Privacy Policy

GlobalFlowX Limited (company number 16987194, registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ) is the controller for the personal data it processes through Honey Circle.

Privacy contact: support@myhoneycircle.com.

Whop processes payment and membership data through its own platform and maintains its own terms and privacy policy. The precise data-protection roles between GlobalFlowX Limited and Whop follow the contractual terms in force between them; we do not describe Whop here as processor or controller beyond what those terms establish. Please review Whop's own privacy documentation for how it handles your payment data.

Account data

• email address and account identifier;
• display name, where you provide one;
• profile information received from Google when you sign in with Google (identifier, email, name and, where provided, profile picture);
• account status, plan field and administrative notes used to operate the service.

Usage and technical data

• IP address, browser and device information contained in requests;
• server and application logs, including error reports;
• session and authentication tokens;
• security and fraud-prevention signals.

Service content

• links (URLs) you submit and the detected source platform;
• extraction history and status, including failures and error messages;
• extracted recipes, saved recipes, lists, notes and edits you make;
• translations and exports you generate;
• a cached copy of extraction results keyed by URL, used to avoid re-processing the same link.

Support, billing and preferences

• messages you send us and the content of support or complaint forms;
• membership and payment identifiers and status received from Whop;
• cookie choices, consent records and communication preferences.

Checkout and card processing take place on Whop's platform. Honey Circle does not operate its own card form and does not store card numbers or security codes in its database.

From Whop we may receive membership and transaction metadata such as membership identifier, plan, status, renewal dates, payment identifiers, amounts, currency and the email associated with the purchase. Where a future integration would cause us to receive additional payment information, this policy will be updated before that happens.

• to create and administer your account;
• to provide the service, process submitted links and generate recipes;
• to store your cookbook, lists and history;
• to provide support and respond to complaints;
• to manage the subscription, access and entitlements;
• to prevent fraud, abuse and unauthorised access, and to protect the platform;
• to comply with legal obligations, including accounting and responses to lawful requests;
• to send transactional communications (account, billing, security and service notices);
• to analyse aggregate usage and reliability, where an appropriate legal basis applies;
• to send marketing only where we have an appropriate legal basis and a working opt-out.

• Performance of a contract: account creation, providing extractions, storing your recipes, managing the subscription and providing support.
• Legal obligation: accounting and tax records, responses to lawful requests, handling rights requests.
• Legitimate interests: security, fraud prevention, service reliability and protecting our rights, balanced against your interests.
• Consent: non-essential cookies and similar technologies, and optional marketing communications. Consent can be withdrawn at any time.

We share data only with providers that are actually part of the service:

• Whop — checkout, membership and payment processing.
• Supabase — database, authentication and account storage.
• Lovable — application hosting, delivery and error reporting for the web application.
• Google — optional sign-in with Google (authentication only).
• Lovable AI Gateway (Google Gemini models) — automated analysis of submitted content to generate structured recipes and translations.
• PostReef — retrieval and transcription of publicly accessible video content used for extraction.

We do not currently operate third-party advertising pixels or marketing trackers. If that changes, this policy and the Cookie Policy will be updated and, where required, consent will be requested first.

• Submitted URLs are stored and linked to your account as part of your extraction history.
• Extraction results are also stored in a shared technical cache keyed by the URL, so the same public link does not have to be processed twice. The cache is not accessible to other users through the application.
• Submitted URLs and the publicly available content at those URLs are sent to the AI and extraction providers listed above solely to produce your result.
• We do not use your links, recipes or private content to train AI models, and we do not use them for advertising.
• Extractions are private to your account by default and are not published publicly.
• You can delete individual recipes and history entries in the app, or request deletion of your account and data at support@myhoneycircle.com.

• Account data: kept while the account exists, then deleted within 30 days of account deletion, except where law requires longer.
• Recipes, lists and notes: kept until you delete them or your account is deleted.
• Extraction history and submitted URLs: kept until you delete the entry or the account.
• Support tickets: kept for up to 24 months after resolution for quality and dispute purposes.
• Legal acceptance records: kept for as long as needed to evidence the contract, including after account deletion where the law allows.
• Technical extraction cache: retained while it remains useful for service performance and refreshed or purged periodically; it can be purged for a specific URL on request.
• Logs and security records: generally up to 12 months, longer only where needed to investigate abuse or comply with law.
• Support and complaint records: up to 24 months after the case is closed.
• Billing and accounting records: retained for the period required by tax and company law (generally 6 years in the United Kingdom).
• Fraud and abuse records: retained as long as necessary to protect the service and establish or defend legal claims.
• Consent and legal acceptance records: retained for the life of the account plus the applicable limitation period.

• access to your personal data;
• correction of inaccurate data;
• deletion, where applicable;
• restriction of processing;
• objection to processing based on legitimate interests;
• data portability;
• withdrawal of consent at any time, without affecting prior lawful processing;
• complaint to your supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk).

To exercise a right, email support@myhoneycircle.com or use the privacy section of the support page. We aim to respond within one month.

Our providers may process data outside the United Kingdom or your country of residence, including in the United States. Where that happens, transfers rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or an adequacy decision, as offered by the provider concerned. You can request further information at support@myhoneycircle.com.

• encryption in transit (HTTPS) between your browser and our services;
• authentication managed by our identity provider, with row-level access rules so account data is only readable by the account owner or authorised administrators;
• secrets and service credentials stored outside the application code;
• logging and monitoring of errors and suspicious activity.

No online service can guarantee absolute security. We do not promise that our measures will prevent every possible incident.

Honey Circle is intended only for individuals who are at least 18 years old and have the legal capacity to enter into a contract in their jurisdiction. We do not knowingly collect personal data from anyone under that age. If you believe a minor has provided personal data, contact support@myhoneycircle.com and we will delete it.

You can request deletion from Profile → Account → Delete account inside the app, or by emailing support@myhoneycircle.com.

Deleting your Honey Circle account does not automatically cancel your Whop subscription. Cancel your subscription separately through Manage Billing.

Privacy requests can be submitted through the support and complaints form (category "Privacy") or by email to support@myhoneycircle.com. Each submission receives a reference number.

We may update this policy. The version and "Last Updated" date at the top will change, and material changes will be notified before they take effect.