Privacy Policy

1. Introduction

Welcome to Couple’s Weekly Check-in (weeklycheckin.app). Protecting your personal data is very important to us. This privacy policy informs you about what data we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

The controller within the meaning of the GDPR is:

Jakob Maximilian Pelz
Olenhoffweg 1a
21614 Buxtehude
Germany
Email: weeklycheckinapp@gmail.com

2. Data Collected

We collect and process the following categories of personal data:

2.1 Account Data

• Name
• Email address
• Password (stored with bcrypt encryption)
• Email verification status
• Account creation date

2.2 Check-in Data

• Weekly responses (appreciations, friction points, needs)
• “Risk to watch” entries (private, never shared with your partner)

2.3 Couple Data

• Couple space name
• Partner invitations
• Shared memories

2.4 AI-Generated Data

• Weekly summaries
• Suggested agreements

2.5 Technical Data

• Session cookies (NextAuth.js)
• Language preference

3. Use of Data

We use your data for the following purposes:

• Providing and operating the Couple’s Weekly Check-in service
• Authentication and account management
• Conducting weekly check-ins between partners
• Generating AI-powered summaries of your check-in responses
• Sending email notifications (verification, reminders, invitations, password reset)
• Improving and developing the service
• Fulfilling legal obligations

4. Third-Party Services

We use the following third-party services to provide our offering:

4.1 OpenAI

Check-in responses (appreciations, friction points, needs) are sent to OpenAI to generate AI summaries. Private “Risk to watch” entries are not sent to OpenAI.

4.2 Resend

We use Resend for sending transactional emails, including email verification, check-in reminders, partner invitations, and password reset.

4.3 Railway

Our application and PostgreSQL database are hosted on Railway.

5. Data Sharing Within the Couple

Visible to your partner

• Appreciations, friction points, and needs
• AI summaries
• Agreements
• Shared memories

Never shared

• “Risk to watch” entries (only visible to the author)
• Password
• Session information

6. Cookies and Tracking

We only use technically necessary cookies:

• Authentication cookie (NextAuth.js) – required for login and session management
• Language preference cookie (next-intl) – required for storing your preferred language

We do not use analytics cookies or advertising cookies. No third-party tracking takes place.

7. Data Storage

Your data is retained as long as your account is active. Upon account deletion, all personal data is permanently and irreversibly removed.

You can delete individual check-ins at any time. Deleting the couple space requires the consent of both partners.

8. Your Rights Under the GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15 GDPR) – You have the right to obtain information about your stored personal data.
• Right to rectification (Art. 16 GDPR) – You may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) – You may request the deletion of your data. This can also be done via account settings.
• Right to restriction of processing (Art. 18 GDPR) – You may request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR) – You have the right to receive your data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR) – You may object to the processing of your personal data.
• Right to withdraw consent (Art. 7(3) GDPR) – You may withdraw a given consent at any time.

To exercise your rights, contact us at: weeklycheckinapp@gmail.com

9. Data Security

We implement the following technical measures to protect your data:

• Data transmission encryption via HTTPS/TLS
• Secure password storage using bcrypt hashing
• Session-based tokens with automatic expiry
• Email verification to confirm identity

10. International Data Transfers

Your data may be transferred to countries outside the European Economic Area (EEA), e.g. to the USA (for processing by OpenAI). In such cases, we ensure that appropriate safeguards are in place, in particular through EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

11. Children and Minors

Our service is not directed at persons under the age of 16. We do not knowingly collect personal data from children under 16. If we discover that data has been collected from persons under 16, it will be deleted immediately.

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed. Changes will be published with a new “Last updated” date on this page. We recommend that you visit this page regularly.

13. Contact

If you have any questions about data protection, you can contact us at any time:

Jakob Maximilian Pelz
Olenhoffweg 1a
21614 Buxtehude
Germany

Email: weeklycheckinapp@gmail.com