Woven Privacy Policy

Effective October 24, 2026

Who operates Woven: Woven is operated by Colby Messih / SavannahTech. For privacy questions, support or deletion assistance, contact colbymessih@gmail.com. Woven is independent of USC, its councils and the houses shown. Naming USC Panhellenic as a proposed approval organization does not mean it has partnered with or endorsed Woven.

Information we process: Friend-circle use creates an anonymous device account. We process your first name, circle name, membership, private invitation codes, authentication identifiers, notification device token, help requests and acknowledgments. When you enable sharing, we process location coordinates, accuracy and timestamps. Representatives use a separate email/password account; we also process their name, verified email, chapter, claimed role, verification reference, approval status, duty status and responses. Authorized administrators review applications and approve or revoke roles. Do not submit government identification, passwords, private student records or medical information as evidence.

Location sharing and help requests: Sharing starts only after you enable it and grant permission. Sessions last up to four hours and can be stopped in Settings. Circle members see recent shared positions; positions older than two minutes are not shown. We store the latest circle position rather than a route history. A help request may retain a location snapshot. Requests expire after 15 minutes; ending a request removes its snapshot. Expired records may remain stored until overwritten, removed by account deletion, or deleted during maintenance, but cannot be read as active requests. Background updates and push delivery depend on permission, connectivity and iPhone settings.

Optional fraternity response: Your circle is always included in help requests. If you explicitly enable house responders for a selected house, your first name, request and attached location snapshot are also shared with that house’s approved, on-duty representatives. Their name, role and acknowledgment are visible to you and your circle. Pending, expired, revoked and other-house applicants cannot access these requests. Administrators see application information; administrator status alone does not provide student locations. Approvals last up to 90 days and on-duty sessions up to four hours. Approval does not guarantee a response or safety.

Providers and data use: Supabase hosts authentication, database and server functions. Resend delivers representative account-confirmation emails through our configured email sender. Apple processes push notifications and map/direction requests. The SavannahTech website uses Wix. These providers process information as needed to operate their services. Woven does not sell personal information, show ads, or use advertising tracking. We use data to operate private circles, deliver requests, manage verification and respond to support issues.

Retention and deletion: Circle membership, account records, device tokens, requests and representative verification information remain stored as needed to operate the service until account deletion or other removal. Stopping sharing removes your current circle position. Settings offers Delete my Woven account and data; the representative portal has a separate deletion option for that separate account. Deletion removes associated memberships, locations, requests, device tokens and representative application/role data. Deleting one account does not delete a separate account you created. Authentication credentials use iPhone Keychain. Uninstalling does not delete server data.

Intended audience and safety: Woven is intended for adults age 18 and older. It is a coordination tool, not an emergency service, and does not guarantee safety, location availability, notification delivery or anyone’s arrival. In immediate danger, contact emergency services directly.

Changes: We may update this policy as Woven changes. The effective date above identifies this version. Contact colbymessih@gmail.com with questions.