Privacy Policy
Effective Date: February 11, 2026 | Last Updated: February 11, 2026
This Privacy Policy ("Policy") is issued by ProfileCircle ("Company," "we," "us," or "our"), the operator of the website located at www.profilecircle.com (the "Platform"). This Policy describes the types of personal information we collect, how we use and protect that information, the choices available to you regarding our use of your information, and the steps you may take to access, correct, or delete your personal data. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.
1. Definitions
For the purposes of this Policy, the following definitions shall apply:
1.1 "Personal Data" means any information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual.
1.2 "User" or "you" means any individual who accesses or uses the Platform, whether registered or unregistered.
1.3 "Assessment" means any of the self-evaluation tools offered on the Platform, including but not limited to Personality, Affection, Ambition, Decision, Empathy, Optimism, This Or That, Numerology, and Zodiac assessments.
1.4 "Circle" means the categorized relationship groups within the Platform, specifically Family, Friends, and Colleagues.
1.5 "Compatibility Score" means the calculated match percentage between two Users who have completed one or more Assessments.
1.6 "Privacy Settings" means the user-configurable visibility controls that govern who may view a User's information on the Platform.
2. Information We Collect
2.1 Information Provided at Registration
To create an account on the Platform, you are required to provide the following Personal Data:
2.1.1 First name and last name;
2.1.2 Email address;
2.1.3 Password (stored exclusively in cryptographically hashed form; the Company does not retain plaintext passwords);
2.1.4 Date of birth (used for age verification pursuant to Section 9 and for Zodiac and Numerology Assessments); and
2.1.5 Gender (Male or Female).
2.2 Voluntary Profile Information
Following registration, you may, at your sole discretion, provide additional information to enhance your profile. Such information is entirely optional and may include:
2.2.1 Profile photograph;
2.2.2 Location (city or region);
2.2.3 Personal status or biographical statement;
2.2.4 Family member names (father, mother, spouse, children, siblings);
2.2.5 Educational history (institution, degree, field of study, dates of attendance);
2.2.6 Employment history (employer, position, location, dates of employment); and
2.2.7 Places of residence (city, state, country, dates of residence).
2.3 Assessment Data
The Platform offers nine (9) voluntary Assessments — Personality, Affection, Ambition, Decision, Empathy, Optimism, This Or That, Numerology, and Zodiac — designed to facilitate self-understanding and interpersonal compatibility analysis. When you participate in an Assessment, we collect and store your answers or selections, a calculated result code or type designation, and a personalized description derived from your responses. Certain Assessments, such as Numerology and Zodiac, use your name and date of birth to compute results rather than questionnaire responses. All Assessment participation is voluntary, and no data is collected until you choose to begin an Assessment.
2.4 User-Generated Content
When you utilize the Platform's communication features, we collect and store the content of direct messages you send and receive, including text messages, voice recordings, images, videos, and documents transmitted through the Platform's messaging system.
2.5 Connection Data
We collect and store information relating to your social connections on the Platform, including:
2.5.1 Family relationship requests and their acceptance status;
2.5.2 Friendship requests and their acceptance status; and
2.5.3 Colleague relationship requests and their acceptance status.
2.6 Compatibility Data
Where both you and a connected User have completed one or more Assessments, the Platform calculates and stores Compatibility Scores, including match percentages, category-specific compatibility breakdowns, and compatibility level descriptions.
2.7 Automatically Collected Information
In the course of your use of the Platform, certain information is collected automatically, including:
2.7.1 Session data necessary to maintain your authenticated session;
2.7.2 Timestamp of your most recent login;
2.7.3 Online/offline status (for real-time messaging functionality);
2.7.4 Typing indicators (transient data used solely for real-time chat display and not permanently stored); and
2.7.5 Device type classification (mobile or desktop), used exclusively to serve the appropriate version of the Platform interface.
3. Purpose and Legal Basis for Processing
We process your Personal Data for the following purposes:
3.1 Account Administration. To create, authenticate, and maintain your account, including email verification and password reset functionality.
3.2 Profile Display. To render your profile visible to other Users in accordance with your Privacy Settings.
3.3 Assessment Processing. To calculate your Assessment results, generate personality type codes, and produce personalized descriptions.
3.4 Compatibility Analysis. To compute and display Compatibility Scores between you and your connected Users.
3.5 Communication Services. To facilitate the delivery of direct messages, track message delivery and read receipts, and display real-time typing indicators.
3.6 Notifications. To alert you of relevant activities on the Platform, including Assessment invitations from other Users.
3.7 Platform Optimization. To detect your device type and serve the appropriate interface version (mobile or desktop).
3.8 Transactional Email. To deliver email verification codes and password reset codes as necessary for account security.
We do not process your Personal Data for the purpose of targeted advertising. We do not sell, license, or otherwise monetize your Personal Data. We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on you, other than the voluntary Assessment features described herein.
