InVibee Privacy Policy

1. Who processes your data

The data controller is InVibee. For privacy questions or to exercise your rights, write to supporto@invibee.com.

2. Which data we process

Account: name, username, email and password (stored only as an encrypted hash, never readable). If you add them: photo, bio, interests, date of birth, phone number.

Content: posts, Vibees, stories, comments, messages and what you create in the mini-apps.

Security: the devices you sign in with and your last 20 sign-ins (device, IP address, date, approximate place when available), to show them to you and warn you about an unknown sign-in.

We do not record the pages you visit or how long you stay on each.

3. Why we use it

To run InVibee: your account, the feed, messages, notifications and the mini-apps.

To keep it safe: protecting accounts, handling reports and moderating content that breaks the rules.

We do not sell it, to anyone, and we do not use it to advertise to you outside InVibee.

4. Artificial intelligence, in-house

InVibee’s AI runs on InVibee servers: no external AI provider receives your texts, photos or audio.

Content reaches the AI engine only when you tap an AI button (a caption, a photo edit, a video, a transcription, a translation). The engine uses it to answer you and does not keep it, and the content is not written to logs.

Each AI feature has a daily quota per person: that is why we count how many requests you make each day, not what you ask.

Two automatic checks run without a tap, only on what you publish: text moderation of posts, comments, stories, status and live chat against abusive content, and labels on public photos (below). Private messages go through neither.

5. Messages

Messages are not scanned: no automatic check, AI or otherwise, reads them.

Reply suggestions and translations start only when you ask, with a tap, and use the messages already decrypted on your device. They reach InVibee’s AI engine like any other AI request, without being kept.

6. Automatic photo labels

When you publish a public post with a photo, InVibee’s AI engine gives it 3 to 8 words about what is in it (objects, places, moods, like “sunset” or “beach”), so search can find it. Public posts only: never private, friends-only, list or draft posts.

Labels never describe people or sensitive traits (origin, religion, health, orientation, opinions): a filter removes them even when the model gets it wrong. The photo reaches the engine resized and without metadata, and is not kept: only the list of words remains.

You can see and remove them one by one, and turn them off in Settings → Automatic photo labels: the existing ones are removed too.

7. Ads

Profile-based personalisation (on by default): ads are also chosen using what you wrote in your profile, such as interests, country and age. You can turn it off in Settings → Ad choices.

Remarketing (off by default): if you turn it on, a business whose post or ad you liked, commented on or clicked can show you its ads again.

No data is sold or exported. Businesses only see aggregate reports, and every number counts at least 50 people: below that threshold the figure is not shown. Never the data of a single person.

8. Sensitive content and age

Content marked as sensitive arrives covered, and you can choose to always show it.

Adult (18+) content is shown only if your profile’s date of birth says you are an adult or, if it is missing, if you declare you are at least 18: in that case we also store the date of the declaration.

9. Usage limit

If you use Digital wellbeing, the apps count seconds only while InVibee is open and visible, and we add them up per day across all your devices.

That total is used only to show you how much time you spent in the app and to remind you of the limit you chose: we do not use it for the feed, ads or notifications.

10. Screenshot blocking and alerts

With “Block screenshots” on, your chats and stories cannot be captured from a phone (where the system allows it), and you get an alert if someone tries. The alert is a notification saying who and where: no image is stored.

11. Notifications

You choose which notifications you get, in-app, push and email, in Settings → Notifications.

“Posts about my interests” stays off until you turn it on: at most one a day, in the evening, with a few public posts about your interests. To send it at the right time we store the time zone of the device you turned it on from, and delete it when you turn it off.

Push notifications travel through your browser’s or phone’s notification service (for example Apple or Google) and, in the phone app, through Expo’s push service: they carry only the short notification text.

12. Satisfaction survey

Now and then we ask how likely you are to recommend InVibee, from 0 to 10, with an optional comment: never in your first 7 days, and after an answer not again for 90 days.

Staff see scores and comments, never who wrote them: the link to your account is only used to avoid asking too often.

13. Personal calendar

You can create a secret address your phone’s calendar subscribes to, to see your events. You see it only once, and we store only a fingerprint of it.

You can regenerate it (the old one stops working) or revoke it at any time. The calendar contains only the title, description, dates and city of the events, never the participants.

14. Who else sees the data

Other people see your content according to the visibility you choose for each item.

Infrastructure providers (website and server hosting, database, file storage) process it only on our behalf, to run the service.

Landing statistics for InVibee: We do not load Vercel Web Analytics or any other client-side analytics tools.

Authorities, only when the law requires it.

15. How long we keep it

As long as you have an account. If you delete it, your content and mini-app data are deleted and the profile becomes anonymous.

Only what others or the law need remains: messages already delivered in other people’s chats, the coin ledger, reports and moderation actions, support tickets and print orders.

16. Your rights

You can see and correct your data from your profile and settings, download it (Export my data), delete your account (Delete account) and turn off every optional feature described here.

For access, rectification, erasure, restriction, objection, portability or withdrawal of consent, write to supporto@invibee.com. You can also contact your data protection authority (in Italy, the Garante per la protezione dei dati personali).

17. Security

Passwords stored only as an encrypted hash, encrypted connections, alerts when you sign in from a new device and optional two-factor authentication.