Privacy Policy

Weeklie is run by Ben Lucas, trading as Benlbuilds, based in the United Kingdom. We are the data controller for the personal data described here, which means we decide how it is used and are responsible for looking after it. You can contact us about anything in this policy at ben@blcm.co.uk.

Your account. When you sign in with Whop, we receive your Whop user ID, name, email address and profile picture. We store these with your plan, subscription status, Whop membership ID and your Weeklie settings (for example, which day your week starts). If you open Weeklieinside Whop, Whop also tells us which company you opened it from, so we can check you have access; we don't store that.

Your answers when you start. If you fill in the short questions when you first open Weeklie (what you want from your week, how your days usually run, and which calendar you use), we keep your answers to tailor your setup and to understand who Weeklie is useful for.

Your tasks. The tasks you add in Weeklie: their titles, order, whether they are done and, if you drag one onto the week, its time and the ID of the calendar event it created.

Connected calendars. If you connect Google Calendar or Outlook, we store the email address of that calendar account, the ID of its primary calendar, the IDs of the calendars you choose to show and the one new events go to, the colour we show it in, and the access and refresh tokens that let Weeklie reach it.

Activity. A short log of account events such as sign-ins, plan changes and settings changes, shown to you in your account.

Technical data. Like most websites, our hosting provider records basic request logs (such as IP address, browser type and the page requested) to keep the service running and secure.

Payments. Whop takes your payment and billing details at checkout. We receive confirmation that you have paid and your subscription status, but never your card details.

When you connect Google Calendar, Weeklie asks Google for permission to view and edit the events on your calendars (calendar.events), to see the list of calendars in your account (calendar.calendarlist.readonly) so you can choose which to show, and to see your email address. It does not ask to create, delete or share calendars or change their settings. When you connect Outlook, it asks Microsoft for Calendars.ReadWrite, User.Read, your email address and offline access (so your week stays in sync without signing in each time).

We use this access only to:

• list your calendars in Settings, so you can choose which to show;
• show the events from the calendars you choose on your week;
• create, move and delete events when you ask Weeklie to, including the time blocks made when you drag a task onto the week;
• show which account is connected.

Event details (titles, times, attendees and so on) and calendar names are fetched from Google or Microsoft when you need them, shown to you, and are not stored in our database. We store only the IDs and times of the events Weeklie creates for your tasks, so the task list stays in step with your calendar.

We do not:

• sell calendar data or pass it to data brokers;
• use it for advertising, including personalised or retargeted ads;
• use it to decide creditworthiness or for lending;
• use it to develop, improve or train AI or machine-learning models, or send it to AI providers;
• let people read it, except with your permission (for example, when you ask for support), where it is needed for security, or to comply with the law.

Weeklie's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We apply the same rules to data we receive from Microsoft.

We use your information to:

• run Weeklie for you and show your week;
• manage your subscription and check you have access;
• send service emails, such as a welcome message or a notice that a payment failed;
• answer you when you contact us;
• keep Weeklie secure, fix problems and prevent misuse;
• understand, in aggregate, how Weeklie is used so we can improve it.

We do not send marketing email without your consent, and we don't make automated decisions about you that have legal or similarly significant effects.

Under UK GDPR, our legal bases are: performing our contract with you (running the service you signed up for and managing your subscription); our legitimate interests in keeping Weeklie secure, supporting you and improving it; and complying with legal obligations, such as keeping financial records.

We use a small number of providers to run Weeklie. They can use your data only to provide their service to us.

• Whop for sign-in, checkout, payments and subscriptions. Whop handles payment details under its own privacy policy.
• Google and Microsoft, when you choose to connect their calendars.
• Vercel, which hosts Weeklie, and our database provider, which stores the data described above.
• An email provider to deliver service emails, and, if enabled, a privacy-respecting analytics provider to measure overall use of our website.

We may also share information if the law requires it, to protect the rights and safety of our users or others, or with a buyer if Weeklie is ever sold (in which case this policy will continue to apply to your data). We never sell your personal data.

Some of our providers, including Whop and Vercel, are based in or process data in the United States. Where your data leaves the UK, we rely on the safeguards UK law requires, such as the UK–US data bridge or the UK International Data Transfer Addendum to standard contractual clauses.

Weeklieuses a session cookie to keep you signed in (it lasts up to 7 days) and short-lived cookies to secure the Whop, Google and Microsoft sign-in steps. These are strictly necessary for the service to work, so they don't need your consent. We don't use advertising or cross-site tracking cookies. If we ever add analytics that needs cookies, we will ask for your consent first.

• Account, tasks, settings and activity: while you have an account. Deleted from our database straight away when you delete your account.
• Calendar tokens: deleted as soon as you disconnect that calendar or delete your account.
• Calendar events: not stored, apart from the IDs and times of events Weeklie created for your tasks.
• Hosting logs and database backups: kept by our providers for a limited time (typically up to 30 days) and then deleted automatically.
• Emails you send us: kept as long as needed to help you, and for up to 2 years after.

Whop keeps its own records of your purchases under its privacy policy, as the law requires.

You can disconnect Google Calendar or Outlook at any time in Weeklie's Settings. For Google, we also revoke our access with Google. You can remove Weeklie's access yourself at myaccount.google.com/permissions or myapps.microsoft.com.

To delete your account and all of its data, open Settings in Weeklieand choose Delete account. This cancels your subscription with Whop, disconnects your calendars and deletes your data straight away. If you can't sign in, email ben@blcm.co.uk from the address on your account and we will delete it within 30 days. Events already in your Google or Outlook calendar stay there; you can delete them in that calendar.

Under UK data protection law you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email ben@blcm.co.ukto do any of these. It's free, and we will reply within one month.

If you are unhappy with how we handle your data, please tell us so we can try to fix it. You can also complain to the Information Commissioner's Office at ico.org.uk.

All data is sent over HTTPS. Calendar access and refresh tokens are encrypted at rest with AES-256-GCM, are used only on our servers and are never sent to your browser. Sign-in uses OAuth, so we never see your Whop, Google or Microsoft password. Access to production systems is limited to the people who run Weeklie. If a breach ever puts your data at risk, we will tell you and the ICO as the law requires.

Weeklie is not meant for children under 13, and we do not knowingly collect their data. If you think a child has given us data, email us and we will delete it.

If we change this policy, we will update it here and change the date at the top. If the change is significant, we will tell you by email or in the app before it takes effect. The Terms of Service explain the rest of our agreement with you.

Questions about this policy or your data: ben@blcm.co.uk.