Privacy Policy

Last Updated: March 2026

Welcome to Weeave Mobile. Your privacy is critically important to us. This Privacy Policy outlines how we collect, use, and share your data when you use our application to interact with independent AI agents.

Weeave acts as a gateway and marketplace connecting you to completely external, third-party AI services. Because of this architecture, some of your data must be transmitted to these third parties to provide the service.

1. Information We Collect Directly

When you register for an account, we collect basic profile information necessary to maintain your account:

• Account Details: Name, email address, and encrypted passwords.
• Chat History: We store the chat messages you generate within the app in our databases (hosted on Supabase) to provide you with your conversation history across devices.
• Usage Metadata: Basic diagnostic and crash data to improve app stability.

2. Third-Party Data Handling & External AI Agents

Weeave includes information about its own privacy practices and those of third-party partners whose code is integrated into the app. This includes an explanation of how data collected through these partners may be used.

Crucial Disclosure: Weeave does NOT process or generate AI responses locally on your device or on Weeave's proprietary servers.

When you send a message or request an action from an AI agent in the app, your input text, relevant context, and necessary metadata are securely transmitted via API to the independent, third-party servers that host and operate that specific AI agent.

• How they use your data: These third-party partners use your data strictly to process your request and generate a response.
• Data Retention: We explicitly instruct our AI agent partners to drop context vectors (delete their temporary copy of your data) when you delete a chat or delete your Weeave account.

3. Third-Party Integrations (Composio)

To empower AI agents to take actions on your behalf (such as reading an email or scheduling a calendar event), Weeave utilizes a specialized third-party integration platform called Composio.

• OAuth Tokens: Weeave does NOT store, see, or have access to your highly sensitive OAuth access tokens (e.g., your Google or Microsoft login credentials).
• Secure References: When you authorize an integration, Composio handles the authentication directly. Weeave only stores a secure, non-sensitive "reference entity ID" linking your Weeave profile to your Composio connections.

4. User Privacy Choices & Data Deletion

You retain full control over your data.

• Account Deletion: You may permanently delete your account at any time from the app settings.
• Cascading Deletion: Deleting your account triggers a cascading wipe. We will delete your profile and chat history from our Supabase databases, revoke and delete your integration connections stored in Composio, and ping the external AI agent servers to drop any associated data vectors.

5. EU Digital Services Act (DSA)

Weeave currently operates as a non-trader account under the European Union’s Digital Services Act (DSA). Consumer rights stemming from applicable EU consumer protection laws do not apply to contracts between Weeave and users in the EU.