4. User Privacy Controls
The Platform provides granular privacy controls that allow you to determine the visibility of your information. Through your Privacy Settings, you may configure the audience for each category of information to one of the following: Only Me, Family, Friends, Colleagues, Family & Friends, Friends & Colleagues, Family & Friends & Colleagues, or Everyone.
4.1 Profile Privacy
You may independently control the visibility of: your overall profile, profile photograph, introduction, family information, educational history, employment history, and places of residence.
4.2 Content Privacy
You may control the visibility of your photos, videos, and reels.
4.3 Relationship Privacy
You may control the visibility of your Family members list, Friends list, and Colleagues list.
4.4 Assessment and Score Privacy
You may independently set the visibility of each of the nine (9) Assessment results, their corresponding scores, and associated badges.
5. Cookies and Tracking Technologies
The Platform employs a strictly limited set of cookies that are technically necessary for the operation of the Platform:
5.1 Session Cookie. This cookie maintains your authenticated session and is transmitted exclusively over encrypted HTTPS connections. It expires when you close your browser or upon session timeout.
5.2 CSRF Cookie. This cookie provides protection against Cross-Site Request Forgery attacks and is a security measure required by the Platform's application framework. It is transmitted exclusively over encrypted HTTPS connections.
The Platform does not employ advertising cookies, analytics cookies, tracking cookies, or any cookies set by third-party domains. The Platform does not utilize Google Analytics, Facebook Pixel, or any comparable third-party tracking or analytics service.
6. Data Storage and Security
6.1 Storage Infrastructure
Your Personal Data is stored on dedicated server infrastructure under the Company's direct control. Structured data (including profiles, Assessment results, messages, and connection records) is stored in a PostgreSQL relational database. Uploaded media files (including photographs and voice recordings) are stored on the server's file system. Redis is used exclusively for background task queue management and operates entirely within the Company's server infrastructure.
6.2 Technical Security Measures
The Company implements the following technical safeguards to protect your Personal Data:
6.2.1 Encryption in Transit. All data transmitted between your device and the Platform is encrypted using SSL/TLS (HTTPS) protocols.
6.2.2 HTTP Strict Transport Security (HSTS). The Platform enforces HSTS with a duration of one (1) year, including subdomains, with preload enabled.
6.2.3 Password Security. All passwords are stored using industry-standard cryptographic hashing algorithms. Plaintext passwords are never stored or logged. Password validation policies enforce minimum length, complexity, and uniqueness requirements.
6.2.4 Cross-Site Request Forgery (CSRF) Protection. All form submissions and state-changing operations are protected against CSRF attacks.
6.2.5 Cross-Site Scripting (XSS) Protection. Browser-level XSS filtering is enabled across the Platform.
6.2.6 Content Type Sniffing Protection. The X-Content-Type-Options header is set to prevent MIME type sniffing attacks.
6.2.7 Clickjacking Protection. The X-Frame-Options header is configured to prevent the Platform from being embedded in unauthorized frames.
6.2.8 Secure Cookie Configuration. All cookies are restricted to HTTPS-only transmission and are configured with appropriate security attributes.
6.3 Real-Time Communication Security
The Platform's real-time messaging functionality operates over encrypted WebSocket Secure (WSS) connections. Message delivery status, read receipts, and typing indicators are transmitted exclusively through these encrypted channels.
7. Disclosure of Information
We disclose your Personal Data only in the following limited circumstances:
7.1 To Other Users. Your profile information, Assessment results, and Compatibility Scores are visible to other Users of the Platform strictly in accordance with your Privacy Settings. You retain full control over the audience for each category of information.
7.2 To Service Providers. We utilize a third-party email service provider solely for the purpose of sending transactional emails, specifically email verification codes and password reset codes. Only your email address and name are transmitted to this provider for this limited purpose.
7.3 As Required by Law. We may disclose your Personal Data if required to do so by applicable law, regulation, legal process, or governmental request.
7.4 To Protect Rights. We may disclose your Personal Data where we believe disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud or respond to a government request.
The Company does not sell, rent, lease, or trade your Personal Data to any third party for commercial purposes. The Company does not share your Personal Data with advertising networks, data brokers, or analytics providers.
8. Third-Party Services
The Platform utilizes a third-party email service provider solely for the delivery of transactional emails, specifically email verification codes and password reset codes. The only Personal Data transmitted to this provider is your email address and name, and such transmission occurs exclusively for the purpose of delivering these security-related communications. All other data processing and storage operations are performed entirely on infrastructure under the Company's direct control, and no Personal Data is transmitted to any other third party in the ordinary course of Platform operations.
The Platform does not integrate with any social authentication providers, payment processors, artificial intelligence or machine learning service providers, advertising networks, or third-party analytics platforms.
9. Children's Privacy
The Platform is not directed to, and is not intended for use by, individuals under the age of thirteen (13). In compliance with the Children's Online Privacy Protection Act ("COPPA"), the Company does not knowingly collect Personal Data from children under the age of thirteen (13).
