1. Scope and privacy contact
This Privacy Policy applies to the Circlst website, installable web application, account features, shared lists, and related emails. Circlst is operated by Marlon Dizon in the Philippines and acts as the personal information controller for information processed through the service.
For privacy questions or requests, email lonpdzon@gmail.com. Please do not include passwords, authentication codes, or unnecessary sensitive information in your message.
2. Information we collect
| Category | Examples | How it is collected |
|---|---|---|
| Account information | Name, email address, account identifier, email-verification status, sign-in provider, and acceptance of the legal terms. | Provided during registration or received from Google when you choose Google sign-in. |
| Profile information | Display name and optional profile photo. | Provided or updated by you. A Google profile photo may initially be supplied by Google. |
| Workspace and list content | Lists, items, amounts, notes, assignments, due dates, reminders, recurrence settings, files, expense participants, and settlements. | Created by you or another member of a list you join. |
| Collaboration information | List membership, roles, invitation email addresses, invitation status, notifications, and activity history. | Generated when people share, edit, assign, invite, accept, decline, or otherwise interact with a list. |
| Technical and security information | IP address, browser or device details, authentication events, request logs, error information, and anti-bot challenge results. | Collected automatically by Circlst and its infrastructure and security providers. |
| Local application data | Authentication session data, cached lists, queued offline changes, and synchronization conflicts. | Stored on your browser or device when you sign in or use offline features. |
Circlst does not intentionally request payment-card numbers, government identifiers, health information, or other sensitive personal information. Avoid placing unnecessary sensitive information in lists, notes, or uploaded files.
3. How and why we use information
Information is processed only when reasonably necessary to:
- Create, authenticate, and secure your account.
- Provide workspaces, lists, calculations, file storage, offline synchronization, reminders, and activity history.
- Share information with the list members you authorize and enforce owner, editor, and viewer permissions.
- Send account verification, password recovery, password-change, invitation, and essential service emails.
- Detect abuse, troubleshoot failures, protect users, and maintain service reliability.
- Comply with applicable legal obligations and respond to valid legal requests.
The legal bases may include performing the service you request, your consent where required, legitimate interests in securing and improving Circlst, and compliance with law. Circlst does not sell personal information, serve third-party advertising, or use list content for advertising profiles. It does not make legal or similarly significant decisions about you through automated processing.
5. Browser storage, offline use, and cookies
Circlst stores authentication information in browser storage so you remain signed in. Its offline feature uses IndexedDB and service-worker caches to keep the application shell, previously loaded content, and pending changes on your device. Anyone with access to an unlocked device or browser profile may be able to access locally stored information.
You can remove local information by logging out and clearing the site’s storage through your browser. Disabling browser storage, JavaScript, or required cookies may prevent authentication or offline features from working. Circlst does not currently use advertising cookies or third-party behavioral analytics; Cloudflare Turnstile may use device signals to prevent abuse.
6. Retention and account deletion
Account, profile, workspace, and list information is generally retained while your account remains active or while needed to provide a shared list. Pending invitations expire after seven days, although related security and delivery logs may be retained for a limited operational period.
You can permanently delete your account from Profile & account. Deletion removes your profile, memberships, workspace, and every list you own, including their items and file references. Lists owned by other people remain, while references to your deleted profile are removed or anonymized where needed to preserve collaborators’ records.
Deletion from active systems may not immediately remove limited copies from encrypted backups, provider logs, fraud-prevention records, or records that must be retained by law. Those copies are isolated and removed or overwritten according to applicable retention cycles.
7. How we protect information
Circlst uses authentication, verified-email flows, encrypted network connections, private list-file storage, database Row Level Security, role-based list access, hashed invitation tokens, and server-side secret management. Access is restricted according to list membership and role.
No internet service can guarantee absolute security. Protect your password and device, avoid reusing passwords, review list members before sharing sensitive content, and contact us promptly if you suspect unauthorized access.
8. Your rights and choices
Depending on applicable law, including the Philippine Data Privacy Act of 2012, you may have rights to be informed, access your personal information, object to certain processing, correct inaccurate information, request erasure or blocking, obtain portable data where applicable, claim damages, and file a complaint.
You can update your name and photo, change an email-account password, leave shared lists where permitted, export available list data, or delete your account through the application. For other requests, email lonpdzon@gmail.com. We may need to verify your identity and clarify the scope of the request before acting.
Learn more from the Philippine National Privacy Commission’s guide to data-subject rights (opens in a new tab). You may contact or file a complaint with the Commission if you believe your privacy rights have been violated.
9. Minimum age
Circlst is intended for people aged 18 and over, and is not directed to children or younger teenagers. Accounts are not knowingly created for anyone under 18. If you believe someone under 18 provided personal information to Circlst, contact us at lonpdzon@gmail.com so the account and its information can be reviewed and removed.
10. Changes to this policy
This policy may be updated when Circlst’s features, providers, or legal obligations change. The updated effective date will appear at the top. Material changes will be communicated through the application, email, or another reasonable method before they take effect when required.