Privacy Policy

Your account. When you sign in with Whop, we receive your Whop user ID, name, email address and profile picture. We store these with your plan, subscription status and your Weeklie settings (for example, which day your week starts).

Your tasks. The tasks you add in Weeklie: their titles, order, whether they are done, and, if you drag one onto the week, the time and the calendar event it created.

Connected calendars. If you connect Google Calendar or Outlook, we store the email address of that calendar account, the ID of its primary calendar, and the access and refresh tokens that let Weekliereach it. Tokens are encrypted at rest and are never sent to your browser.

Activity. A short log of account events such as sign-ins and plan changes, shown to you in your account.

When you connect Google Calendar, Weeklie asks for access to view and edit the events on your calendars (calendar.events) and your email address. It does not ask to manage your calendars or their sharing settings. When you connect Outlook, it asks Microsoft for Calendars.ReadWrite, User.Read, your email address and offline access.

We use this access only to:

• show the events from your primary calendar on your week;
• create, move and delete events when you ask Weeklie to, including the time blocks made when you drag a task onto the week;
• show which account is connected.

Event details are fetched from Google or Microsoft when you open your week and are not stored in our database. We store only the IDs and times of the events Weeklie creates for your tasks, so the task list stays in step with your calendar.

We do not sell calendar data, use it for advertising, use it to train AI or machine-learning models, or let people read it, except where you ask us to for support, where it is needed for security or to comply with the law.

Weeklie's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use your information to run Weeklie for you, manage your subscription, keep the service secure, and send transactional emails such as a welcome message or a notice that a payment failed. We do not send marketing email without your consent.

Our legal bases under UK GDPR are performing our contract with you (running the service you signed up for) and our legitimate interests in keeping it secure and working.

We use a small number of providers to run Weeklie:

• Whop for sign-in, checkout and subscriptions. Whop handles your payment details; we never see or store card numbers.
• Google and Microsoft when you choose to connect their calendars.
• Hosting and database providers that run the app and store the data described above.
• An email provider to deliver transactional emails, and, if enabled, a privacy-respecting analytics provider to understand overall usage of our website.

Some of these providers process data outside the UK. Where they do, we rely on the safeguards UK law requires. We never sell your personal data.

Weeklie uses a session cookie to keep you signed in (it lasts up to 7 days) and short-lived cookies to secure the Google and Microsoft sign-in steps. These are needed for the service to work.

We keep your account data while you have an account. Calendar tokens are deleted as soon as you disconnect that calendar or delete your account. When you delete your account, your tasks, settings, calendar connections and activity are deleted from our database straight away. Whop keeps its own records of your purchases under its own privacy policy.

You can disconnect Google Calendar or Outlook at any time in Weeklie's Settings. For Google, we also revoke our access with Google. You can remove Weeklie's access yourself at myaccount.google.com/permissions or myapps.microsoft.com.

To delete your account and all of its data, open Settings in Weeklieand choose Delete account. This cancels your subscription with Whop, disconnects your calendars and deletes your data straight away. If you can't sign in, email ben@blcm.co.uk from the address on your account and we will delete it within 30 days. Events already in your Google or Outlook calendar stay there; you can delete them in that calendar.

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email ben@blcm.co.ukto do any of these. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Data is sent over HTTPS. Calendar tokens are encrypted at rest, and access to production systems is limited to the people who run Weeklie.

Weeklie is not meant for children under 13, and we do not knowingly collect their data.

If we change this policy, we will update it here and change the date at the top. If the change is significant, we will tell you by email or in the app.

Questions about this policy or your data: ben@blcm.co.uk.