Privacy Policy

Last updated 24 December 2025

Data controller

The data controller is KreisViereck UG (haftungsbeschränkt), c/o PBC Center, Großbeerenstraße 2-10, 12107 Berlin, Germany. Contact: contact@circlesquare.app.

Why we process personal data

We process personal data to:

• provide our platform, including accounts, bookings and tournaments
• process payments
• communicate with you
• run analytics and improve the product
• protect the platform through security and fraud prevention

Categories of data

• Account data: name, email, username, profile picture, language
• Usage data: app and web usage, device information, log files
• Booking and event data
• Communication data: support, email, chat
• Payment-related data: invoice data and payment status – we never store full card details
• Location data: only with active use of location features
• Marketing data: only with explicit opt-in

Legal bases

• Contract performance: registration, bookings, payments, transactional emails
• Legitimate interest: platform security, error analysis, product improvement, fraud prevention
• Consent: newsletter, marketing, location access, optional analytics
• Legal obligation: tax and commercial retention requirements

Hosting

Our hosting infrastructure is Amazon Web Services (AWS) and Firebase (Google Cloud). These providers process data solely as our processors.

Analytics

We use Firebase Analytics, Mixpanel and Smartlook (session recording). IP addresses are anonymised. There is no covert monitoring. These tools are used only to improve user experience.

Payments

Payments are processed via Stripe, PayPal, Apple Pay and Google Pay. We never store full payment card data. These providers act as independent controllers. See stripe.com/privacy and paypal.com/privacy.

Communication

We communicate by email, in-app and web chat, Superchat, and WhatsApp (only when you initiate contact).

Newsletter

Newsletters are sent via Brevo, with opt-in and double opt-in only. You can unsubscribe at any time.

Login

You can sign in with Apple Sign-In and Google Sign-In. We only receive the data necessary for authentication.

Location data

Location data is processed only with consent, only while the relevant features are active, and is never stored permanently.

Data sharing

We share data only with processors (hosting, payments), with event organisers (participant lists for events you join), or where legally required. We never sell data.

International transfers

Some providers are based in the US. Transfers rely on EU Standard Contractual Clauses and additional safeguards.

Retention

• Account data until account deletion
• Booking data for the applicable legal retention periods
• Marketing data until consent is withdrawn
• Logs and analytics for a limited time

Your rights

You have the right to access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent at any time. Contact contact@circlesquare.app.

You also have the right to lodge a complaint with a data protection supervisory authority. In the UK that is the Information Commissioner's Office: ico.org.uk.

Updates

We may update this policy. The current version is always available on our platform.