WeekNavPrivacy Policy
Effective October 10, 2026
This policy explains what WeekNav collects, why, who it is shared with, and your choices. WeekNav is run by Doxa Holdings, LLC, 14019 W 95th St., Lenexa, KS 66215 ("we"). Questions: privacy@weeknav.com.
What we collect
- Account data: your name, email address, profile picture if your sign-in provider shares it, time zone and settings. If you use a password it is stored only as a one-way hash; passkeys store only a public key.
- Planner data: what you put into WeekNav: cards, checklists, habits, your Week Focus, journal entries, weekly reviews and time categories.
- Calendar data: when you connect a Google or Microsoft account, see the next section.
- Usage records: sign-in sessions (with the device and network address they came from), a log of completions and AI requests (which feature, which model, and the tokens used) so we can enforce plan limits and keep the service secure.
- Payments: handled by Stripe on the web and by Apple or Google in the mobile apps. We receive your plan and billing status, never your full card number.
We do not sell personal data, show ads, or use tracking or advertising cookies. weeknav.com sets no cookies. The app sets only the cookies needed to keep you signed in.
Google and Microsoft calendar data
When you connect a calendar account, you choose which calendars WeekNav shows and which one it writes to. WeekNav uses that access only to provide the features you see:
| We read | We write | We never store |
|---|---|---|
| Your list of calendars; each event's title, start and end time, time zone, status (busy, free, declined) and online-meeting link | Time blocks you create or accept, changes you make to events in WeekNav, and a small WeekNav tag on events you categorize | Event descriptions, attendee lists and email addresses, attachments, or anything outside your calendars |
Calendar data is cached for a rolling window (about 8 weeks back and 26 weeks ahead) so the planner works quickly and offline. Access tokens are encrypted at rest with a key per workspace. Disconnecting an account revokes our access at Google or Microsoft and deletes that account's cached events.
Google user data. WeekNav's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve ads, we do not sell it, we do not use it to train general AI or machine-learning models, and no person at WeekNav reads it unless you ask us to for support, it is needed for security, or the law requires it.
How we use it
To provide and secure WeekNav: syncing your calendars, building your Today list and hour totals, sending sign-in and notification messages you've chosen, preventing abuse, keeping backups and answering support requests. We use your email to tell you about important changes. We'll ask before sending you marketing email.
AI features
When you use an AI feature (Plan my week, smart capture, the review read), the request and the data needed to answer it are sent to Anthropic, which runs the Claude models. That data is your Week Focus and priorities, the relevant cards, and event titles, times and categories; never event descriptions or attendee emails. Anthropic processes it to return the answer and does not use it to train its models under our commercial terms. AI only proposes: nothing is written to your calendar until you accept it. You can turn AI off in settings.
Who we share it with
Only the service providers that run WeekNav, each for its own part:
| Provider | What for |
|---|---|
| Hostinger | Hosting the servers and database (United States) |
| Google, Microsoft | Calendar sync and sign-in, for the accounts you connect |
| Anthropic | AI features, when used |
| Stripe | Web payments |
| Apple, Google, RevenueCat | In-app purchases and push notifications in the mobile apps |
| Amazon Web Services | Key management for encrypting calendar access tokens |
| Resend | Sending email |
| Dropbox | Storing encrypted backups |
| Cloudflare | Domain name service (DNS) |
Accountability partners see only what you choose to share with them (for example your week plan or a completed review), read-only, and lose access the moment you revoke it. Private cards and private calendars are never shared. We may disclose data if the law requires it, and we'll tell you first where the law allows.
Where data is stored, and how it's protected
WeekNav runs on servers in the United States. Every account's data is separated inside the database by row-level security, so one account cannot read another's records. Connections are encrypted in transit, calendar tokens are encrypted at rest, and database backups are made nightly, encrypted before they leave the server, and kept for up to a year (daily copies for 30 days, monthly copies for 12 months).
How long we keep it
We keep your data while your account is open. If you delete your account, we delete its data, cached calendar events and access tokens within 7 days, except copies in backups, which expire on the schedule above, and records we must keep by law.
Your choices and rights
You can see and correct your account details in WeekNav, export your data at any time, disconnect any calendar, turn AI off, and delete your account. You can also remove WeekNav's access from your Google account settings or Microsoft account settings. To ask what data we hold about you, email privacy@weeknav.com. Depending on where you live, you may have further rights, including to complain to a data protection authority.
Children
WeekNav is not meant for anyone under 18.
Changes
If we change this policy in a way that matters, we'll tell account holders by email before it takes effect.