CIRCLE: Private Chat

Privacy Policy

Last updated: 2 October 2026

1. Who we are

CIRCLE: Private Chat (“CIRCLE”, “the app”) is provided by PT JIJI LABS DIGITAL, a company established in Indonesia (Kabupaten Karanganyar, Jawa Tengah) (“we”, “us”). We are the controller of the personal data described in this policy. You can reach us at support@jijilabsdigital.com.

This policy explains what information CIRCLE handles, why, who helps us process it, how long we keep it and the choices you have.

2. Information we collect

2.1 Account information

What we don’t collect: CIRCLE never asks for your phone number, and the app requests only the “full name” scope from Apple, not your email address. If Apple ever provides an email or private relay address, we do not store it. CIRCLE does not access or upload your contacts.

2.2 Messages, group chats and media

Messages in one-to-one and group chats, and the photos, videos and voice messages you send in them, are end-to-end encrypted using the Matrix protocol’s Olm and Megolm encryption. They are encrypted on your device and can only be decrypted on the devices of the people in the chat. Our server stores the encrypted content and the routing metadata it needs to deliver messages, namely:

• which accounts are in which chat, and chat requests (invitations) between accounts;
• timestamps of messages and events;
• your devices’ public encryption keys;
• delivery and read state.

We cannot read the content of your messages or media; the app encrypts each photo, video and voice message before upload. A group’s name and group photo are stored as chat settings and are not end-to-end encrypted, so avoid putting sensitive information in them.

If you turn on encrypted key backup, a copy of your message keys is stored on our server in encrypted form, protected by a recovery key that only you hold. We never receive your recovery key and cannot recover it for you.

2.3 Voice and video calls

One-to-one calls use WebRTC. Call signalling (the messages that set up, answer and end a call) is end-to-end encrypted and sent through our server as encrypted messages that are deleted once delivered. Call audio and video travel peer to peer and are encrypted (DTLS-SRTP) between the two iPhones. To connect a call, your device contacts STUN/TURN servers operated by Cloudflare. When a direct connection isn’t possible, the encrypted media is relayed by Cloudflare’s TURN service, which cannot decrypt it. As with any peer-to-peer call, the other person’s device can see your IP address during a call. We never record calls. CIRCLE uses your microphone for calls and for voice messages you record, and your camera for video calls. Who can call you is controlled by your Circle settings.

2.4 Vibe, Soundtrack and Halos

These features, including the key needed to view your Halo photos, are stored on our server as profile data. They are not end-to-end encrypted, and they are visible to signed-in people who share a chat with you.

• Vibe: the emoji and short status you set.
• Soundtrack: off unless you turn it on. When on, it shares only the title and artist of the Apple Music song you are playing. Turn it off at any time to stop sharing. In Sync uses this same information to show when you and a friend are playing the same song.
• Halos: short photo or text updates that disappear from CIRCLE after 24 hours. Halo photos are encrypted on your iPhone before they are uploaded, but the key needed to view them is kept with your Halo in your profile data, so Halos are not end-to-end encrypted. The encrypted photo files are deleted from our server when you delete your account. When someone views your Halo, CIRCLE can show you that they’ve seen it, but only if their Circle settings share read receipts with you.

2.5 Read receipts and typing indicators

Read receipts and typing indicators are shared with other people according to your Circle settings (Inner, Friends, Others). You control which Circles receive them, and you can switch read receipts off completely in Settings.

2.6 Push notifications

If you allow notifications, your iPhone gives us a push token, which our server stores so it can ask Apple Push Notification service (APNs) to deliver notifications. When enabled, Apple’s push service and our push gateway only ever receive a room and event identifier, never message content. Notifications currently show a generic alert (“New message”). When we add on-device notification decryption, message previews will be created on your iPhone. Signing out removes this device’s push registration.

2.7 Safety data: blocks and reports

When you block someone, we store that block so we can enforce it. When you report an account or message, we store the report: the reporter, the reported account, the related chat (room) and message (event) identifiers, the reason and any optional note. We use this information to review reports and enforce our Terms of Use and Community Guidelines. Because messages are end-to-end encrypted, a report does not by itself give us the content of your chats.

2.8 Technical logs

Like any online service, our servers and network provider record IP addresses and request logs (for example, time, requested endpoint and response status). We use them for security, abuse prevention and troubleshooting, and keep them for a short period of up to 30 days. IP addresses are also used in short-lived rate-limit counters that are deleted automatically.

