Privacy Policy
Circle Ledger is built for savings groups — njangis, tontines, welfare associations, and family circles. The financial records your group creates in Circle Ledger are sensitive. This policy explains what we collect, what we do with it, and what rights you have.
What we collect
When you create an account, we collect your full name, phone number, email address, and a hashed password. We never store your password in plain text.
When you use the app, we store the records you create: groups, members, contribution events, payment submissions, approvals, rotation records, and fund usage entries. This is the core function of the service.
We do not collect payment card information. Circle Ledger is a record-keeping tool, not a payment processor. All money transfers happen outside our platform through MTN Mobile Money, Orange Money, or other channels your group uses.
How we use your information
- To operate and provide the Circle Ledger service
- To authenticate your identity and protect your account
- To display your group's financial records to group members
- To send transactional notifications (payment approvals, account creation)
Who can see your group's records
Financial records — payment history, group balance, fund usage — are visible to all members of that specific group. This is the core purpose of the service. Members of other groups cannot see your group's records.
Group admins can see all records within their group. Regular members can see their own contribution history and the group's overall balance.
Data sharing
We do not sell your data. We do not share it with advertisers. We do not use it to train machine learning models. The only third parties who may access your data are infrastructure providers (Supabase for database hosting, Netlify for web hosting) who operate under strict data processing agreements.
Data retention and export
Your data is retained for as long as your group account is active. You can export your full group history at any time from within the app. If you close your account, we retain records for 30 days before permanent deletion to allow for recovery in case of accidental closure.
Security
Passwords are hashed using pgcrypto before storage — we cannot see your password. Sessions are managed via secure, httpOnly cookies. All data in transit is encrypted via HTTPS. Our database and functions are hosted on Supabase with row-level security policies enforced at the database level.
Your rights
You have the right to access, correct, or delete your personal data. You can export your group's financial history at any time. To exercise these rights or ask any questions about your data, contact us at hellocircleledger@gmail.com.
Changes to this policy
If we make significant changes to this policy, we will notify you by email or through the app before the changes take effect.
Contact
Privacy questions: hellocircleledger@gmail.com