1. Who We Are

Weekly ("we", "our", "us") is a group calendar and event-coordination service operated by Shay Appelboim ("the Developer"). We are based in Israel. This Privacy Policy explains how we collect, use, and protect your personal data when you use our mobile app or web application at weeklygo.app.

2. What Data We Collect

• Account data: Your name, email address, and profile picture obtained via Google OAuth.
• Calendar data: Events you create or share on Weekly, including title, date, time, location, and description.
• RSVP data: Your responses (going / maybe / not going) to events.
• Group data: Groups you create or join, including member lists.
• Task data: Task lists and items you create within groups.
• Google Calendar access: We request access to your Google Calendar to add and sync events. We read/write only events related to Weekly activities.
• Usage data: Anonymous analytics events (e.g., feature usage) to improve the product. We do not sell this data.
• Push tokens: Device tokens for sending push notifications (mobile app only).

3. How We Use Your Data

• To provide and improve the Weekly service.
• To display your events and group information.
• To send event invitations and RSVP notifications to group members.
• To send push notifications and reminder emails.
• To respond to support requests.

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Data Sharing

We share data only with the following parties:

• Google: For OAuth authentication and Google Calendar integration.
• Firebase / Google Cloud: Cloud infrastructure for hosting, storage, and push notifications.
• Group members: Your name, profile picture, and RSVP status are visible to members of groups you belong to. Your email is visible only to group owners.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account or request deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Your Rights (GDPR & Israeli Privacy Law)

Under applicable law (including the EU General Data Protection Regulation and the Israeli Privacy Protection Law, 5741-1981), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Receive your data in a portable format.
• Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at shay@weeklygo.app.

7. Security

We use industry-standard security measures including HTTPS encryption, JWT-based authentication, and Google Cloud infrastructure security. We do not store Google OAuth passwords. Access tokens are stored securely and never exposed client-side beyond what is required for functionality.

8. Cookies

The web app uses localStorage (not cookies) to store your authentication token locally on your device. We use a short-lived session cookie only during the Google OAuth flow to maintain state. We do not use tracking or advertising cookies.

9. Children

Weekly is not directed at children under 13. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact:
Email: shay@weeklygo.app
Website: weeklygo.app