Privacy Policy

Effective Date: July 2, 2026

Our commitment: clsr is built on the principle of “intention over attention.” We collect only what’s necessary to provide you with a meaningful, private social experience. Your data belongs to you.

1. Introduction

Welcome to clsr (“closer”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. clsr is a privacy-first social network designed for meaningful connections with your inner circles.

Please read this privacy policy carefully. By using clsr, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Data Type	Purpose	Required
Email address	Account creation and authentication	Yes
Name	Display to your friends	Yes
Nickname	Public display identifier	Yes
Date of birth	Age verification (16+ requirement)	Yes
Profile photo	Visual identification	No
Cover photo	Profile personalization	No
Bio	Profile description	No

2.2 Content You Create

Posts (Moments): Text, photos, and videos you share
Messages: Text, images, videos, and voice messages sent in chats
Activities: Events you create or RSVP to
Circles: Groups you create to organize friends
Clubs: Interest communities you create, join, or post in (club chat messages auto-delete after 24 hours)

2.3 Information Collected Automatically

Device information: Device type, operating system, and unique device identifiers
Push notification tokens: To deliver notifications to your device
Location data: Only when you choose to add a location to an activity (not tracked continuously)

3. How We Use Your Information

We use your information to:

Provide and maintain the clsr service
Enable you to connect with friends and share content
Send push notifications you’ve enabled (messages, activities, posts from friends)
Verify your identity and prevent fraud
Respond to your requests and provide customer support
Improve and develop new features
Comply with legal obligations

What we don’t do:

We don’t sell your personal data to third parties
We don’t use your data for targeted advertising
We don’t track your location continuously
We don’t analyze your content to build advertising profiles

4. Information Sharing

4.1 With Other Users

Based on your privacy settings, other users may see:

Friends: Your name, nickname, avatar, bio, and content you share with them
Non-friends: Only your nickname (when they message you by code)
Date of birth: Visible only to friends if you choose to share it

4.2 Service Providers

We use the following third-party services:

Supabase: Database, authentication, and file storage
Expo/EAS: App distribution and push notifications
Google Maps / Apple Maps: Location selection for activities

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests from public authorities.

5. Data Security

We implement appropriate security measures to protect your information:

All data is encrypted in transit using TLS/SSL
Sensitive data is encrypted at rest
Authentication tokens are securely stored on your device
Row-level security policies restrict database access to authorized users only

6. Data Retention

We retain your data for as long as your account is active. When you delete your account:

Your profile and personal information are permanently deleted
Your posts, messages, and media are permanently deleted
Your friendships and circles are removed
Your activities and RSVPs are deleted

Some information may be retained in backups for up to 30 days after deletion.

To prevent fraud and abuse of our paid unique-code change feature (for example, deleting and recreating an account to obtain a new unique code for free), after your account is deleted we retain a one-way, salted hash of your email address together with your last unique code. This record is pseudonymized: it contains no readable personal information, cannot be reversed to identify or contact you, and is not used for any other purpose.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

Access your personal data through your profile
Update or correct your information
Delete your account and all associated data
Control who sees your content through Circles and visibility settings
Block users from contacting you

7.2 Notification Preferences

You can control push notifications for:

New posts from friends
Messages
Activity invitations and updates

7.3 Account Deletion

You can delete your account at any time through Settings > Account > Delete Account. This action is permanent and cannot be undone.

If you no longer have access to the app, you can also request deletion at clsrapp.com/delete-account or by emailing privacy@clsrapp.com.

8. Children’s Privacy

clsr is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete the account and associated data promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@clsrapp.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the new Privacy Policy in the app
Updating the “Effective Date” at the top
Sending a push notification for significant changes

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@clsrapp.com
Subject: Privacy Policy Inquiry

12. Additional Information for California Residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), California residents have additional rights:

Right to know: What personal information is collected, used, shared, or disclosed
Right to correct: Request correction of inaccurate personal information
Right to delete: Request deletion of your personal information
Right to opt out: Opt out of the sale or sharing of personal information
Right to limit: Limit the use and disclosure of sensitive personal information (such as your date of birth and precise location) to what is necessary to provide the Service
Right to non-discrimination: No discrimination for exercising your privacy rights

Note: clsr does not sell or share personal information as defined by the CCPA/CPRA, and we only use sensitive personal information to provide the Service (for example, verifying your age and attaching a location you choose to an activity). To exercise any of these rights, contact us at privacy@clsrapp.com.

13. Additional Information for EU/EEA Residents

Under the General Data Protection Regulation (GDPR), we process your personal data only where we have a legal basis to do so. For UK residents, the same applies under the UK GDPR.

13.1 Legal Bases for Processing

Purpose	Data Used	Legal Basis (GDPR Art. 6)
Providing the core service (accounts, posts, messages, activities, clubs)	Account details, profile data, content you create	Performance of a contract (Art. 6(1)(b))
Age verification (16+ requirement)	Date of birth	Legal obligation and performance of a contract (Art. 6(1)(c), (b))
Push notifications	Push notification tokens, device information	Consent (Art. 6(1)(a)) — withdrawable in notification settings
Location on activities	Location data you choose to attach	Consent (Art. 6(1)(a))
Fraud and abuse prevention (including the post-deletion email hash)	Device information, hashed email, unique code	Legitimate interest (Art. 6(1)(f)) — keeping the Service safe and preventing abuse
Compliance with legal requests	Data relevant to the request	Legal obligation (Art. 6(1)(c))

13.2 Your Rights

EU/EEA and UK residents have the following rights:

Right of access: Request a copy of your personal data
Right to rectification: Correct inaccurate data
Right to erasure: Request deletion of your data
Right to data portability: Receive your data in a portable format
Right to object: Object to processing of your data
Right to withdraw consent: Withdraw consent at any time
Right to complain: Lodge a complaint with your local data protection supervisory authority

To exercise these rights, please contact us at privacy@clsrapp.com.

Note on erasure: To prevent fraud and abuse, after account deletion we retain a salted, one-way hash of your email address plus your last unique code. This pseudonymized record is kept under our legitimate interest in preventing abuse, cannot be reversed to identify you, and is used solely to enforce paid unique-code changes.