Privacy Policy

Last updated: May 5, 2026

Weekly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Weekly app and website (weeklygo.app).

1. Information We Collect

We collect the following types of information:

Account information: Name, email address, and profile photo from your Google account when you sign in with Google OAuth.
Calendar data: Events from your Google Calendar that you choose to view or share through Weekly. We only access calendar data with your explicit permission.
Usage data: Information about how you use the app, including features accessed, groups joined, and event interactions.
Device data: Device token for push notifications (FCM token). We do not collect advertising IDs or precise location.
Contact information: Phone numbers and email addresses you voluntarily add to your contacts within the app.
Registration source: Whether you registered via the web or mobile app, and date of registration.

2. How We Use Your Information

To provide, operate, and improve the Weekly service
To sync and display your Google Calendar events
To enable sharing of events with groups and contacts
To power the Friday AI scheduling assistant (via Anthropic's API)
To send transactional emails (welcome email, event invitations)
To send push notifications about events and RSVPs
To analyze aggregate usage patterns and improve the app
To comply with legal obligations

We do not sell your personal data. We do not use your data for advertising.

3. Google Calendar Access

Weekly requests access to your Google Calendar using the https://www.googleapis.com/auth/calendar scope to:

Display your upcoming events within the app
Create new events on your behalf when you use the event creation feature
Send calendar invitations to people you choose to share events with

We do not sell or share your calendar data with third parties. You can revoke Weekly's Google Calendar access at any time through your Google Account settings.

4. Data Sharing

We do not sell your personal data. We may share limited information in these cases:

With other Weekly users: When you share an event or join a group, other members can see the event details you choose to share.
Google Cloud Platform: Hosting, database (Cloud SQL), and infrastructure. Data is processed on our behalf under Google's Data Processing Agreement.
Anthropic: AI features (Friday assistant) are powered by Anthropic's Claude API. Conversation content may be processed by Anthropic subject to their Privacy Policy.
Firebase (Google): Analytics and push notifications. Data is processed on our behalf under Google's terms.
Legal requirements: We may disclose information if required by applicable law, court order, or governmental authority.

5. Data Security

We take reasonable technical and organizational measures to protect your information, including:

HTTPS/TLS encryption for all data in transit
JWT tokens with short expiry for secure authentication
Google Cloud SQL with encrypted storage at rest
Tokens stored securely in device Keystore (Android) or Keychain (iOS)
Rate limiting and brute-force protection on all API endpoints
No plaintext passwords — authentication via Google OAuth only

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. You may request account deletion at any time by contacting us at support@weeklygo.app. Upon deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Children's Privacy

Weekly is not directed to children under 13 years of age. We do not knowingly collect, use, or disclose personal information from children under 13.

By using Weekly, you represent that you are at least 13 years old. If you are between 13 and 17 years of age, you may only use Weekly with the consent and supervision of a parent or legal guardian.

If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as soon as possible. Parents or guardians who believe we have collected information from a child under 13 may contact us at support@weeklygo.app to request deletion.

We comply with the Children's Online Privacy Protection Act (COPPA) and similar applicable regulations.

8. Your Rights

Depending on your location, you may have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your personal data ("right to be forgotten")
Restriction: Request that we restrict processing of your data in certain circumstances
Portability: Receive your data in a structured, machine-readable format
Objection: Object to processing of your data for certain purposes
Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at support@weeklygo.app. We will respond within 30 days.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

Categories of Personal Information We Collect

Identifiers: Name, email address, Google Account ID
Commercial information: Not applicable (no purchases)
Internet activity: App usage data, features accessed
Geolocation data: Not collected
Professional information: Not collected
Inferences: Not used for profiling

Your California Rights

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and categories of third parties with whom we share it.
Right to Delete: You have the right to request that we delete personal information we collected from you, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information.
Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. You do not need to opt out.
Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CPRA (e.g., Social Security numbers, financial data, precise geolocation, racial/ethnic origin).
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

How to Submit a California Privacy Request

To submit a verifiable consumer request, contact us at:

Email: support@weeklygo.app with subject line "California Privacy Request"

We will verify your identity before processing requests and respond within 45 days (extendable by an additional 45 days with notice).

10. Israeli Privacy Rights

If you are an Israeli resident, the Privacy Protection Law, 5741-1981 and its regulations apply to the processing of your personal data.

Right of Access: You have the right to review personal data held about you in our database.
Right to Correction: You have the right to request correction of inaccurate or incomplete personal data.
Cross-Border Transfer: Your personal data is stored and processed on servers located in the United States (Google Cloud Platform, us-central1 region). This constitutes a transfer of data to a country outside of Israel. By using our service, you consent to this transfer. We take measures to ensure your data is protected in accordance with applicable privacy standards.
Database Registration: Our user database is registered with the Israeli Privacy Protection Authority as required by law.

To exercise your rights under Israeli law, contact us at support@weeklygo.app.

11. Cookies and Tracking

Our website uses only essential functional cookies required for authentication and session management. We do not use third-party advertising cookies or cross-site tracking cookies.

Our mobile app does not use browser cookies. Firebase Analytics uses a pseudonymous device identifier for aggregate usage analysis, which you can reset at any time through your device settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the app after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, complaints, or requests regarding this Privacy Policy or our data practices:

Email: support@weeklygo.app
Website: weeklygo.app

For accessibility-related inquiries, please see our Accessibility Statement.