Privacy Policy

Entrewoven Company, a Delaware corporation doing business as “Valles” (collectively, “Valles,” “we,” “our,” or “us”), is committed to protecting the privacy of the families and parents who use our Service. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have regarding your information when you use our Service and any related mobile applications (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. Consumer health data (including Health and Dietary Information, as defined below) is governed by our Consumer Health Data Privacy Policy, which applies to all U.S. members and requires your separate opt-in consent before any such data is collected or shared.

Valles is for adults (18+). Children never use Valles. Accounts may only be created and used by people 18 or older; children do not sign in or submit information to us. A parent or legal guardian records information about their own children, as described below.

Entrewoven Company is a U.S.-based Delaware corporation that operates a private communication and coordination platform for parents and family communities connected through schools. This Privacy Policy applies to all registered users of the Service.

We do not knowingly collect personal information directly from anyone under 18. If we learn that an account is held by someone under 18, we close or restrict it. If you believe we have inadvertently collected information directly from a child under 13, please contact us immediately at privacy@valles.app and we will delete that information promptly.

Information parents and guardians share about their children. Many features of the Service let parents and guardians enter information about their own minor children — for example, a child’s first name, grade, classroom, food allergies, or dietary needs — so that the family can coordinate with their school community. If you provide information about a child for whom you are a parent or legal guardian, you represent that you have the authority to do so on the child’s behalf. We treat that information with the safeguards described in Sections 7 and 11 below and, for health-related information, in our Consumer Health Data Privacy Policy.

3.1 Information You Provide Directly

• Account information: Name, email address, and phone number when you register. Valles has no passwords; you sign in with Google, with Apple, or with a one-time code or link we send you
• Profile information: Profile photo, school affiliations, and any other information you choose to add
• Family and household information: Names, relationships, grades, classrooms, schools, and similar context you provide about members of your household, including your minor children
• Messages and content: Text messages, photos, videos, files, signup entries, invitations, RSVPs, and other content you send or share through the Service
• Health and Dietary Information: Food allergies, intolerances, sensitivities, dietary restrictions (including religious, cultural, ethical, or medical), and similar information you choose to record or share through features such as signup sheets, event coordination, or family profiles (see Section 11 and our Consumer Health Data Privacy Policy). We collect this information only with your separate opt-in consent.
• Contact and directory information: Contacts you import or school directories you access through the Service
• Support communications: Records of any correspondence if you contact us for support

3.2 Information Collected Automatically

• Device information: Device type, operating system, browser type, and unique device identifiers
• Log data: IP address, pages visited, features used, time and date of access, and other usage data
• Cookies and similar technologies: We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage. See Section 8 for more detail.

3.3 Location Information

With your permission, we may collect precise or approximate location data from your device. Location data may be used to suggest relevant local school communities, surface nearby events, or provide location-aware features. You can disable location sharing at any time through your device settings or the Service’s privacy controls. We never use location data to infer health information, and we do not use geofencing in connection with health-related features or facilities.

If you attach your current location to a note, we store that location with the note. To label it we send the coordinates to Google’s geocoding service and keep the neighborhood-level name it returns.

3.4 Information From Third Parties

We may receive limited information about you from third-party services you connect to the Service (for example, school directory platforms or calendar integrations), consistent with those services’ own privacy policies. Information from Google is described in Section 3.5.

3.5 Information From Google

If you choose to import your contacts from Google, Valles reads your Google Contacts once, at your request, from the “Import from Google” button. We ask only for read-only access: Valles never creates, edits, or deletes anything in your Google account, we do not keep a Google access token after the import finishes, and we end Valles’s access to your Google account when each import is done. To import again later, you ask again.

What we read. For each contact: names and nicknames; email addresses; phone numbers; postal addresses; photos; birthday; other dated events such as anniversaries; organization and job title; and relationships (for example, spouse or child). We do not read your Google contact labels or the free-text notes field.

Where it goes. Imported contacts land in a private list that only you can see. Birthdays fill the contact’s birthday field; other dated events become private notes on that contact; a contact’s photo is kept as that contact’s picture in your list. Imported contacts are never shown to other members unless you place a person in a group or household or send a single contact card yourself. Valles may use them to show you which of your contacts are already on Valles.

What we don’t do. We do not sell information from Google, use it for advertising, share it with data brokers, or use it to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models, and we do not allow our AI service providers to do so. If you use an AI feature on your contacts, what it needs is sent to our AI provider to produce the result, as described in section 5.6.

Limited Use. Valles’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing it. “Remove Google Contacts,” in Settings, revokes Valles’s access and deletes every imported contact you have not made part of your Valles network. Contacts you have turned into friends or placed in a household are yours in Valles and stay until you delete them, one at a time, like any other contact. You can also remove Valles from your Google account at myaccount.google.com/permissions. Deleting your account deletes imported contacts with it.

