Privacy Policy

Last Updated: September 6, 2025

This Privacy Policy explains how HelloWeek (“we,” “our,” or “us”) collects, uses, and safeguards personal information when you use our website, helloweek.app. By using our services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We may collect and process the following types of information:

  • Account Information: name and email address provided when you sign up.
  • Authentication Data: information obtained through Google OAuth, including tokens to maintain access to your Google Calendar.
  • Calendar Content You Authorize: when you connect your Google account, we may process limited event data (e.g., event titles, start/end times, descriptions, and attendee counts) to generate weekly summaries you request. We minimize the fields processed and do not require full mailbox or document access.
  • Technical Data: IP address, browser type, and device identifiers collected automatically for security and performance.
  • Payment Information: when you subscribe or make a payment, transaction details are processed securely by our payment provider and Merchant of Record, LemonSqueezy. We do not store your full payment card information on our servers.

2. How We Use Information

We use the information collected for purposes including:

  • Providing and improving HelloWeek's scheduling and reminder services.
  • Authenticating you with Google and accessing your calendar data as authorized.
  • Generating summaries you request, including by sending limited event data to our third-party AI processing provider.
  • Communicating with you about account-related matters.
  • Processing payments and managing subscriptions (via LemonSqueezy).
  • Storing and managing temporary data (e.g., sessions, tokens) in secure infrastructure.
  • Complying with legal obligations and enforcing our Terms of Service.

3. Sharing of Information

We do not sell or rent your personal information. We may share information in the following circumstances:

  • Service Providers: with trusted vendors that provide services on our behalf, such as authentication, data hosting, cloud storage, analytics, email delivery, and subscription management.
  • AI Service Providers: to process authorized calendar event data and return summary text. We restrict these providers from using your data for their own purposes (including model training) and require confidentiality and appropriate security measures.
  • Payment Processing: payments, subscription management, and tax compliance are handled by our Merchant of Record, LemonSqueezy, which securely processes your transaction information.
  • Legal Requirements: if required to comply with applicable laws, regulations, legal processes, or government requests.
  • Protection of Rights: when necessary to protect our rights, property, users, or the public.

4. Cookies

HelloWeek may use cookies or similar technologies to maintain sessions, remember preferences, and improve functionality. You can control cookies in your browser settings.

5. Data Security and Retention

We implement industry-standard measures to protect personal data, including encryption of sensitive information and secure storage. However, no method of transmission or storage is completely secure.

AI Processing Safeguards: Before sending prompts to our AI provider, we apply data minimization and avoid transmitting unnecessary personal details. Data sent for AI processing is transmitted securely.

Data Retention for Summaries: We do not permanently store AI-generated summaries. Once a summary is generated, it is sent to you by email and not retained on our systems. Only minimal, temporary data may be held in memory during processing and is discarded immediately after the summary is delivered.

6. Your Rights

Depending on your location, you may have rights to:

  • Access or request a copy of your personal data.
  • Request correction or deletion of your data.
  • Withdraw consent for certain types of processing.

To exercise these rights, contact us at hello@helloweek.app.

7. Children’s Privacy

HelloWeek is not directed to individuals under the age of 13. We do not knowingly collect data from children.

8. International Users

If you access HelloWeek from outside the United States, your data may be processed and stored in countries with different data protection laws. Where our AI processing provider or payment provider stores or processes data outside your region, we rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) to protect your information.

9. Automated Processing

AI-generated summaries are assistive outputs for your convenience. They are not used to make decisions that produce legal or similarly significant effects about you.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised “Last Updated” date.

11. Contact

If you have any questions about this Privacy Policy, you can reach us at: hello@helloweek.app