Privacy Policy

Last updated: April 2026  ·  Applies to CircuitLog iOS app and circuitlog.app

Who we are

Data controller: 23One Ltd
Contact: hello@circuitlog.app
Website: circuitlog.app

What data we collect

Account data

• Email address (used for authentication and account management)
• Display name (chosen by you, shown to other users)
• Password (stored securely by Firebase Authentication — we never see it in plaintext)

App activity data

• Circuits you mark as visited
• Check-in records including circuit, timestamp, and optional note
• Badge achievements earned
• Photo spots you submit
• Photos you upload to photo spots

Technical data

• Device type and iOS version (collected automatically by Firebase)
• App crash reports and performance data (Firebase Crashlytics)
• Basic usage analytics (Firebase Analytics)

How we use your data

• To provide the app's core features — tracking visits, check-ins, badges, leaderboard
• To show your display name and check-in activity to other users in the Live Hub
• To send you a verification email when you register
• To improve the app through anonymised crash and usage data
• To respond to support requests

We do not use your data for advertising. We do not sell your data to any third party.

Legal basis for processing (UK GDPR)

• Contract — processing your account data is necessary to provide the service you signed up for
• Legitimate interests — anonymised crash and analytics data helps us maintain and improve the app
• Consent — where you choose to share content publicly (check-ins, photo spots)

Third-party services

CircuitLog uses the following third-party services. Each has their own privacy policy:

• Firebase (Google LLC) — authentication, database, storage, analytics, and crash reporting. Data may be processed in the US under Google's standard contractual clauses. Firebase Privacy Policy
• Instagram / Meta — only if you choose to share a story card. We pass image data to the Instagram app on your device using their official Stories API. We do not receive any data back from Instagram.
• Apple App Store — handles all payments for Pro subscriptions. We do not store payment card details.

Data retention

• Your account and activity data is retained for as long as your account is active
• If you delete your account, all personal data is permanently deleted within 30 days
• Anonymised analytics data may be retained longer as it cannot be linked back to you

Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your account and personal data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Restrict — ask us to limit how we use your data

To exercise any of these rights, email hello@circuitlog.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Account deletion

You can delete your account directly within the app via Profile → Delete Account. This permanently removes all your personal data from our systems within 30 days.

Children

CircuitLog is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We'll notify you of significant changes via the app or by email. The date at the top of this page shows when it was last updated.

Contact

For any privacy-related questions: hello@circuitlog.app