Privacy Policy

Last updated: May 10, 2025

1. Who We Are

WeeklyWin (“we”, “our”, “us”) is a weekly positivity journal app that helps you capture your wins, reflect on your progress, and receive an AI-powered year-end review of your journey. We are operated by Klod Manuella Njomnang Kwolong and Kevin Teukeng Becho.

2. What We Collect

We collect only what is necessary to provide the service:

Account information: your email address and, optionally, your name.
Journal entries: the notes you write, including optional media attachments (photos, audio, video). Note entries are processed by OpenAI to generate your AI-powered year-end review.
Settings: preferences such as reminder time, timezone, and language.
Phone number (optional): if you choose to enable WhatsApp reminders.
Usage data: basic app activity logs for debugging and service improvement.

We do not sell your data, run ads, or share your personal information with third parties for marketing purposes.

3. How We Use Your Data

To provide and operate the WeeklyWin service.
To generate your AI-powered year-end review using OpenAI. Your notes are processed solely to produce your personal review and are not used to train AI models.
To send you weekly reminder emails or WhatsApp messages if you opt in.
To authenticate you securely via magic links or password login.
To improve the app and diagnose technical issues.

4. Data Storage and Security

Your data is stored on Amazon Web Services (AWS) infrastructure in the EU (eu-west-1 region). We apply the following protections:

Journal entry text is encrypted at rest using AWS KMS (Key Management Service).
Media files are stored in Amazon S3 with server-side KMS encryption.
All data is transmitted over HTTPS/TLS.
Authentication tokens are short-lived and signed with Cognito.

5. Third-Party Services

We use the following third-party services to operate WeeklyWin:

Amazon Web Services (AWS) — cloud infrastructure, database, storage, and authentication.
OpenAI — AI-powered year-end review generation. Your notes are sent to OpenAI solely for this purpose and are not used to train their models.
Resend / Amazon SES — transactional email delivery (magic links, reminders).
Twilio — WhatsApp messaging (only if you enable WhatsApp reminders).
Expo / EAS — mobile app build and distribution.

Each provider processes data only as necessary to deliver their service and is bound by their own privacy policies.

6. Data Retention

Your journal entries, account information, and media files are retained for as long as your account is active. WhatsApp conversation history is automatically deleted after 90 days. You may delete your account at any time from the app's settings screen; this permanently removes your data from our systems.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and all associated data.
Object to or restrict certain processing.
Data portability (receive your data in a machine-readable format).

To exercise any of these rights, contact us at info@weeklywin.net.

8. Children's Privacy

WeeklyWin is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date above. Continued use of WeeklyWin after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests:

Email: info@weeklywin.net