We use the information we collect to:

• Provide and operate the Service: Deliver messages, facilitate group communications, run signup and RSVP features, and power all core functionality
• Personalize your experience: Surface relevant school communities, contacts, and content
• Improve the Service: Analyze usage patterns to fix bugs, develop new features, and enhance performance
• Communicate with you: Send service-related notifications, security alerts, and (where you have opted in) product updates
• Enforce our Terms: Detect and prevent fraud, abuse, harassment, and other violations
• Comply with legal obligations: Respond to lawful requests from authorities and meet regulatory requirements

We do not use your personal information to serve third-party advertising. We do not sell your personal information to third parties, and we do not share Health and Dietary Information for any purpose other than operating the Service for you and the people you have consented to share it with.

5.1 With Other Users

Content you post in group channels or community boards is visible to members of those groups. Direct messages are visible only to the intended recipients. Signup entries, invitations, RSVPs, and similar coordination content are visible to the participants in that activity — for example, parents in the same classroom signup or the host of an event you respond to. Health and Dietary Information you record about yourself or a member of your household becomes visible to the participants in an activity only after you consent to sharing it with that audience (see Section 8 of our Consumer Health Data Privacy Policy). You control whether to share that information and with whom, and you can withdraw that consent at any time.

5.2 With Service Providers

We share information with trusted third-party vendors who help us operate the Service, including cloud hosting providers, email and text message delivery services, AI processing (Section 5.6), and analytics tools. These providers are contractually obligated to use your information only to perform services on our behalf and in accordance with this Privacy Policy.

5.3 For Legal Reasons

We may disclose your information if we believe in good faith that doing so is required to comply with a legal obligation, protect the rights or safety of Entrewoven Company, our users, or the public, or respond to lawful requests from government authorities.

5.4 Business Transfers

If Entrewoven Company is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent in-app notice before your information is transferred and becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5.6 AI Features and AI Providers

Some optional features use an AI service provider that works for us. The AI providers we use are listed here and updated when they change: currently Google (the Gemini API, on paid terms under which Google does not use your content to train or improve its models). These features are: proofreading a message you are writing, scanning a flyer or poster into a plan, reading a photo into a note, turning a voice note you record into text, and searching for an event you describe. When you use one, the text, photo, or recording you chose is sent to Google to produce the result. AI features are on by default. The first time you use one, we ask for your permission, and nothing is sent before you allow it. You can turn AI features off at any time in Settings, and nothing is sent while they are off. When you ask an AI feature about a note that carries a location, the neighborhood-level area (not your exact coordinates) is included in what we send to the AI provider and to Google Search. If you type health details or other personal information into something you then ask an AI feature to process, it is processed on your instruction under the same terms.

5.7 Safety Reports

If you report a message or a person, we keep the report and a copy of the reported content so we can review it, act on it, and keep the Service safe. The person you report is not told who reported them.

5.8 Text Messages (SMS)

If you give us your mobile number to confirm it or to sign in, we send you a one-time verification code by text message. We send these texts only when you ask for one by entering your number and requesting a code. We do not send marketing or promotional text messages.

Message frequency varies with how often you request a code. Message and data rates may apply. Reply STOP to any message to stop receiving texts from us, or HELP for help; you can also reach us at support@valles.app. If you opt out, you will not be able to confirm your number or sign in by text until you opt back in by replying START.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not sell, rent, or share your mobile number, or your consent to receive text messages, with third parties or affiliates for their marketing or promotional purposes. We share your mobile number only with the service providers that deliver our text messages (such as our messaging provider and mobile carriers), and only for that purpose. The full terms of our text messaging program are at valles.app/sms.

Invitations that another member texts to you are sent from that member’s own phone and messaging plan, not by Valles. We do not send those messages and do not receive your replies to them.

We retain your personal information for as long as your account is active or as needed to provide the Service. You may delete your account at any time (see Section 9.2). Deletion is scheduled ninety (90) days after you ask and can be undone by signing in during that period; after it, your personal information is removed from our active systems as described in Section 9.2. Copies in our backups are overwritten on their regular cycle. We may retain certain records for a limited period after deletion to comply with legal obligations, resolve disputes, or enforce our agreements, including the consent records described in our Consumer Health Data Privacy Policy.

Message content, signup entries, invitations, and RSVPs may be stored on our servers until deleted by you or until your account is terminated. We encourage users to manage their own message history and shared content. Health and Dietary Information is subject to the shorter retention periods in Section 11 of our Consumer Health Data Privacy Policy.

We take the security of your information seriously. Entrewoven Company employs industry-standard technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of sensitive data at rest
• Access controls limiting employee access to user data
• Regular security assessments

No method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials.

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze how the Service is used (via analytics tools)

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features.

Universal opt-out signals. We honor browser-based universal opt-out preference signals, such as the Global Privacy Control (GPC), as required by the laws of several states. Because we do not sell personal information or process it for targeted advertising, these signals do not change our practices today, but we recognize and record them.

We do not use cookies or tracking technologies to serve third-party advertisements.

