Privacy Policy
Last updated: 15 June 2026
This Privacy Policy explains how The Spark Innovation Hubs LTD ("we", "us", "our") collects, uses and protects your personal data when you use WeeklyReset (the "Service"). We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
WeeklyReset is operated by The Spark Innovation Hubs LTD, a company registered in England and Wales under company number 16136501, with its registered office at Old Generator House, Unit 3, Bourne Valley Road, Poole, BH12 1DZ.
We are registered with the Information Commissioner’s Office (ICO) under registration number C1644033. For any privacy questions or to exercise your rights, contact us at privacy@weeklyreset.co.uk.
2. The personal data we collect
Information you give us
- Account data — your name, email address and password (passwords are stored in hashed form by our authentication provider; we never see them).
- Reset & reflection content — the text you enter in your brain dumps, calendar answers, environment audit, priorities, daily check-ins and Friday reviews.
- Referral data — your referral code and the connections you create by inviting others.
- Community content — anything you choose to post in community areas.
Information from connected services (optional)
- Google Calendar — if you choose to connect it, we access a read-only view of your calendar events for the planning week to help analyse your schedule. We do not edit, create or delete calendar entries.
Information we collect automatically
- Essential cookies — used to keep you signed in and secure your session (see our Cookie Policy).
- Technical data — limited log and device information required to operate and protect the Service.
3. How and why we use your data (lawful bases)
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Creating and managing your account; providing the Service | Performance of a contract |
| Generating AI insights, blueprints and coaching from your content | Performance of a contract |
| Accessing your Google Calendar | Consent (you connect it; you can disconnect at any time) |
| Sending service emails (e.g. your Weekly Blueprint, confirmations) | Performance of a contract |
| Securing, maintaining and improving the Service | Legitimate interests |
| Meeting legal and regulatory obligations | Legal obligation |
4. AI processing
To provide features such as brain-dump categorisation, priority refinement, weekly blueprints and reflections, the content you enter is sent to our AI provider, Anthropic PBC, for processing. This content is used only to generate your results. We do not use your personal content to train AI models, and our AI provider processes it as our data processor under contract.
5. Who we share your data with
We do not sell your personal data. We share it only with trusted service providers (processors) who help us run the Service, under contracts that require them to protect it:
- Supabase — authentication, database and hosting of your account and content.
- Anthropic PBC — AI processing of the content you submit.
- Resend — sending transactional emails.
- Google — calendar data, only if you connect Google Calendar.
- Vercel — application hosting and content delivery.
We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety and security of our users and the Service.
6. International transfers
Some of our providers are located outside the UK (for example, in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision, to ensure your data receives an equivalent level of protection.
7. How long we keep your data
We keep your account and content for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain certain information to meet legal obligations or resolve disputes.
8. Your rights
Under UK data protection law you have the right to:
- access a copy of your personal data;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten");
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email privacy@weeklyreset.co.uk. You also have the right to complain to the ICO at ico.org.uk, though we’d appreciate the chance to address your concerns first.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, row-level access controls so users can only access their own data, and access restrictions on our systems. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the ICO of any qualifying breach as required by law.
10. Children
The Service is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Significant changes will be brought to your attention.
12. Contact us
The Spark Innovation Hubs LTD
Old Generator House, Unit 3, Bourne Valley Road, Poole, BH12 1DZ
Email: privacy@weeklyreset.co.uk