Privacy Policy

Effective May 26, 2026

At WovenWork, we believe that transparency builds trust. We provide a platform designed to connect your daily physical routines to collective charitable impact. This Privacy Policy explains how we collect, use, and protect your personal and fitness tracker data.

1. Information We Collect

  • Account Information: When you create an account, we collect your name and email address. Authentications (passwords and profile data) are securely managed by our third-party provider, Auth0.

  • Payment Information: All donation payments and financial data are processed directly by PayPal. WovenWork does not store your credit card or bank account details on our servers.

  • Fitness Tracker Data: We connect to your fitness applications (such as Strava and Apple HealthKit) using the Terra API. We only collect and store Activity Completion Data (activity type, duration, distance, and completion timestamp). We explicitly do not collect, track, or store your precise geolocation/GPS maps, route histories, or biometric health data (such as heart rate).

2. How We Use Your Information

We use your information to operate our application, calculate micro-donations based on your activity milestones, deliver digital tax acknowledgment receipts, and allow you to share milestones voluntarily with your social networks.

3. Cookies and Similar Tracking Technologies

To ensure a secure, functional, and efficient experience, WovenWork uses lightweight tracking technologies on our application and landing pages:

  • Strictly Functional Cookies: We only place first-party session cookies and tokens essential to handle core system utilities. This includes managing authentication parameters through Auth0 so you remain securely logged in as you navigate the platform, protecting your profile details, and enforcing site security filters.

  • No Cross-Site Tracking: WovenWork does not deploy third-party cross-site behavioral tracking scripts, data brokers, or advertising network trackers (such as the Meta/Facebook Pixel) designed to track your online activities across other external websites or target you with advertisements.

  • Analytics Protocol: Any app-level behavior mapping or funnel analysis is restricted to in-app event logging via our secure, lightweight backend services to improve user flows. This data is collected solely to enhance product utility and is never packaged or shared for commercial advertising purposes.

4. Data Sharing and the "No-Sale" Promise

  • Our Core Promise: WovenWork does not sell, rent, trade, or share your personal or fitness data with third-party advertisers, data brokers, or corporate sponsors.

  • Operational Sharing: We only share data with essential infrastructure partners (like Auth0 and PayPal) strictly necessary to run the application.

  • Future Campaigns: If we partner with corporate sponsors for special charitable campaigns in the future, we will explicitly ask for your affirmative, opt-in permission before sharing any data.

5. Social Media Sharing

Our platform allows you to voluntarily post your fitness milestones or donation metrics to your personal social media accounts. These features use secure external API endpoints initiated entirely by you. WovenWork does not use tracking pixels or hidden cross-site tracking scripts to monitor your activity across the internet.

6. Data Retention, Deactivation, and Donor Audits

You can request account deletion at any time.

  • When an Athlete deletes their account, their personal identifiable information (name, email) and active profile are permanently wiped from our live database.

  • However, because completed donations represent legal financial transactions, historical activity logs that already triggered a financial donation must be preserved for donor tax validation and auditing. To protect the athlete, this data is locked as an Archived Transaction Record. The Athlete's name will remain visible only to the specific Donors who funded those past completed events on their historical receipts, but the profile will be marked as "Deactivated."

7. Children’s Privacy

WovenWork is strictly intended for individuals aged 13 and older. We do not knowingly collect personal data from children under 13. If we discover we have inadvertently collected data from a child under 13, we will delete it immediately.

8. Your Privacy Rights (Universal Protection)

Regardless of which US state you reside in, WovenWork grants all users rights aligned with high-standard consumer privacy regulations (including the California Consumer Privacy Act). This includes the right to know what data we hold, request a copy, or request data deletion.