The Platform requires all Users to provide their date of birth during registration, which is used to verify that the User meets the minimum age requirement. In the event that the Company becomes aware that a User is under the age of thirteen (13), the Company shall take prompt steps to terminate such User's account and permanently delete all associated Personal Data.
If you are a parent or guardian and believe that your child under the age of thirteen (13) has provided Personal Data to the Platform, please contact us immediately at the address provided in Section 14 so that we may take appropriate remedial action.
10. Data Retention
The Company retains your Personal Data in accordance with the following schedule:
10.1 Active Accounts. Personal Data associated with active accounts is retained for the duration of the account's existence.
10.2 Deactivated Accounts. Upon account deactivation, your profile and Personal Data are hidden from other Users but retained on the Company's servers. You may reactivate your account at any time by logging in with your credentials.
10.3 Deleted Accounts. Upon initiating account deletion, your profile and Personal Data are immediately hidden from other Users. A thirty (30) day grace period commences during which you may cancel the deletion by logging in. Upon expiration of the thirty (30) day grace period without cancellation, your account and all associated Personal Data shall be permanently and irreversibly deleted from the Company's servers.
10.4 Email Verification Codes. Verification codes expire and are invalidated twenty-four (24) hours after issuance.
10.5 Password Reset Codes. Reset codes expire and are invalidated thirty (30) minutes after issuance.
10.6 Transient Data. Typing indicators and online/offline status are transient in nature and are automatically overwritten in the ordinary course of Platform operations.
11. Your Rights
Subject to applicable law, you have the following rights with respect to your Personal Data:
11.1 Right of Access. You may access your Personal Data, Assessment results, and Compatibility Scores at any time through your profile and dashboard pages.
11.2 Right of Rectification. You may correct or update your profile information, including your location, family details, educational history, employment history, and places of residence at any time through the Platform's editing functionality. Certain registration fields, specifically your name and date of birth, cannot be modified after account creation. If you require a correction to these fields, please contact us at the address provided in Section 14.
11.3 Right to Control Visibility. You may modify your Privacy Settings at any time to control which categories of Users may access your information, as described in Section 4.
11.4 Right to Erasure of Content. You may delete messages and other content you have created through the Platform's interface.
11.5 Right to Account Deactivation. You may temporarily deactivate your account at any time, which shall render your profile hidden from other Users while preserving your data for future reactivation.
11.6 Right to Account Deletion. You may permanently delete your account and all associated Personal Data through the "Deactivate or Delete Account" page, subject to the thirty (30) day grace period described in Section 10.
11.7 Right to Manage Connections. You may accept, decline, or remove Family, Friend, and Colleague connections at any time.
To exercise any right not directly available through the Platform's interface, please contact us at the address provided in Section 14.
12. Assessment Invitations
Users may send invitations to their connections requesting that they complete specific Assessments. With respect to such invitations:
12.1 You will receive a notification indicating that a specific User has invited you to complete a specific Assessment.
12.2 Participation in any Assessment is entirely voluntary. You are under no obligation to accept any invitation.
12.3 The inviting User shall not gain access to your Assessment results or any associated Personal Data beyond what is permitted by your Privacy Settings.
13. Modifications to This Policy
The Company reserves the right to modify this Policy at any time, for any reason, at its sole discretion. In the event of material changes to this Policy:
13.1 The "Effective Date" and "Last Updated" date at the top of this Policy shall be revised to reflect the date of the most recent modification.
13.2 For material changes that substantively affect your rights or the manner in which your Personal Data is processed, we shall endeavor to provide notice through the Platform's notification system.
13.3 Your continued use of the Platform following the posting of any modifications to this Policy shall constitute your acknowledgment and acceptance of such modifications. If you do not agree with any modification, you must discontinue use of the Platform.
14. Contact Information
If you have any questions, concerns, complaints, or requests regarding this Privacy Policy, the Company's data practices, or the exercise of your rights under this Policy, you may contact us through the following channels:
Website: www.profilecircle.com
Email: admin@profilecircle.com
15. Governing Law
This Privacy Policy and any disputes arising out of or related to the practices described herein shall be governed by and construed in accordance with applicable law, without regard to conflict of law principles. Any legal action or proceeding arising under this Policy shall be brought exclusively in the courts of competent jurisdiction, and you hereby consent to the personal jurisdiction and venue therein.
16. Severability
If any provision of this Policy is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such invalidity, illegality, or unenforceability shall not affect any other provision of this Policy, and this Policy shall be construed as if such invalid, illegal, or unenforceable provision had never been contained herein.
17. Entire Agreement
This Privacy Policy, together with the Terms of Service, constitutes the entire agreement between you and the Company regarding the collection, use, and protection of your Personal Data in connection with your use of the Platform, and supersedes all prior and contemporaneous understandings, agreements, representations, and warranties, both written and oral, regarding such subject matter.