Version 1.2.0
Privacy Notice Version 1.2.0 · 23 September 2026
1. Controller and contact
Nikali Ltd. is the controller responsible for WeekBuffer's account, household-planning and website processing. It is a Bulgarian single-member limited liability company, UIC 207724645, VAT BG207724645, registered in the Bulgarian Commercial Register at 8 Belite Borove St., Gorna Banya, Sofia, Bulgaria. Write to privacy@weekbuffer.com or to that address. Service contact: support@weekbuffer.com. Security reports: security@weekbuffer.com.
This notice covers website visitors, account holders, household partners, people represented by the minimal household labels and planning times an adult supplies, and people receiving invitations or care requests. It does not cover other Nikali products. You do not have to agree to this notice as a condition of exercising privacy rights. Marketing and optional analytics have separate choices.
Nikali is established in the EU. WeekBuffer currently offers accounts and paid services only to residents of the United States, EU member states and Australia; the UK launch is deferred. No UK representative has been appointed. We will assess applicable representative obligations before any UK rollout. This market restriction does not remove privacy rights that apply to a website visitor or other person. Privacy enquiries are handled by Nikali's operator; no statutory Data Protection Officer appointment is represented by the privacy email address.
2. Information and sources
Account information: your email, authentication information, account identifier, verification and session state, optional multi-factor authentication, profile preferences, household membership and records of the Terms and optional choices you make. Authentication is handled by Supabase. Do not send passwords or recovery codes to support.
Family planning: minimal adult, child and place labels; work and care windows; assignments; travel and routine estimates; return-to-work dates; backup availability and confirmation states; scenarios; rehearsal observations; derived conflicts and plan history. These come from the adults who enter or update them, from your own actions and, if you connect a calendar, from the selected provider sources. Children do not use WeekBuffer or create accounts. Adults use a nickname or other minimal child label for planning; we do not request a child's full name, date of birth, contact details, photo, exact address, medical history, school name or identity document. A nickname and schedule may still identify someone within a household and are treated as personal data.
Caregiver and invitation information: an initiating adult can provide your name or label, email and the specific request. Your response, stop choice, delivery status and limited evidence of the interaction are recorded. The initiating adult is the source; providing your address is not consent on your behalf. The request identifies the sender and gives a way to view this notice and stop that household's requests.
Google information: with your authorization, we process connection identifiers and encrypted credentials, selected calendar identifiers and owner-private labels, necessary event timing, recurrence identifiers and status information. Normalized planning data excludes event titles, descriptions, attendees and exact locations. Optional Protected Busy Blocks use separate permission to create and manage generic Busy entries in your chosen owned calendar. An authorization does not make every calendar available to your household.
Payment information, when purchases are offered: order and customer references, offer, amount, currency, tax and invoice references, access periods, subscription state and payment/refund/dispute notifications. Card details and payment authentication are handled in the provider's hosted checkout, not stored as card data by WeekBuffer. The provider may collect billing address, payment and fraud-prevention information under its own notices.
Operational information: service actions, errors, security events, request identifiers, support correspondence, privacy requests and delivery metadata. Hosting and authentication providers necessarily receive connection information such as IP addresses, browser/request details and access times. WeekBuffer's planning/evidence tables are designed to avoid raw IP addresses, user-agent histories, private event text and message bodies in logs. That design is not a claim that infrastructure providers never process network identifiers.
3. Why we process information
We use your account and requested planning information to provide and administer the service under our contract with you, including steps you request before purchase. We use information about other household members, children and helpers on the basis of legitimate interests in providing the requested household coordination, subject to their interests, rights and safeguards. Your contract is not treated as a contract with a child or an unregistered helper. Do not provide special-category information such as health data; ordinary planning does not require it.
We use proportionate security, abuse-prevention, operational and limited contract-evidence processing for legitimate interests in protecting people and the service, investigating problems and establishing or defending claims. We use information to meet applicable accounting, consumer and data-protection obligations where the law requires it. We do not claim that every retained record is legally mandated. Optional analytics and marketing rely on a separate affirmative choice; neither is necessary to use an account. A Google permission is technical authorization and is not consent to unrelated advertising or processing.
If required account information is missing, we cannot create or secure the account. Missing optional planning facts may produce an Unknown or incomplete result. You can use manual planning without connecting Google. Refusing marketing or analytics does not reduce paid access.
4. Sharing and visibility
Admitted household adults see shared inputs, care arrangements and derived plans needed for coordination. Private calendar credentials, owner-private calendar labels and raw event content are not shared as household event details. A caregiver's narrow request page shows the initiating adult, the relevant child label, date, time, action and any care label deliberately shared for that request. It does not expose other children, the household work calendar or plan risks. Keep private links private.