3. On-device processing

• “Catch up” summaries and reply suggestions run entirely on your iPhone using Apple’s on-device model (on supported devices). Your messages are not sent to us or to any third party for this.
• Reply Later reminders are stored on your device.
• Warmth, the indicator of how recently you’ve talked with someone, is calculated on your device.

4. How we use information

We use the information above only to:

• create and operate your account and deliver your messages (performance of our contract with you);
• keep CIRCLE safe and secure, prevent spam and abuse, and enforce our rules (our legitimate interests and legal obligations);
• show optional profile features such as Soundtrack that you choose to turn on (your choice, which you can withdraw at any time);
• respond to your requests and comply with the law.

We do not use your information for advertising, profiling or training AI models.

5. Infrastructure and service providers

• PT JIJI LABS DIGITAL operates the CIRCLE messaging servers in Indonesia.
• Cloudflare, Inc. provides networking (including secure connections to our servers and protection against attacks), the edge compute that runs our identity service, and the database that stores account records (Apple identifier, handle, display name, blocks and reports), and the STUN/TURN servers used to connect calls (TURN relays encrypted call media when a direct connection isn’t possible and cannot decrypt it). Cloudflare operates a global network, so some of this processing may take place outside Indonesia under Cloudflare’s data protection commitments.
• Apple provides Sign in with Apple, Apple Push Notification service (which receives only event identifiers, never message content, as described in section 2.6), the on-device model used for Catch up and reply suggestions, and Apple Music for Soundtrack if you turn it on.

We don’t share your personal data with anyone else, except where required by law (for example, a valid legal order) or to protect the safety of people. Where the law permits, we will tell you about such requests.

6. No ads, no tracking, no selling

CIRCLE contains no advertising and no advertising or analytics SDKs. We do not track you across other companies’ apps or websites, and we do not sell your personal data or share it for advertising.

7. Retention

• Account and profile data is kept while your account exists.
• Encrypted messages are kept on our server so they can be delivered and synced to your devices, until your account is deleted.
• Call signalling messages are deleted from our server once delivered. Call audio and video are never stored.
• Halos disappear from CIRCLE after 24 hours. Their encrypted photo files are deleted from our server when you delete your account.
• Technical logs are kept for up to 30 days.
• Reports may be kept after the related account is deleted where needed for safety, to prevent repeat abuse, or to meet legal obligations.

8. Deleting your account

You can delete your account at any time in the app: Settings → Delete account. This erases your account, @handle and profile (including Vibe, Soundtrack and Halos, and the encrypted Halo photo files), deactivates your Matrix messaging account and revokes CIRCLE’s Sign in with Apple authorization.

Please note: copies of encrypted messages that were already delivered remain on the devices of the people you talked with, as with any messaging service. Reports may be retained as described above. You can also email support@jijilabsdigital.com to request deletion or ask questions.

9. Security

We protect data with end-to-end encryption for chats and calls, encryption in transit for all connections, access controls and rate limits. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a personal data breach where the law requires.

10. Children

CIRCLE is not directed to children under 13. You must be at least 13 years old to use CIRCLE, or older if the law where you live requires a higher minimum age. If we learn that we have collected personal data from a child below the required age, we will delete the account. If you believe this has happened, contact support@jijilabsdigital.com.

11. Your rights

Depending on where you live, including under the EU and UK GDPR, US state privacy laws such as the CCPA, and Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data (you can edit your display name and handle in the app);
• delete your data (see section 8);
• object to or restrict certain processing, and withdraw consent where we rely on it;
• not be discriminated against for exercising your rights.

We do not sell or “share” personal data as those terms are defined under US state laws. To exercise your rights, email support@jijilabsdigital.com from any address and include your @handle. We may need to confirm that the account is yours, for example by asking you to send a message from within the app. We respond within the time required by applicable law. You also have the right to complain to your local data protection authority.

12. Changes to this policy

We may update this policy as CIRCLE evolves. We will change the “Last updated” date above and, for significant changes, let you know in the app before they take effect.

13. Contact us

PT JIJI LABS DIGITAL
Kabupaten Karanganyar, Jawa Tengah, Indonesia
Email: support@jijilabsdigital.com