Legal
Effective: May 3, 2026
Weft is a check-in and self-reflection app. You share personal data — mood, energy, stress, anxiety, written reflections, and life context — because that data is the product. This policy explains exactly what we collect, why, where it goes, and what rights you have over it.
Weft is operated by David Spedding ("we", "us"). Questions can be directed to privacy@myweft.app.
This policy covers the Weft mobile application and the website at myweft.app. By using either, you agree to the terms below.
Account and profile data:
Check-in and reflection data:
Life context data:
Social layer data (Threads):
Technical data:
We do not read individual users' check-in or reflection content except when required to investigate a specific support request you initiate, in response to a verified legal request, or to address a security incident.
We use the following service providers to operate Weft. Each is bound by their own privacy policy and applicable data processing terms:
Our service providers are based in the United States. If you access Weft from outside the United States, your data will be transferred to and processed in the United States. We rely on standard contractual clauses and the relevant providers' compliance frameworks where applicable.
Data is stored on Supabase, encrypted at rest and in transit. Row-level security policies enforce that users can only access their own data. The social layer exposes only the composite thread color to your connections — never raw scores, reflection text, or notes content beyond what is explicitly sent.
We use industry-standard practices to protect your data, but no system can be guaranteed fully secure. If we become aware of a breach affecting your personal data, we will notify affected users without undue delay and as required by applicable law.
Your data is retained for as long as your account is active. To request deletion of your account and all associated personal data, contact us at privacy@myweft.app. We will process deletion requests within a reasonable timeframe and confirm completion by email. Data may persist in encrypted database backups for up to 90 days following deletion before being permanently purged. Anonymized or aggregated data that cannot reasonably be linked back to you may be retained indefinitely.
Regardless of where you are located, you have the following rights with respect to your personal data:
To exercise any of these rights, email privacy@myweft.app from the address associated with your account. We may need to verify your identity before fulfilling certain requests.
California residents have the rights described above plus the right to know what categories of personal information we collect, the right to non-discrimination for exercising privacy rights, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA.
If you are in the European Economic Area or the United Kingdom, our legal basis for processing your personal data is:
You have the right to lodge a complaint with your local supervisory authority.
Weft uses Anthropic's Claude API to generate observations, clarifying questions, and reflections. Your check-in scores, reflection text, and life context are transmitted to Anthropic's API for the purpose of generating these responses. Under Anthropic's API terms, inputs are not used to train their models. We do not transmit your name, email address, or phone number to Anthropic.
The myweft.app website uses minimal first-party cookies necessary for basic functionality. We do not use third-party analytics, advertising trackers, or behavioral tracking on the website. Hosting infrastructure may collect standard server logs (IP addresses, request timestamps) for security and reliability purposes.
Weft is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal information, contact us at privacy@myweft.app and we will delete it promptly.
We will update this policy as the product evolves. Material changes will be communicated via in-app notice and via email to active users where practical. The effective date at the top of this page reflects the most recent revision. Previous versions are available on request.
David Spedding
privacy@myweft.app