Restricted operators may access the minimum information needed for support, security and rights handling. We use Supabase for database/authentication, Lovable for hosting, Google for an authorized calendar connection, Resend for enabled email delivery and Stripe/Link for offered payment services. The public provider register at https://weekbuffer.com/subprocessors explains their functions, processing locations and the limits of verified contractual information. Providers may also act independently for their own account security, legal and transaction duties; they are not all described as our subprocessors for every purpose.
We may disclose information where legally required, to establish or defend legal claims, or to protect people from a serious threat, using appropriate checks and minimization. A business transfer would require continued protection, an appropriate legal basis and notice of material changes; it is not an unrestricted permission to sell family records. Google API user data may be transferred in a merger, acquisition or sale of assets only after obtaining explicit prior consent from the user and subject to the Google Limited Use requirements.
We do not sell personal information, share it for cross-context behavioural advertising, build advertising audiences from household data, or use Google user data to train generalized AI models. WeekBuffer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google data is used only for the disclosed user-facing calendar functions, necessary security/legal purposes and permitted service operation. Human access is restricted to permitted cases, such as your specific support authorization, security investigation or legal requirements. Policy: https://developers.google.com/terms/api-services-user-data-policy.
5. Locations and international processing
Nikali operates in Bulgaria. The currently configured Supabase database region is Ireland (eu-west-1). This does not mean every provider, support operation, backup or onward recipient is in Ireland or the EU. Provider arrangements can involve the United States, Singapore and other locations listed in their current provider information. There is no blanket EU-only residency promise.
Where an applicable law restricts a transfer, the relevant arrangement must use a valid adequacy decision or appropriate contractual safeguards, with additional measures where needed. Supabase and Resend publish data-processing terms containing EU standard contractual clauses and UK transfer provisions. Publication of a provider's standard terms is not evidence of every account-specific contract or onward transfer. WeekBuffer uses Lovable Business. The standard Data Processing Agreement with Lovable Labs Incorporated applies automatically to the upgraded workspace and governs Lovable processing end-user personal data on our behalf. The agreement is available at https://lovable.dev/data-processing-agreement and the current subprocessor list at https://trust.lovable.dev/subprocessors. Its international-transfer provisions include EU standard contractual clauses where applicable. A plan name or provider listing alone is not a transfer safeguard; the applicable contractual terms and safeguards govern the actual processing. Contact privacy@weekbuffer.com for current information and a copy or description of applicable safeguards, with confidential material redacted where necessary.
6. Storage and retention
Active account and household records remain while needed to provide the service. Archiving an item, leaving a household, cancelling a subscription and deleting an account have different effects. Paid access ending does not itself delete your records. Use the Privacy Center or email us to request deletion or a review of continued retention.
The application uses these bounded periods for operational categories: temporary browser Stress Test answers up to 24 hours; unsynchronized rehearsal observations up to 24 hours; an explicitly chosen currency up to 180 days; encrypted export access up to 24 hours and a single-use download capability up to 60 seconds; raw payment-webhook replay data and email event metadata 30 days; settled notification/support evidence generally 180 days; error evidence generally 90 days; security evidence generally 365 days; routine audit and incident evidence generally 730 days. Open investigations, active references and a documented legal hold can require longer retention for the relevant limited records. Expired data is purged in bounded maintenance batches, so access expiry and physical removal are not always simultaneous.
Account/household deletion revokes access and queues scoped erasure, including external cleanup. It is not a promise that every provider copy disappears instantly. The deletion process retains a minimal, time-limited projection of necessary contractual, consent, payment and security evidence without names, emails, family/calendar content or original account/household identifiers; its normal evidence expiry is 730 days, with completed deletion-status references normally removed after 30 days. Separate statutory accounting records and a specific legal claim may require a different period, limited to the records needed for that purpose. For a recurring purchase, verification of affirmative renewal consent is a separate, restricted transaction record: it must remain attributable to that purchase for at least three years from consent or one year after that subscription ends, whichever is later. It does not include family schedules or calendar content. This record is not subject to the routine 730-day deletion-evidence limit. Where the transaction merchant holds the required evidence, its record and privacy obligations also apply. Provider-held financial records remain subject to that provider's legal duties. Backup expiry follows the actual provider backup cycle; no unverified maximum backup-erasure period is promised. If data is restored, relevant deletion restrictions must be reapplied.
7. Your controls and rights
You can correct your inputs, manage household access, disconnect Google, change notification choices, export eligible information, and request account or household deletion through https://weekbuffer.com/app/settings/privacy. Owners and partners have different authority over shared records; another adult's private data is not included merely because you own a household. People without an account, including caregivers and parents acting for a child, can contact privacy@weekbuffer.com. We verify authority proportionately and do not routinely ask for identity documents by email.
