Privacy Policy

WWW Protocol ('we', 'us', 'our') is a private household and community management platform. This policy explains how we collect, use, store and protect your personal information.

Account information: Your name, email address, and password (hashed with bcrypt — never stored in plain text).

Household data: Member profiles, tasks, calendar events, vault documents and health notes you choose to enter.

Usage data: Page visits, feature interactions and error logs used solely for improving reliability.

AI configuration: If you connect an external AI provider, your API key is stored in encrypted form (AES-256 via Fernet). We never transmit it to third parties other than the provider you nominate.

To deliver the core service — household management, calendar, vault, ventures and community features.

To operate the Elias AI sidekick (your data stays within your household context and is not used to train any model).

To send transactional emails such as email-OTP verification codes.

We do not sell, rent or share personal data with advertisers or data brokers.

Your data is retained for as long as your account is active. You may request full deletion at any time by contacting us.

Deleted accounts are purged from our primary database within 30 days. Backups are rotated within 90 days.

Passwords are hashed with bcrypt. Sensitive fields (API keys, credentials) are encrypted at rest with AES-256.

All traffic is served over HTTPS. Access to production infrastructure is restricted to authorised personnel.

Despite these measures, no system is perfectly secure. Please use a strong, unique password.

You have the right to access, correct, export or delete your personal data at any time.

To exercise these rights, or to raise a privacy concern, contact us at legal@wwwprotocol.app.

We will post any material changes here and update the 'Last updated' date. Continued use of the platform after changes constitutes acceptance of the revised policy.