OurWeek legal

Privacy Policy

Effective date: 27 August 2026

This Privacy Policy explains how OurWeek processes personal data when you use the OurWeek website, mobile application, or contact us.

Controller and contact

The data controller is VADYM PASICHNYK - WebWave, a sole proprietor registered in Poland.

Scope

This policy covers the OurWeek website and mobile app. The app helps households hold weekly meetings, manage shared topics, agreements, and tasks, and keep a history of that work.

Data we process

Depending on the features you use, we may process:

• account and authentication details, such as your email address and account identifiers;
• household, participant, meeting, topic, task, agreement, and activity-history data that you or household members enter;
• account-export and support-request information;
• subscription entitlement information where you use a paid plan;
• technical, diagnostic, and security information needed to operate and protect the service.

Do not put sensitive information into shared household content unless you are comfortable sharing it with the people who can access that household. Private notes are stored only on your device and are not included in shared sync.

Why we process data

We process data to provide and secure OurWeek, create and maintain accounts and households, synchronize shared content, respond to support requests, provide exports, manage subscriptions, and meet legal obligations. Where required, we rely on consent; otherwise we rely on performance of our contract with you, our legitimate interests in operating and securing the service, or legal obligations.

Where data is processed and shared

We use service providers only as needed to run enabled features. This can include our backend and Supabase for account and shared-data synchronization; Google Play and RevenueCat for app-store subscription entitlement; Sentry for diagnostics; Umami Cloud for consent-based aggregate website analytics; OpenAI to generate a summary you request; and Google Calendar when you choose to connect a calendar. These integrations are optional or enabled only where configured and used. We do not sell personal data.

Providers may process data outside your country. Where a transfer outside the European Economic Area applies, we use an applicable transfer mechanism, such as an adequacy decision or standard contractual clauses, where required.

AI summaries

When you request an AI recap, OurWeek sends selected shared meeting notes, tasks, agreements, and participant names through our backend to OpenAI. Private notes are excluded. We show this disclosure before an account first requests a recap, and you can choose not to generate one.

Generated recaps are saved with the meeting and can be viewed by household members who can access that meeting. AI output can be incomplete or inaccurate, so review it before relying on it.

OurWeek sends recap requests to the OpenAI Responses API with response storage disabled. This avoids stored response objects, but it does not eliminate all provider retention. OpenAI says API data is not used to train or improve its models unless an account opts in; its standard abuse-monitoring logs may retain certain customer content and derived metadata for up to 30 days. See OpenAI API data controls.

Google Calendar

When you connect Google Calendar, OurWeek stores the connected Google account email and encrypted OAuth access and refresh tokens on our server. The authorization asks for access to calendar events and your Google account email. The event permission is broader than the individual events OurWeek creates, updates, or deletes.

OurWeek uses the connection to create selected meeting reminders, task due dates, and follow-up dates in your primary Google Calendar. Calendar visibility is controlled by your Google Calendar sharing settings. We store the identifiers of the events we map so that we can manage only those mapped events.

When you disconnect, OurWeek attempts to remove its mapped events, revoke Google access, and then clears the stored tokens. A provider or connection failure can prevent an event removal or revocation; you can also remove OurWeek from your Google Account permissions. See the Google API Services User Data Policy.

Local device data

Private notes and reminder settings are stored locally on your device. Local notifications are scheduled by your device for reminders you choose. Deleting your account in the app also attempts to remove OurWeek data from the device used to make the request, including private notes, settings, and local app backups. If local cleanup fails, the app explains this and lets you retry.

A deletion request sent through this website or by email does not itself erase data stored on your devices. To remove local-only data from another device, delete the account in that app while it is online, or clear that device’s OurWeek app storage after the account has been deleted. Private notes are local-only and are not included in normal account or meeting exports. Copies you exported or shared outside OurWeek may remain with you or the recipient.

Diagnostics

When error diagnostics are enabled for a deployed OurWeek app or service, we use Sentry to receive limited technical reports automatically when an error occurs. These reports help us investigate reliability and security issues.

OurWeek filters reports to a generic error type, selected technical stack metadata, release and environment information, and a safe route pattern for backend errors. It excludes raw error messages, request bodies, headers, query strings, user account details, household content, arbitrary extras, and application breadcrumbs. Sentry may also process network metadata needed to receive a report, subject to its project settings. Diagnostics reports are retained under the Sentry project’s configured retention settings.

Website analytics

If you choose to accept analytics in the cookie banner, we use Umami Cloud to understand aggregate use of the OurWeek website, such as page visits, referring sources, device type, and campaign tags where supplied. We do not load Umami before that choice.

We do not intentionally send waitlist answers, email addresses, or other directly identifying information to Umami. You can refuse analytics in the banner; refusing does not affect the website or waitlist form. Umami may still process technical request information as part of providing its analytics service.

Retention and deletion

You can export your account data in the app and can delete your account in the app while signed in. If you cannot sign in, use our public account-deletion page to request deletion by email.

After we verify a deletion request, we remove or anonymize account data within 30 days, except where we must retain it for a legal obligation or to establish, exercise, or defend legal claims. Backup copies may persist for up to 90 days before they expire through the normal backup cycle. Deleting an owner account may transfer a shared household to another eligible member so that shared household data remains available to that household.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or your local authority. Email ourweekapp@gmail.com to make a request; we may need to verify your identity.

Changes and contact

We may update this policy when OurWeek or applicable law changes. We will publish the revised policy with a new effective date. For privacy questions, use ourweekapp@gmail.com. See also our Terms of Service and account-deletion instructions.