Invii ("we," "our," or "us") is dedicated to protecting your privacy. This Privacy Policy describes how we collect, use, store, and safeguard your personal information when you use the Invii mobile application, website (inviiapp.com), and associated services.
1. Information We Collect
Personal Information: When you create an account, we collect your email address, username, display name, profile picture, and optional details (such as bio, location, and interests).
Journey & Activity Data: We collect data related to your participation in shared journeys, including daily check-in records, streak data, milestone progress, and verification media (photos, videos, voice notes) that you voluntarily submit.
Protected Communications: Messages and group communications sent through Invii are protected with strong authenticated encryption (AES-256-GCM) in transit and at rest with server-mediated key custody, safeguarding against external breaches while allowing multi-device history access.
Location Data: Location is collected only when you explicitly opt in to location-based features (e.g., local activity check-ins or marketplace browsing). We use geohashing to protect exact coordinates.
Analytics & Crash Reporting: We collect anonymous crash logs and feature engagement metrics via Firebase Crashlytics to optimize performance.
2. How We Use Your Information
- To create, authenticate, and secure your account.
- To power shared journeys, habit streaks, countdowns, and buddy streak shields.
- To deliver push notifications for check-in reminders, room alerts, and partner updates.
- To personalize your feed recommendations and discovery.
- To facilitate marketplace connections between members.
- To enforce community safety guidelines and prevent fraud.
3. Data Sharing & Third Parties
We do not sell your personal data. We only share data with trusted infrastructure providers necessary for app operations:
- Firebase / Google Cloud: Secure authentication, database storage, and push notifications.
- RevenueCat: In-app subscription entitlement management.
- LiveKit: Real-time journey audio and video stage connectivity.
4. Data Retention & Deletion
We retain your account data as long as your account is active. Expiring loop content is automatically deleted after 24 hours. You have the right to request complete deletion of your account and all associated data at any time via in-app Settings or by contacting us.
5. Your Rights & Choices
You have full control over your privacy:
- Export or update your profile data at any time.
- Configure granular journey notification preferences.
- Toggle private account mode or disable activity status.
- Permanently delete your account and personal records.
6. Children's Privacy & Zero-Tolerance Protection Against CSAE
Invii is dedicated to safeguarding minors and maintaining compliance with children's privacy and child safety standards worldwide. We strictly prohibit individuals under 13 years of age from creating accounts without verified parental consent.
We enforce an absolute zero-tolerance policy against Child Sexual Abuse and Exploitation (CSAE) and Child Sexual Abuse Material (CSAM). Any suspected child exploitation or endangerment results in immediate content removal, permanent account termination, device banning, and mandatory legal reporting to the National Center for Missing & Exploited Children (NCMEC) CyberTipline and law enforcement agencies.
Please review our comprehensive Child Safety Standards for detailed protocols. To reach our dedicated safety personnel directly, email child-safety@inviiapp.com.
7. Contact Us
For child safety reports, contact our designated Child Safety Team at child-safety@inviiapp.com.
If you have any questions or requests regarding your personal data or privacy, contact our privacy team at privacy@inviiapp.com or support@inviiapp.com.