Privacy Policy for Weekly Us

Effective August 18, 2026

1. Who We Are

Controller:

Darya Loktev
Einzelunternehmen (Sole Proprietorship)
Kaiser-Wilhelm-Straße 16
20355 Hamburg
GERMANY

Contact: [email protected]

2. Data We Collect

We may collect the following categories of data:

  • account data (for example, email and authentication metadata);
  • content submitted in the app (for example, entries and reflections);
  • technical data (for example, IP address, browser/device information, logs);
  • billing data when paid features are purchased (processed by payment providers).

3. Why We Process Data

We process data to:

  • provide and maintain Weekly Us;
  • secure accounts and prevent abuse;
  • communicate about account and service changes;
  • comply with legal obligations;
  • operate and improve Weekly Us using limited server-side operational telemetry;
  • understand browser usage and diagnose browser errors where optional browser analytics is enabled and permitted.

4. Legal Bases (GDPR)

Where GDPR applies, our legal bases include:

  • contract performance (Art. 6(1)(b) GDPR);
  • legal obligations (Art. 6(1)(c) GDPR);
  • legitimate interests, such as security, reliability, and limited service-operation telemetry (Art. 6(1)(f) GDPR);
  • consent where required, such as optional browser analytics (Art. 6(1)(a) GDPR).

5. Data Sharing

We share data only with service providers needed to operate Weekly Us (for example hosting, email, analytics, error reporting, and payment services), under appropriate data protection terms.

We do not sell your personal data.

6. Analytics and Error Reporting

We use PostHog in two distinct ways:

  • Server-side operational telemetry. We process limited account, product lifecycle, check-in, invite, and billing outcome events under our legitimate interests in operating and improving the service. This telemetry is not controlled by the browser analytics consent choice.
  • Optional browser analytics and error reporting. This runs only after you consent. It may include explicit interaction events, sanitized page URLs, browser/device information, exception details, and privacy-masked session replay.

PostHog may receive account email addresses, opaque user and couple identifiers, and coarse event properties. We do not intentionally send relationship content, invite tokens, or URL query strings. Browser session replay masks inputs and page text and does not record network request or response bodies or headers.

You can withdraw consent for optional browser processing through the browser analytics choice. Withdrawal does not disable server-side operational telemetry. You may object to processing based on legitimate interests by contacting [email protected].

7. Optional AI Rephrasing

When you press an AI rephrasing button for a Need or Ask, Weekly Us sends the current discussion item and only the selected Need or Ask text to OpenRouter and the AI model provider selected through it. This user-triggered processing is used only to propose clearer wording. We do not attach the other field, partner-authored content, relationship history, account details, images, or internal identifiers, although the text you choose to submit may itself contain personal details.

These requests are configured to require OpenRouter Zero Data Retention and to deny provider data collection. Weekly Us does not store the submitted AI prompt or an unapplied proposal. A proposal becomes part of your stored content only if you choose to use it and then save the discussion-item form.

8. Retention

We retain data only as long as needed for service operation, legal compliance, and dispute handling.

You can request deletion of your personal data, subject to legal retention duties.

9. Your Rights

Depending on applicable law, your rights may include:

  • access, correction, deletion, and portability;
  • restriction or objection to certain processing;
  • withdrawal of consent where processing is based on consent;
  • complaint to a data protection authority.

To exercise your rights, email [email protected].

10. International Transfers

If data is processed outside the EEA, we use appropriate safeguards, such as standard contractual clauses, where required.

11. Security

We use reasonable technical and organizational measures to protect personal data, but no system can guarantee absolute security.

12. Changes

We may update this policy from time to time. Material changes will be posted with an updated effective date.

Terms of ServicePrivacy PolicyCookie PolicyRefund PolicyImprint