Privacy Policy

A product of Slowstarr LLC

Effective Date: August 26, 2026

Last Updated: September 29, 2026

Slowstarr LLC ("Slowstarr," "Company," "we," "us," or "our") built DayWeavr (the "Service" or "DayWeavr") on a simple premise: the people using it to plan their work and their lives deserve to know exactly what we collect, why we collect it, and that we are not in the business of selling their personal information. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use DayWeavr, and describes the choices and rights available to you.

This Policy applies to the DayWeavr website, web application, and any related services that link to it (collectively, the "Service"). It does not apply to third-party sites, applications, or services that DayWeavr links to or integrates with, including the external calendar, email, and messaging providers described in Section 3.

Scope: This Policy is currently written for users located in the United States. DayWeavr is not yet offered outside the United States. If and when we expand availability internationally — including to the European Union or United Kingdom — we will update this Policy to add the additional disclosures and rights required under laws such as the GDPR and UK GDPR (for example, legal-basis disclosures, an EU/UK representative, and international transfer safeguards), and will publish that update before offering the Service in those regions.

1. Our Privacy Principles

Before the legal detail, here is the plain-language version of our approach:

• We collect only what we need to run DayWeavr and make it useful — your tasks, your calendar (with your permission), and how you use the product.
• We do not sell your personal information. We do not share it with third parties for cross-context behavioral advertising. DayWeavr does not run third-party ad networks and never will as a matter of product design.
• Anything you mark private stays private. Nothing in your personal account is visible to anyone else unless you explicitly share it.
• We extend core privacy rights — access, deletion, correction, and opt-out — to all DayWeavr users, not only where a specific state law happens to require it.
• When our AI assistant reasons about your schedule, you see why. It proposes; you decide.

2. Information We Collect

We collect information in three ways: information you give us directly, information generated by your use of the Service, and information from third-party integrations you choose to connect.

2.1 Account and Profile Information

• Identifiers: name, email address, and password (DayWeavr does not currently offer sign-in through a third-party identity provider).
• Profile details you choose to add: display name, timezone, and optional fields such as birth month/day.
• Authentication data: securely hashed credentials and, if you choose to enroll one, passkey metadata — a credential identifier, the device-supplied name (for example, Windows Hello), and the creation and last-used dates. A passkey's private key never leaves your device and is never transmitted to or stored by us. This data is held by our authentication provider (see Section 4).

2.2 Content You Create in DayWeavr

• Work items: projects, tasks, sub-tasks, titles, descriptions, priorities, due dates, time estimates, notes, attachments, and tags.
• Planning preferences: workstreams (life domains you define, such as Work, Family, or Health), Balance Goal allocations, available-hours settings, and protected-time blocks.
• Group data: Group membership, invitations you send or receive, collaborator roles, task assignments, and comments left on shared tasks.
• Schedule data: the time blocks the scheduling engine proposes or that you manually create, and your responses to those proposals (accepted, swapped, or rejected).

2.3 Information from Connected Third-Party Services (Optional)

DayWeavr offers optional integrations that require your explicit authorization (typically via OAuth) before any data is accessed. You may disconnect any integration at any time in Settings.

• Calendar data: with your permission, we import calendar metadata (event titles, times, duration, and attendee information you have access to) from Google Calendar, Microsoft Outlook, or Apple Calendar, via our calendar-sync infrastructure provider, Nylas. This import is read-only in the current version of DayWeavr — we do not write changes back to your external calendar.

2.4 AI Assistant Interactions

• The natural-language requests, questions, and instructions you send to the DayWeavr AI assistant (for example, asking it to break down a project or explain a scheduling decision).
• The plans, suggestions, task breakdowns, time estimates, and explanations the AI assistant generates in response, including your subsequent edits or approvals of that output.
• Files and web pages you import. When you import events from a PDF, an image, a spreadsheet, or a link you paste, the contents of that file or page are sent to our AI provider so the events in it can be read. We do not retain the file or the page after the events are extracted. A CSV file is an exception: it is read by DayWeavr directly and is never sent to an AI provider.

See Section 5 ("How Our AI Features Work") for more on how this information is processed.

2.5 Usage, Device, and Log Information

• Technical data such as IP address, browser type, device type, operating system, and general (city/region-level) location inferred from your IP address.
• Usage data such as pages and features accessed, session timing, click and interaction events, and error/crash logs, used to operate, secure, and improve DayWeavr.
• Cookies and similar technologies as described in Section 10.

