	Redis Ltd.	Caching & real-time state	Temporary session and room data
SendGrid	Twilio Inc.	Transactional email	Email address, username
Sentry	Functional Software, Inc.	Error monitoring	Error data, user ID, email (passwords and tokens excluded)
Firebase Cloud Messaging	Google LLC	Push notifications	Device token, notification content
Amazon Web Services (S3 / CloudFront)	Amazon Web Services, Inc.	File & image storage and delivery	Uploaded media files
Cloudflare	Cloudflare, Inc.	CDN & image optimization	Media file URLs
Apple App Store	Apple Inc.	In-app purchase verification	Purchase receipt data
Google Play Billing	Google LLC	In-app purchase verification	Purchase token, product ID
Google Maps	Google LLC	Map display for location messages	Map tile requests

5. Data Retention

• Account Data: Retained as long as your account is active. You may request deletion at any time (see Section 8).
• Messages: Active messages are retained for 90 days, after which they are archived. Archived messages may be retained for an additional period for safety and compliance purposes before permanent deletion.
• System Notifications: Automatically deleted after 30 days.
• Password Reset Tokens: Expire after 10 minutes and are invalidated after use.
• Error Logs (Sentry): Retained according to Sentry's standard retention policy (typically 90 days).
• Uploaded Media: Retained as long as the associated message exists. Deleted upon account deletion request.

6. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt and are never stored in plaintext.
• Authentication tokens are stored in the iOS Keychain or Android Keystore.
• All data in transit is encrypted via HTTPS/TLS.
• WebSocket connections require JWT authentication.
• Rate limiting is enforced on authentication and messaging endpoints.
• Input sanitization protects against injection attacks.
• CORS policies restrict cross-origin access in production.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

WorldCircle is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at support@thefluxone.com.

8. Your Rights & Choices

All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information through the App or by contacting us.
• Deletion: Request deletion of your account and associated data by emailing support@thefluxone.com. We will process your request within 30 days.
• Opt-Out of Notifications: Disable push notifications in your device settings at any time.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, and shared.
• Request deletion of your personal information.
• Opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information for advertising or marketing purposes.
• Non-discrimination for exercising your privacy rights.

European Economic Area, UK & Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, the legal bases for processing your data are:

• Contractual Necessity: Processing needed to provide the service you requested (account, messaging).
• Legitimate Interest: Security monitoring, error tracking, abuse prevention.
• Consent: Where required (e.g., push notifications, optional permissions).

You additionally have the right to data portability and the right to lodge a complaint with your local supervisory authority.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable, to protect your data during international transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App or by email. The "Last Updated" date at the top indicates when the policy was last revised. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@thefluxone.com
• Company: The Fluxone Inc.
• Support Page: hub.thefluxone.com/support