The privacy promise

What Wehoopoe reads

The school messages you choose to send us — forwarded emails, shared screenshots, photographed letters. We process them for exactly one purpose: finding the dates, payments, forms and reminders inside so they can appear on your family's shared week. We keep the original message so you can always check what the school actually said.

Sometimes that includes sensitive things

School messages occasionally contain dietary or medical details — an allergy menu, a medication reminder. By forwarding a message, you're choosing to store what's in it. We treat those details exactly like everything else: stored securely, shown only to your family, used to build no profile of anyone, ever. If you'd rather we never hold something, simply don't forward it — or delete the message afterwards.

What we store, where, and for how long

Your account (name and email), your children's first names and year groups, the messages you send in, and the items extracted from them. Everything lives with our database provider Supabase in London, United Kingdom. Attachments live in private storage that only your family can access.

Retention: original message content — bodies and attachments — is automatically deleted 12 months after it arrives. The extracted items (and the school's quoted sentence behind each one) are yours, and stay until you delete them.

The AI part, honestly

Extraction is done by Anthropic's Claude, a leading AI model. Your messages are sent to Anthropic's API — processed in the United States — to be read. Under Anthropic's API terms your content is never used to train their models; API inputs may be retained briefly by Anthropic for abuse monitoring and are then deleted. No profile of your family or your children is ever built from any of it.

Who handles your data

Four companies process data on Wehoopoe's behalf, each doing one job:

• Supabase — database and file storage (London, UK).
• Anthropic — AI reading of your messages (United States).
• Resend — receiving your forwarded emails and sending the Sunday digest (EU inbound).
• Vercel — running the app itself (served from London).

What we will never do

• Sell or share your data with advertisers — there are no ads, ever.
• Read email you haven't chosen to send us.
• Build marketing profiles of you or your children.
• Charge for the parts that connect your family — the partner invite and calendar feed are free forever.

Who can see your family's things

Only the people in your family — everyone joins through your private invite link. Every family's data is isolated at the database level; no other family can ever see yours. Your calendar feed uses an unguessable private address that you can treat like a password — and reset in one tap from Settings if it ever leaks.

Leaving

Settings → Account → delete your family. It removes everything — messages, items, attachments, children, the lot — immediately, for both parents. No exports held back, no 30-day limbo, no questions. Prefer a human? Email us and we'll do it for you.

Questions

Wehoopoe is built by a parent, for parents. Write to hello@wehoopoe.com and a human answers.