2.6 Payment Information (Subscription Plans)

If you subscribe to a paid tier of DayWeavr, payment card and billing details are collected and processed directly by our third-party payment processor. Slowstarr does not receive or store your full payment card number. We retain only limited billing metadata (such as plan tier, billing date, and transaction status) needed to administer your subscription.

3. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service, including your Backlog, Workstreams, Groups, and calendar view.
• Power the AI scheduling engine and AI assistant — generating daily plans, task breakdowns, time estimates, and coaching insights.
• Synchronize connected calendars and surface suggested tasks from connected email/messaging accounts, at your direction.
• Send service communications: daily briefings, notifications about assigned or completed tasks, deadline reminders, weekly reviews, and account/security notices, per your notification preferences.
• Maintain the security of the Service, authenticate accounts, and detect, investigate, and prevent fraud, abuse, or unauthorized access.
• Analyze aggregated or de-identified usage trends to improve DayWeavr's features and reliability.
• Provide customer support and respond to your requests, including privacy rights requests.
• Comply with applicable law, legal process, and enforce our Terms of Service / End User License Agreement.

We do not: use your personal information to serve third-party advertising, build advertising profiles about you, or sell your personal information. We do not disclose your personal information to data brokers.

4. How We Share Information

We disclose personal information only in the following circumstances:

4.1 Service Providers (Sub-processors)

We share information with vendors who process it on our behalf, under contractual confidentiality and data-protection obligations, solely to help us provide the Service. As of this Policy's last update, our primary service providers are:

We will update this table as our vendor relationships change. A current list is always available on request.

4.2 Other Users (Groups and Shared Items)

If you share a project or join a Group, the collaborators you explicitly invite — and only those collaborators — can see the items you have shared with them, consistent with the sharing and permission controls described in the Service (see also our Terms of Service). Schedule visibility (busy/free status) is a separate, opt-in permission and does not, by itself, reveal your underlying tasks.

4.3 Legal Requirements and Safety

We may disclose information if we believe in good faith that disclosure is necessary to: comply with a law, regulation, legal process, or governmental request; protect the rights, property, or safety of Slowstarr, our users, or the public; detect, prevent, or address fraud, security, or technical issues; or enforce our Terms of Service.

4.4 Business Transfers

If Slowstarr is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of its assets, personal information may be disclosed or transferred as part of that transaction. We will notify you (for example, by email or an in-app notice) of any such change in ownership or control of your personal information, and of any material change in how it is used.

4.5 No Sale or Sharing of Personal Information

We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Because we don't engage in either practice, there is currently nothing to opt out of — but we still honor opt-out preference signals as described in Section 10.

5. How Our AI Features Work

DayWeavr's AI assistant and scheduling engine are core to the product, so we want to be specific about how they use your information:

• Purpose-built for planning, not profiling: the AI assistant breaks down projects, estimates task duration, sequences dependencies, generates your daily plan, and answers natural-language questions about your backlog and schedule. It does not build an advertising profile about you and is not used to make legally significant decisions about you (for example, decisions about employment, credit, healthcare, or access to essential services).
• Visible reasoning: when the AI proposes a daily plan or schedule change, DayWeavr shows you why — which deadlines, priorities, or Balance Goals drove the suggestion — and you can accept, swap, or reject any item before it is committed to your schedule.
• Third-party AI processing: generating these features requires sending the relevant context (such as your task list, deadlines, your request, and the contents of any non-CSV file or web page you import) to our AI infrastructure provider, Anthropic, for processing. That processing is governed by our contract with Anthropic and Anthropic's own data-handling terms for business/API customers, which restrict Anthropic's use of the data to providing the service to us rather than for training its general-purpose models.
• You stay in control: the AI's suggestions are proposals. Nothing the assistant generates is automatically applied to your real calendar or communicated to other people without your action.

6. Your Privacy Rights

We extend the following rights to all DayWeavr users, regardless of where you live, as a matter of product principle. Residents of California and other U.S. states with comprehensive privacy laws also have these rights as a matter of law; this section describes both.