Analytics providers. We use PostHog (hosted in the European Union) for product analytics — to understand how features are used so we can improve the Service. PostHog identifies you only by an internal account identifier; we do not send your name, email address, phone number, home address, or any Health and Dietary Information to it. PostHog stores a small amount of data in your browser’s local storage (not third-party cookies) to do this. We also use Vercel Web Analytics and Speed Insights for aggregate, cookieless measurement of traffic and page performance, which do not identify individual users.

9.1 Access and Correction

You may access and update most of your account information directly through your account settings. If you need assistance, contact us at privacy@valles.app.

9.2 Deletion

You may delete your account at any time through the account settings page. Deletion is scheduled ninety (90) days out, and signing in before then cancels it. When it runs, we remove your personal information from our active systems: your profile, name, photo, email addresses and phone numbers, sign-in records, the contacts and notes you kept, your Health and Dietary Information, your private lists, and your uploads are deleted. Messages, items, and files you shared into groups, chats, and plans that belong to other members stay there for them, no longer linked to your name. A family household you share with another adult passes to them, with the records of the children in it (Terms of Use, Section 6.4). Retention after deletion is described in Section 6.

9.3 Data Portability

Upon request, we will provide you with a copy of the personal information we hold about you in a commonly used format.

9.4 Opting Out of Communications

You may opt out of non-essential marketing communications at any time by following the unsubscribe link in our emails or adjusting notification settings in the app. You cannot opt out of service-related communications (such as security alerts or account notices) while your account remains active.

9.5 Location Data

You may disable location sharing at any time through your device’s system settings or within the Service’s privacy controls.

9.6 State Privacy Rights

Depending on your state of residence, you may have rights under your state’s comprehensive privacy law — including California (CCPA/CPRA), Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and Washington — such as the right to know what personal information we collect, the right to delete it, the right to correct inaccuracies, the right to data portability, the right to limit use of sensitive personal information, and the right to opt out of sale, targeted advertising, or profiling. We do not sell personal information, and we do not process personal information for targeted advertising or cross-context behavioral advertising. To exercise any of these rights, contact us at privacy@valles.app. We will not discriminate against you for exercising your privacy rights, and you may appeal a refusal by replying to our response.

9.7 Consumer Health Data Rights — All U.S. Members

Regardless of the state you live in, all U.S. members have the rights described in our Consumer Health Data Privacy Policy with respect to Health and Dietary Information: the right to confirm and access, the right to withdraw consent (in whole or in part, including for a specific audience), the right to delete, the right against discrimination, and the right to appeal. We apply the most protective state standard (Washington’s My Health My Data Act) as our single national baseline. To exercise any such right, use the in-app privacy controls or contact us at privacy@valles.app.

The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If we learn that we have inadvertently collected personal information directly from a child under 13, we will delete that information promptly. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@valles.app.

Parents providing information about their own children. As described in Section 2, parents and guardians may choose to share information about their minor children through the Service (for example, recording a child’s allergy on a snack signup). That information is provided by the parent or guardian, is treated as part of the parent’s or guardian’s account, and is shared only with the people the parent or guardian chooses and consents to. Parents and guardians may review, modify, or delete that information at any time through their account settings.

Some features of the Service let you record or share Health and Dietary Information — for example, food allergies, intolerances, sensitivities, and dietary restrictions (whether medical, religious, cultural, or ethical) about you or members of your household, including your minor children.

11.1 How We Treat Health and Dietary Information

• Health and Dietary Information is “consumer health data” governed by our Consumer Health Data Privacy Policy, which applies to all U.S. members and controls over this Policy in the event of a conflict.
• We collect and share it only with your separate, specific opt-in consent — obtained apart from the Terms of Use and this Policy — including a new consent before it becomes visible to any new audience.
• We treat Health and Dietary Information with care and apply the security measures described in Section 7.
• We do not use Health and Dietary Information for advertising, profiling, or marketing, to develop or improve features, or to train AI models.
• We do not sell Health and Dietary Information and we do not share it with third parties except as needed to operate the Service (for example, our hosting provider stores the underlying records).

11.2 Who Can See It

Health and Dietary Information is visible only to the people you consent to share it with — for example, the participants in a signup, the host of an event you RSVP to, or members of a group you post in. You can edit or remove Health and Dietary Information from your profile or from any signup, invitation, or RSVP at any time, and you can withdraw a sharing consent at any time, which ends the audience’s access.

11.3 Important Limitations

The Service is an awareness and communication tool. It is not a medical, dietary, or food safety system, and it cannot guarantee that every allergen or restriction will be captured, displayed, seen, or acted upon. Please review Section 11 of our Terms of Use for important information about the limits of the Service and the importance of direct communication, particularly in the case of serious or life-threatening allergies.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice in the Service at least 30 days before the changes take effect. The “Last Updated” date at the top of this policy reflects the most recent revision. Material changes affecting Health and Dietary Information will not be applied retroactively to previously collected data without obtaining new consent.

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at:

Entrewoven Company privacy@valles.app