Privacy policy

Weekend Folio is run by DCTR s.r.o., Pernerova 697/35, 186 00 Praha 8, Czech Republic, company ID (IČO) 14206986, VAT ID CZ14206986, registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 361572. DCTR s.r.o. is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

For anything about your data, write to hello@weekendfolio.com.

What we keep depends on what you use.

• Your account. Your email address and first name, from when you sign up. If you sign in with Google, Google shares your name, email address and profile picture with Clerk, our sign-in service.
• Your library. The links you save, and what we read from each page: the title, author, site name, the article text and the addresses of its pictures. For uploaded PDFs we also keep the original file, filename, extracted pictures, and extraction results. Also which articles you archived, and the issues you make, with their titles, designs and page sizes.
• Delivery. For printed copies: your name, address lines, postal code where used, city, region and country, and a delivery phone number. For delivery in Brazil, we also require and keep the recipient’s CPF, which Cloudprinter needs to fulfill the order.
• iMessage. If you link your phone: your phone number (or the Apple ID email address you text from), the line we give you, your messages and PDF attachments to the assistant and its replies.
• Kindle. If you set it up: your Send to Kindle email address.
• Print orders. Which issue was printed, the print file, the printer's order number, the status, the tracking link, the delivery details used for the order (including the recipient’s CPF for Brazil) and any error.
• Payments. The quoted print and shipping costs, tax, currency and total, payment status, and Stripe identifiers that connect a payment to your account and print order. Stripe collects your card details directly; we do not store your full card number or security code. If you save a card, we keep its Stripe identifier, brand, last four digits and expiry date, until you remove it.
• Technical data. Cloudflare, our host, processes your IP address and request details to deliver the site and protect it from attacks. Our server logs record errors and delivery results with your account ID.

• To run the service you signed up for: to save and show your articles, make your issues, deliver them as a PDF, to your Kindle or by mail, process your print payments, and run the iMessage assistant. Legal basis: our contract with you (Article 6(1)(b) GDPR).
• To keep the service safe and working: to prevent abuse and to find and fix errors. Legal basis: our legitimate interest in a secure, reliable service (Article 6(1)(f) GDPR).
• To answer you when you write to us. Legal basis: our contract with you, or our legitimate interest in answering.
• To meet legal duties, for example to keep payment records. Legal basis: a legal obligation (Article 6(1)(c) GDPR).

We do not use your data for advertising, we do not sell it, and we do not train AI models on it.

The assistant you text runs on Claude, an AI model made by Anthropic. To answer you, it sends Anthropic:

• your message, and up to 12 earlier messages of the conversation;
• your name, the name of your magazine, your plan and the date of your next issue;
• your Kindle address, and whether you have a delivery address (yes or no, not the address);
• what it looks up for you: article titles, sites and dates, your issues, and up to 1,200 characters of an article you ask about.

It never sends your email address, your phone number or your postal address.

We keep your last 100 exchanges with the assistant, so that it can follow the conversation. The assistant can make mistakes. Before it deletes articles, it asks you to confirm. Printed copies require your separate payment through Stripe.

These companies help run the service and receive the data described below. Some also process data under their own privacy policies.

To read the articles you save, our server fetches each page from its website; posts on X are read through the FxTwitter service. These sites see our server and the link, not who saved it. When you open an article in your library, its pictures load straight from the original website, which sees your IP address.

Some of these companies are based in the United States, among them Anthropic, Clerk and Resend, and Cloudflare runs worldwide. When your data leaves the European Economic Area, it is protected by safeguards that the GDPR allows, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. Write to us for details.

• Your account, library, issues, delivery details and Kindle address: for as long as you have an account. Delivery details include the recipient’s CPF for Brazil, and the details saved with each order. We save the delivery address you review and confirm, including an address chosen through optional Google search, for your deliveries. We do not save Google’s suggestion lists or other place details. When you delete an article or an issue, we remove it from our database. Deleting a PDF article also removes its stored original and extracted pictures from our file storage.
• Print files: for as long as you have an account, so that we can print an issue again if a copy goes missing.
• The assistant conversation: your last 100 exchanges.
• Your iMessage phone number: when you unlink your phone in Settings, we remove it from your account. The conversation with the assistant, and the number's registration with Photon, stay until you ask us to delete them or delete your account.
• Links: codes to link your phone expire after 30 minutes. Download links expire after 7 days, and the printer's file links after 14 days.
• When you delete your account, we delete your data within one month, except what the law makes us keep, such as records of paid orders.

We do not set our own advertising or analytics cookies. Clerk sets the cookies that keep you signed in. They are strictly necessary for the service, so we do not ask for consent to them. Optional address search loads Google’s browser service only when you choose to activate it; Google’s use of cookies and similar technologies is described in its Privacy Policy.

Under the GDPR, you can ask us to:

• show you the data we keep about you, and give you a copy;
• correct it (you can change most of it yourself, in Settings);
• delete it, or your whole account;
• limit how we use it, or give it to you in a format a computer can read;
• stop a use that is based on our legitimate interests, if you object to it.

Write to hello@weekendfolio.com from the email address of your account. We answer within one month.

You can also complain to a data protection authority. Our lead authority is the Czech Office for Personal Data Protection (ÚOOÚ). You can also go to the authority where you live or work; in Poland, that is the President of the Personal Data Protection Office (UODO).

All traffic to Weekend Folio is encrypted (HTTPS). Links to your files are signed and expire. We check the signature of every message from the iMessage service before we act on it. Only the people who run the service can reach your data, and only to run it.

Weekend Folio is not for anyone under 16, and we do not knowingly keep their data.

When we change this policy, we update this page and the date at the top. If a change is important, we also tell you by email before it applies. See also our terms of service.