6.1 Rights You Can Exercise

• Right to Know / Access — request confirmation of whether we process your personal information, and a copy or description of the categories and specific pieces of personal information we hold about you, the categories of sources, the purposes of processing, and the categories of third parties with whom it has been disclosed.
• Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions (for example, to complete a transaction, detect security incidents, or comply with a legal obligation).
• Right to Correct — request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing — as noted in Section 4.5, we do not sell or share personal information, so there is nothing to opt out of today. If that ever changes, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" mechanism in advance.
• Right to Limit Use of Sensitive Personal Information — to the extent DayWeavr processes sensitive personal information (see Section 6.2), you may request that we limit its use to what is necessary to provide the Service.
• Right to Non-Discrimination — we will not deny you the Service, charge you a different price, or provide a different level of quality because you exercised a privacy right.
• Right to Appeal — if we deny a rights request, you may appeal by replying to our denial notice; we will respond to appeals within 45 days.

6.2 Sensitive Personal Information

Certain information you may choose to include in DayWeavr — for example, precise location if you enable it, or health- or family-related details you type into a task description — could qualify as "sensitive personal information" under the CCPA. We use such information only as needed to provide the Service you requested (for example, displaying the task you wrote), and do not use it to infer characteristics about you or for any purpose beyond providing DayWeavr's core functionality.

6.3 How to Submit a Request

You can exercise these rights by emailing privacy@dayweavr.com with the subject line "Privacy Rights Request." We will need to verify your identity — typically by confirming account access or matching the request to information on file — before completing certain requests. You may also designate an authorized agent to submit a request on your behalf; we may require proof of the agent's authorization and separately verify your identity.

We will confirm receipt within 10 business days and respond substantively within 45 calendar days, which we may extend once by an additional 45 days when reasonably necessary (we'll tell you if we do, and why).

6.4 Global Privacy Control

DayWeavr's website recognizes the Global Privacy Control (GPC) signal. Because we do not sell or share personal information, a GPC signal currently has no additional practical effect on your data — but we treat it as a valid, honored opt-out preference signal in the event that ever changes, and we do not set non-essential tracking cookies in response to a detected GPC signal.

7. Data Retention

We retain personal information for as long as your account remains active, and for a limited period afterward as described below, unless a longer period is required to comply with a legal obligation, resolve a dispute, or enforce our agreements.

• Account and content data: retained while your account is active, and for 30 days after account deletion to allow for accidental-deletion recovery, after which it is permanently deleted from production systems.
• Backups: deleted data may persist in encrypted backups for up to 90 days before being purged as part of our normal backup rotation.
• AI interaction logs: retained for 12 months to support product improvement and troubleshooting, then deleted or de-identified.
• Usage/log data: retained for 12 for security and analytics purposes, then deleted or aggregated in de-identified form.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit (TLS) and at rest, database-level row-level security policies that restrict data access to its owner (and only the specific collaborators a user has explicitly shared with), and access controls limiting employee/contractor access to what is necessary for their role. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

DayWeavr is not directed to, and account registration is not available to, individuals under 18 years of age. Household or family members under 18 may appear as a name or task assignee within a Group created and controlled by an adult account holder, but minors do not create their own DayWeavr account or log in directly. If we learn that we have collected personal information directly from someone under 18 through their own account, we will delete it. If you believe a minor has created an account, please contact us at privacy@dayweavr.com.

10. Cookies and Similar Technologies

DayWeavr uses cookies and similar technologies for the following purposes:

• Essential cookies: required for login sessions, security, and core functionality. These cannot be disabled without breaking the Service.
• Preference cookies: remember settings such as timezone display or view preferences.
• Analytics: help us understand aggregate usage patterns so we can improve the product.
• We do not use third-party advertising cookies or cross-site tracking pixels. As noted in Section 6.4, we honor Global Privacy Control signals.

11. Third-Party Links and Integrations

DayWeavr links to and integrates with third-party services you choose to connect (such as Google Calendar, Microsoft Outlook, Apple Calendar, and our payment processor). Those services have their own privacy policies and practices, which we encourage you to review. We are not responsible for the privacy practices of third-party services, even when you access them through a DayWeavr integration.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, the Service, or legal requirements. If we make a material change, we will notify you by email and/or an in-app notice before the change takes effect, and update the "Last Updated" date above. Your continued use of DayWeavr after a change takes effect constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions about this Policy or wish to exercise a privacy right, contact us at:

Slowstarr LLC (operator of DayWeavr)

3926 W. Touhy Ave., Suite 148

Lincolnwood, IL 60712

Email: privacy@dayweavr.com