Privacy Policy
Last updated: March 28, 2026
Wouldwork (“Wouldwork,” “we,” “us,” or “our”) operates the Family calendar web application (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the Service, including when we send you text messages or emails for account security (such as one-time sign-in links or verification messages).
1. Scope
This policy applies to personal information we process in connection with the Service. It is intended to align with common privacy expectations and with requirements that apply to SMS-based authentication and customer communications, including guidelines from mobile industry associations and our messaging providers, as well as expectations for transactional email used for sign-in and security.
2. Information we collect
- Account and contact data: such as your phone number or email address when you choose phone- or email-based sign-in, or when you provide contact information for account recovery or profile purposes.
- Authentication data: including session tokens, cookies, and similar technologies that keep you signed in securely.
- Service data: content you create in the Service (for example, calendar information associated with your account).
- Technical data: such as device or browser type, IP address, and standard server logs used for security, debugging, and reliability.
3. How we use information
We use personal information to:
- Provide, operate, and maintain the Service;
- Send transactional text messages and emails you request or that are necessary for security (for example, one-time codes and magic links for sign-in), including via providers such as Twilio (SMS) and our email delivery configuration (SMTP or similar);
- Protect against fraud, abuse, and security threats;
- Comply with law and enforce our terms; and
- Improve the Service in accordance with applicable law and your consent where required.
We use SMS and sign-in email only for operational and security-related messages tied to your use of the Service (for example, when you ask us to send a magic link). We do not use these channels for marketing unless we have obtained any legally required consent and provide appropriate opt-out mechanisms.
4. Legal bases (where applicable)
Depending on your region, we may rely on one or more of: performance of a contract, legitimate interests (such as securing accounts, preventing abuse, and improving reliability), consent where required, and legal obligation.
5. How we share information
We may share personal information with:
- Service providers who help us operate the Service (for example, cloud hosting, database, analytics, authentication, and communications). Our SMS delivery provider may be Twilio Inc., which processes phone numbers and message content as needed to deliver texts on our behalf. Email magic links are sent using email infrastructure we configure (such as SMTP or a transactional email provider), which processes email addresses and message content as needed to deliver mail on our behalf.
- Authorities when required by law, legal process, or to protect rights, safety, and security.
- Business transfers such as a merger or acquisition, subject to appropriate safeguards and notice where required.
We do not sell personal information as “sale” is commonly understood under U.S. state laws.
6. Cookies and similar technologies
We use cookies and similar technologies for session management, security, and preferences. You can control cookies through your browser settings; disabling certain cookies may limit sign-in or features.
7. Retention
We retain personal information only as long as needed for the purposes described here, unless a longer period is required or permitted by law. Retention varies based on the type of data and operational or legal needs (for example, security logs, fraud prevention, or backup systems).
8. Security
We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
9. International transfers
We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
10. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict certain processing of your personal information, or to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact legal@wouldwork.com. We may need to verify your request.
For SMS, you can typically opt out of further messages as described in our Terms & Conditions (for example, by replying STOP where supported for program messages). Note that opting out of security texts may limit phone-based sign-in. For email sign-in, messages are sent because you request a link to your address; if you no longer wish to use email sign-in, you can avoid requesting new links and may contact us at legal@wouldwork.com for account-related requests.
11. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe we have collected information from a child.
12. Third-party services
The Service may contain links to third parties or integrate third-party features. Their practices are governed by their own policies. We encourage you to review your carrier's and providers' privacy materials (for example Twilio for SMS, and the policies of any email host or transactional email service we use) if you receive messages through their infrastructure.
13. Changes
We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Where appropriate, we will provide additional notice.
14. Contact
Questions about this Privacy Policy: legal@wouldwork.com