This Privacy Policy explains how Castan Digital Limited (“Castan Digital”, “we”, “us”, “our”), which owns and operates Weave Calendar (“Weave”), collects, uses, and safeguards information when you use the Weave mobile application and the website at weavecalendar.com (together, the “Service”). By using the Service, you agree to this policy.
In short: Weave is a paid-for and free family planner, not an advertising business. We do not sell your personal information, we do not show third-party advertising, and we do not use your household content to build advertising profiles.
1. Information we collect
Information you provide
- Account details — your name and email address when you create an account. If you sign in with Apple or Google, we receive the basic profile information you authorise them to share (such as your name and email).
- Household content — the family members (including children you add as profiles), events, activity “threads”, shopping and to-do lists, chores, birthdays, recipes, notes and reminders you add to the Service. Depending on the features you use, this can include photos and documents you upload, locations and contacts (such as a club or coach) you save to a thread, and activity costs and spending figures you record for your own budgeting.
- Communications — messages you send us for support, and your responses to any surveys or feedback requests.
Information collected automatically
- Device & usage data — app version, device type, operating system, and basic interaction events used to keep the Service reliable and diagnose problems.
- Push tokens — a device notification token (and your device’s time zone, so reminders arrive at the right local time) used to deliver the notifications you enable. You can turn notifications off at any time in your device settings.
Information from optional features
- Calendar import — if you choose to import events from your device calendar, Weave reads that calendar only with your permission and only to bring those events into your household. You can decline this and Weave still works.
- Purchases — if you subscribe to Weave Pro, we receive your subscription status and a purchase identifier (see “Payments & subscriptions” below). We never receive or store your full payment-card details.
2. How we use your information
- To provide, maintain and sync your shared household calendar and content across members.
- To send reminders, the optional weekly agenda email, household invites, and notifications you have asked for.
- To process and manage Weave Pro subscriptions and entitlements.
- To respond to support requests and communicate important Service updates.
- To diagnose problems, keep the Service secure, prevent abuse, and improve features and performance.
- To comply with legal obligations.
We do not sell your personal information, we do not serve third-party advertising, and we do not use your household content for advertising or to train advertising profiles.
3. Legal bases for processing (UK & EU)
If you are in the UK or European Economic Area, we rely on the following lawful bases under the UK GDPR / EU GDPR:
- Performance of a contract — to provide the Service you sign up for, including syncing your household and managing a Pro subscription.
- Legitimate interests — to keep the Service secure and reliable, prevent abuse, and improve our features, balanced against your rights.
- Consent — for optional features you switch on, such as push notifications, calendar import, the weekly agenda email, and website analytics. You can withdraw consent at any time.
- Legal obligation — where we must process information to comply with the law.
4. How your data is shared within a household
Weave is built for shared family planning. Content you add to a household — events, lists, threads, photos, documents and similar — is visible to every member of that household. Only invite people you trust to join your household. When you invite someone, we send an email to the address you provide so they can join.
5. We don’t sell your data or show ads
Weave makes money from optional Weave Pro subscriptions, not from advertising. We do not sell or rent your personal information, we do not share it with advertising networks or data brokers, and there are no third-party advertising trackers in the app. The only analytics we use is privacy-friendly, aggregate website analytics (see “Cookies & website analytics”).
6. Payments & subscriptions
Weave Pro is sold as a subscription through the Apple App Store or Google Play. Your payment is processed by Apple or Google under their own terms and privacy policies — we never receive your full card details. We use RevenueCat to manage subscription status and entitlements; RevenueCat receives a purchase identifier and subscription information so we can unlock Pro features for your account.
7. Service providers
We rely on a small set of trusted providers to operate the Service. They process data only on our instructions and under their own privacy and security commitments, and we put data processing terms in place with them where required:
- Supabase — our database, authentication and file storage (for example, profile photos and documents).
- Apple & Google — “Sign in with Apple/Google”, push delivery, and App Store / Google Play subscription billing.
- RevenueCat — subscription and entitlement management for Weave Pro.
- Expo — delivery of the push notifications you enable.
- Resend — sending transactional email such as household invites, the optional weekly agenda, and support replies.
- Vercel — hosting our website and providing aggregate, non-identifying website analytics.
8. Cookies & website analytics
The Weave mobile app does not use advertising cookies. Our website uses only essential functionality and privacy-friendly, aggregate analytics (via Vercel) to understand overall traffic — for example, how many people visit a page. This analytics does not use third-party advertising cookies and is not used to track you across other websites.
9. International data transfers
We and our providers may process your information in countries other than your own, including the United States. Where information is transferred out of the UK or EEA, we rely on appropriate safeguards — such as the UK/EU Standard Contractual Clauses or an adequacy decision — to protect it.
10. Data retention & deletion
We keep your information for as long as your account is active or as needed to provide the Service. You can delete your account at any time from within the app, which removes your household content and personal data from our live systems promptly, and in any case within 30 days. Residual copies in encrypted backups roll off shortly afterwards. We may retain limited information for longer only where we must to meet legal obligations or resolve disputes.
11. Security
We use industry-standard measures — encryption in transit and at rest, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is completely secure, but we work hard to safeguard your data. If we ever become aware of a data breach that affects your personal information, we will notify affected users and the relevant authorities as required by applicable law.
12. Automated decisions & profiling
Weave’s Insights show you your own household’s patterns — such as where your family’s time and money go. We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not profile you for advertising.
13. Your rights & choices
You can:
- Access, update or correct your account and household information from within the app.
- Delete your account, which removes your personal data as described above.
- Turn notifications, calendar import and the weekly agenda email on or off at any time.
Depending on where you live, you may also have rights to access, correct, delete, port, or restrict or object to our use of your personal information, and to withdraw consent. UK/EU residents may lodge a complaint with their local data protection authority. California residents have rights under the CCPA/CPRA, including to know, delete, and correct personal information and to opt out of “sale” or “sharing” — and as noted above, we do not sell or share your personal information for cross-context behavioural advertising. To exercise any of these rights, email admin@weavecalendar.com and we’ll respond within the time required by law.
14. Children’s privacy
Weave is intended for adults managing a household. Accounts must be created by someone 18 or older, and while parents may add children as family members within their household, those profiles are created and controlled by the adult. We do not knowingly collect personal information directly from children. If you believe a child has provided us information directly, contact us and we will remove it.
15. Changes to this policy
We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above and, for material changes, provide a more prominent notice.
16. Contact us
Questions about this policy or your data? Email admin@weavecalendar.com.