Privacy Policy

1. Privacy promise

Inner Circle is designed around private, unsearchable profiles and deliberate sharing. We do not sell personal information, run behaviorally targeted advertising, or create a public people directory.

This policy describes information handled by Inner Circle Social and the Together Platform services that support it.

2. Information you provide

• Account information such as your name, email address, password credential handled by our authentication provider, profile photo, optional birthday, time zone, and profile details.
• Posts, comments, reactions, messages, circles, events, travel plans, collections, photos, videos, files, bug reports, and support requests.
• People and audience choices, invitations, notification settings, blocks, reports, and other privacy preferences.
• Typed signatures and acceptance records when you sign an alpha agreement or accept a policy.

3. Information created through use

• Session and device information, account activity, security events, storage totals, and operational logs.
• Page paths, anonymous browser-session identifiers, referring pages, and coarse city, region, or country information when available. We do not store raw IP addresses in website analytics.
• One-way IP hashes may be retained in security or electronic-signature records to detect abuse and establish an audit trail.
• Media metadata such as file type, size, upload time, ownership, album, and processing status.

4. How information is used

• Provide accounts, circles, messaging, events, media, travel, collections, and other requested features.
• Apply your sharing choices and prevent people without access from learning that private content exists.
• Authenticate accounts, protect sessions, investigate abuse, prevent fraud, respond to support, and maintain audit logs.
• Measure reliability and improve the product using limited operational analytics.
• Meet legal obligations and enforce the Terms and safety rules.

5. Sharing and disclosure

Content is disclosed to the people or circles you choose. Service providers may process the minimum information reasonably needed for authentication, hosting, databases, file storage, security, analytics, and future email delivery. They may use it only to provide those services to us.

We may disclose information when required by valid legal process, to protect a person from serious harm, to investigate fraud or abuse, or as part of a business transaction subject to appropriate confidentiality and notice where required.

6. Administrator access

Authorized platform administrators can look up registered accounts and identify the account owner using the name and email supplied at registration. Routine directories do not show passwords, passkey secrets, authentication tokens, raw IP addresses, or private content.

Limited access may expand for a specific support, security, safety, or legal investigation. Administrative access should be role-restricted, logged, and reviewed.

7. Retention and deletion

We keep account information while an account is active and for limited periods afterward when needed for backups, fraud prevention, security, disputes, or law. Deleted media may remain in a short recovery window before permanent removal. Signed agreements and related audit records may be retained for the applicable limitation period.

You may request a copy of your account information or permanent deletion through account settings. Some records may be retained when legally required or necessary to establish, exercise, or defend legal claims.

8. Your choices and rights

• Review and update profile details and privacy choices.
• Choose one or several circles for content, or keep it private.
• Leave circles, block members, report content, and manage signed-in devices.
• Request access, correction, download, or deletion of account information.
• Contact us to exercise rights provided by applicable state, federal, or international law. We will verify identity and will not discriminate for a valid privacy request.

9. Security

We use access controls, secure sessions, encrypted transport, protected file delivery, password hashing by the authentication provider, temporary signed file links, and administrator restrictions. No online service can promise absolute security. Please use a unique password, passkey, and multi-factor authentication when available.

10. International use and age

Infrastructure providers may process information in the United States or other locations where they operate, subject to contractual and legal safeguards. The alpha is for adults 18 and older and is not directed to children. We do not knowingly create alpha accounts for children.

11. Changes and contact

We will date material changes and request renewed acceptance when appropriate. Privacy questions and requests can be submitted through account settings or in-app Support. Before broad public launch, a dedicated privacy email and legal mailing address must be added here.