Privacy Policy

Last updated 2026-09-28

This policy is issued by Two Threads Collective, LLC ("WOVAN," "we," "us," or "our"), a New York limited liability company, and describes how we handle information for the WOVAN app.

1. What we collect

• Guardians: name, email (verified), phone number (collected, not yet verified).
• Teens 13 and older: name, email (verified). No phone number is collected.
• Children under 13: no account and no login. A parent sets up the child's device and gives consent first; see section 7, "Children under 13."
• Phone numbers of people you invite: if you invite a guardian to join your family — whether you're a teen inviting a parent, or a guardian inviting a co-guardian — we collect that person's phone number to facilitate the invite.
• Extra emergency contacts (teens 13 and older only): the name, phone number and email of someone outside the family whom a guardian approves to receive a teen's SOS alerts, for a period the guardian sets.
• Device information: each device's notification token (so we can send it alerts), its platform (iOS or Android), and the app version.
• Location, only during an SOS: when someone sends an SOS, their device's location at that moment, shared with the people that alert goes to.
• Activity on a kid's device: locks, schedules, requests for more time and similar events, shown to the family as an activity history.

2. What we don't collect

We do not read or store the content of text messages or other messaging-app conversations, and we do not track continuous or live location: location is collected only when someone sends an SOS. Screen-time features, once built, report app usage categories and time — not message content, browsing history, or contact lists.

3. We do not sell your data

We do not sell or share your personal information with third parties for their own marketing or advertising purposes, and the app doesn't currently use any advertising or analytics SDKs.

4. Who can see what

A family's data is visible only to that family's guardians and, where the app design specifically shows it to them, that family's teen or child. Data is never shared with another family without an explicit, mutual, two-sided approval.

5. Third-party service providers

We use Amazon Web Services (Cognito for authentication, DynamoDB for data storage) and Amazon Simple Email Service for account-related email. Notifications are delivered through Expo's push service, and from there by Apple or Google to the device. These providers store and process data on our behalf, under their own security safeguards, and are not permitted to use your data for their own purposes.

6. Data retention and deletion

SOS alerts, including any location they carry, and the activity history are deleted automatically after 90 days. Everything else is kept for as long as your account is active, so the app can function. Deleting your account deletes your data as described in our Terms of Service, and removing a kid from a family deletes that kid's data.

7. Children under 13

This section is our notice to parents under the Children's Online Privacy Protection Act (COPPA).

How it works. A child under 13 never creates an account or logs in. A parent or guardian adds the child in their own WOVAN app, gives consent there, and receives a confirmation email. The parent then sets up the child's device with a one-time code. That device receives a credential that can act only as that one child.

What we collect from a child's device, and why:

• The child's first name and age, as the parent entered them, to show the family who is who.
• Which device is the child's, and its notification token, so WOVAN can reach it with schedule changes and alerts.
• The device's location, only when the child sends an SOS, so their guardians can find them.
• What happens on the device (locks, schedules, requests for more time), to show the family's activity history.

Who sees it. Only the child's guardians in their WOVAN family. We don't disclose a child's information to anyone else. Extra emergency contacts outside the family are not available for children under 13. We show no ads, do no analytics about children, and never sell data.

How long we keep it. SOS alerts and the activity history are deleted after 90 days. Everything else is kept until the parent removes the child from the family, which deletes the child's data and stops the child's device from working with WOVAN at once.

A parent's rights. A parent can review the information we hold about their child, have it deleted, or refuse further collection at any time. In the app, removing the child from the family does all three. You can also email hello@getwovan.com. We won't require a child to disclose more information than a feature reasonably needs.

Who we are. Two Threads Collective, LLC, New York, operates WOVAN. Contact: hello@getwovan.com.

8. Your rights

You can request a copy of the personal data we hold about you, ask us to correct inaccurate data, or request deletion at any time by emailing hello@getwovan.com. We'll respond within a reasonable time, consistent with applicable law.

9. International data transfer

Our servers are located in the United States, and we don't currently target users outside the US. If that changes, we'll update this policy.

10. Security

Data is encrypted in transit and at rest. Access to a family's data requires authentication as a member of that family — see our engineering practices for more if you're technically curious.

11. Changes to this policy

The date at the top of this page is the effective date of this version — changes take effect as soon as they're posted here. We encourage you to check this page periodically.

12. Contact

Questions about this policy: hello@getwovan.com