Subject to applicable conditions, you can request access, correction, erasure, restriction, portability and objection, and withdraw consent without affecting earlier lawful processing. You can object to direct marketing at any time. We explain any refusal, extension or lawful retention and how to challenge it. For GDPR requests we respond without undue delay, normally within one month; a permitted extension is explained within that first month. There is normally no fee. We do not disadvantage you for exercising a right.
You can complain to Bulgaria's Commission for Personal Data Protection at https://cpdp.bg or an applicable authority where you live or work. UK privacy complaints can be made to https://ico.org.uk. Australian individuals may use https://www.oaic.gov.au where its jurisdiction applies. US residents can contact their state privacy regulator or attorney general. You do not need our permission to complain.
8. Regional information
EU/EEA and UK: the purposes, bases, rights, recipients and transfer information above apply as relevant. Account and paid-service availability is currently limited to the US, EU and Australia; the reference to UK rights is not an offer to UK residents. No automated decision by WeekBuffer is intended to produce a legal or similarly significant effect: calculations support your choices, do not assign care automatically and can be questioned through support.
United States: categories collected are identifiers/contact information, account/security information, household operational information, commercial information if you purchase, and derived scheduling results. Sources, purposes, recipients and retention are described above. We do not sell/share data for targeted advertising, perform targeted advertising, or infer sensitive health characteristics. We do not track your activities over time across third-party websites for advertising, or permit advertising networks to do so through WeekBuffer. No optional analytics or advertising tracker is currently enabled. Necessary service processing continues when Do Not Track or Global Privacy Control is enabled; the signal does not change that processing. There is no sale, advertising sharing or targeted advertising to opt out of. These signals never authorize additional collection. Use Privacy choices to control any optional category. A later introduction of processing subject to a legally recognized opt-out signal would require us to honour that signal before starting that processing.
US privacy requests: email privacy@weekbuffer.com or use the Privacy Center to request access, a portable copy, correction or deletion. You may also ask about categories, purposes and recipients, and exercise applicable rights concerning sale, sharing, targeted advertising, sensitive data and qualifying profiling. We do not carry out the advertising or qualifying automated-decision activities described above. We acknowledge requests and aim to resolve them within 30 days; if the applicable law permits and a complex request needs more time, we explain the reason and deadline before the initial period expires. A shorter mandatory deadline prevails. We verify identity and authority proportionately, use verification information only for that purpose, and do not require an account or purchase for an email request. An authorized agent may submit a request with proof of authority; direct identity confirmation may be needed where permitted.
If we refuse all or part of a request, we explain why and how to appeal. Email privacy@weekbuffer.com with the subject Privacy appeal and your request reference. We review the decision and respond with reasons within 30 days, without prejudice to a shorter statutory deadline, and identify the relevant state regulator or attorney general if the appeal is denied. Ordinary requests are free; any legally permitted exception will be explained first. We do not discriminate for exercising privacy rights. We offer this contact-and-review process to all US users without representing that every threshold-based state privacy law applies to Nikali. The categories above include network/device information processed by infrastructure providers and information you voluntarily give support; they are not limited to the fields in your profile. We do not request biometric identifiers, precise geolocation or health records.
No child-directed service or child account is offered. An adult entering a nickname for household planning is not registering a child. If we learn that a child has submitted information through their own use of the service, we investigate, restrict the account where appropriate and delete the information unless lawful retention is required. Contact privacy@weekbuffer.com; a parent or guardian may also request review of a child label or related planning information supplied by an adult.
Australia: you may seek access/correction and complain to us through the contacts above. We will investigate and explain the result and applicable escalation options. Overseas processing is described above and in the provider register. Nothing in this notice asks you to waive an applicable protection under the Privacy Act or Australian Privacy Principles. We do not assume that small-business status alone settles all applicability questions.
9. Choices, security and changes
Analytics and marketing start off. No optional analytics or advertising provider is currently activated. Reopen Privacy choices on any page; see https://weekbuffer.com/cookies for device storage. Unsubscribing from marketing does not stop necessary account/security or transaction communications. A message already handed to a provider may still arrive. Caregivers can separately stop the originating household's requests.
We use server-side access checks, household isolation, restricted operational access, encrypted calendar credentials and signed provider-event validation. No internet service is risk-free, and no independent certification is claimed. We will notify affected people and regulators when required following a personal-data breach. Changes to this notice are versioned and dated; material changes are communicated appropriately and a new consent is obtained where required before an incompatible optional use.