Woven

Introduction

Welcome to Woven, a behaviour tracking app designed for parents and carers of neurodivergent children. Your privacy is extremely important to us. This Privacy Policy explains how RA Consulting Solutions ("we", "our", or "us") collects, uses, and protects your information when you use the Woven mobile application ("the App").

Information We Collect

Information You Provide

When using Woven, you may provide the following information:

• Child Profile Information: Name, date of birth (optional), diagnoses (optional), and notes
• ABC Entries: Antecedent, behaviour, and consequence observations, including intensity ratings, locations, times, and strategies used
• Positive Moments: Descriptions of wins and achievements
• Daily Context: Sleep quality, medication notes, and other contextual information
• Account Information: Email address and password (only if you choose to create an account for cloud sync)

Information Collected Automatically

The App does not automatically collect any personal information, analytics, or usage data. We do not use any third-party analytics or tracking services.

Voice Input

If you use the voice-to-text feature, audio is processed by your device's built-in speech recognition service (Apple Speech Recognition on iOS, Google Speech Recognition on Android). We do not store, transmit, or have access to any audio recordings.

How Your Data is Stored

Local Storage (Default)

By default, all your data is stored locally on your device using secure SQLite database storage. This means:

• Your data never leaves your device unless you explicitly enable cloud sync
• We cannot access your locally stored data
• If you uninstall the App, locally stored data will be deleted

Cloud Sync (Optional)

If you choose to create an account and enable cloud sync:

• Your data is encrypted in transit using HTTPS/TLS
• Data is stored securely on Supabase servers (hosted on AWS infrastructure)
• Cloud sync allows you to access your data across multiple devices
• You can delete your cloud data at any time by deleting your account

How We Use Your Information

We use your information solely to:

• Provide the core functionality of the App (tracking behaviours, generating insights, creating reports)
• Sync your data across devices (if you enable cloud sync)
• Generate PDF and CSV exports for your personal use or to share with healthcare professionals

Data Sharing

We do not share your personal information with any third parties, except:

• Service Providers: If you enable cloud sync, your encrypted data is stored on Supabase (our database provider). Supabase acts as a data processor and is bound by strict data protection agreements.
• Legal Requirements: We may disclose information if required by law or to protect our legal rights.
• Your Choice: You may choose to export and share your data (e.g., PDF reports with a healthcare professional). This sharing is entirely at your discretion.

Data Security

We implement appropriate technical and organisational measures to protect your data:

• Local data is stored in a secure SQLite database on your device
• Cloud data is encrypted in transit (TLS/HTTPS) and at rest
• Account passwords are securely hashed and never stored in plain text
• We use Row Level Security (RLS) to ensure you can only access your own data

Your Rights

You have the following rights regarding your data:

• Access: You can export all your data at any time using the App's export feature
• Correction: You can edit or update any of your entries within the App
• Deletion: You can delete individual entries, profiles, or your entire account
• Portability: You can export your data in CSV format for use elsewhere
• Withdraw Consent: You can disable cloud sync at any time and continue using the App with local storage only

Children's Privacy

Woven is designed for use by parents and carers to track information about children. The App is not intended to be used directly by children. We do not knowingly collect personal information directly from children under 16. All data entry and management should be performed by a parent, guardian, or authorised carer.

Data Retention

• Local Data: Retained on your device until you delete it or uninstall the App
• Cloud Data: Retained until you delete your account or request deletion
• Account Deletion: When you delete your account, all associated cloud data is permanently deleted within 30 days

International Data Transfers

If you enable cloud sync, your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last Updated" date at the top of this policy and, where appropriate, through the App. We encourage you to review this policy periodically.