Privacy policy.

Invyte is operated by Balder Sandstrøm, based in Denmark. We are the data controller for the personal data described in this policy. You can reach us at support@invyte.dk.

We collect only what is needed to run Invyte:

• Account data. Your name, email, an account ID and sign-in identifiers, handled by our auth provider Clerk. If you answer an invitation without an account, we keep the name you give with your answer.
• Content you create. Events and the details you give them, such as the title, description, date and place; messages; photos; posts, replies, polls and reactions; your profile photo and bio. We do not collect videos, audio, your contacts or your device's location.
• Reports and blocks. If you report or block someone, we keep who reported or blocked whom, the reason and any note you add.
• Notification tokens. A device push token, via Google's Firebase Cloud Messaging, so we can deliver notifications about your events and chats. The text of a notification, such as an event's name, a sender's name or the start of a message, passes through that service on its way to your device.
• Purchase data. When you upgrade an event, we and our payments partner RevenueCat record which product you bought, its price, a purchase identifier and your account ID. Apple, Google or, on the web, Stripe processes the payment itself, so we never receive your card details. For a purchase on the web, your email goes with it for the receipt.
• Usage data, only if you allow it. Usage analytics is off until you turn it on, and you can turn it off again at any time under Settings, Privacy and data. While it is on, we collect which features and screens are used (for example, that an event was created or a message sent), error and crash details, the app version, a random ID for your device, and the city your connection appears to come from. Your IP address is not stored with it, and it is not tied to your name, email or account.
• Technical data. Basic logs (IP address, device type, timestamps) needed to keep the service running and secure.

Everything is encrypted on its way between your device and us.

We do not sell your data, do not show ads, and do not build advertising or marketing profiles about you.

We process your data to deliver the service you signed up for: letting you create events, invite friends, chat and share media. Our legal basis under GDPR is the contract between you and us Art. 6(1)(b) and, for security logs, reports and blocks, our legitimate interest in keeping the service safe Art. 6(1)(f). Usage analytics runs only on your consent Art. 6(1)(a), which you can withdraw at any time under Settings, Privacy and data.

We rely on a small set of sub-processors. They only access data to run the parts of the service we use them for:

• Clerk. Authentication and account management (privacy).
• Convex. Application database and real-time backend (privacy).
• RevenueCat. Purchase management, in the app and on the web (privacy).
• Stripe. Payment processing for purchases on the web (privacy).
• PostHog. Usage analytics, only if you allow it (privacy).
• Google (Firebase Cloud Messaging). Push notification delivery (privacy).
• Mapbox. Maps, and looking up a place you type for an event (privacy).
• Bunny.net. Hosting, photo storage and content delivery (privacy).
• Resend. Email delivery of reports to our moderation inbox (privacy).

We keep your account and content for as long as your account exists. When you delete your account, we remove your identity and personal data: your name, email, profile photo, bio, your connections, your notifications and settings, and your private direct messages. This happens right away and cannot be undone; any remaining copies, including backups, are purged within 30 days. We keep only what we are legally required to (for example, security logs, for up to 90 days).

Content you shared with other people is not erased, because it is part of their experience too: for example, photos you added to a shared event, your messages in a group or event chat, and your posts in an event's feed. We keep that content but disconnect it from you: your name and profile are removed and it appears as a deleted user, so it no longer identifies you.

A record of your purchases is kept. In our own database it no longer carries your name or email; Apple, Google, Stripe and RevenueCat keep their own records of a payment. Usage data you allowed is kept too: it was never tied to your name, email or account, so it leads to no one.

You can start a deletion from inside the app or from our account deletion page, which explains exactly what is removed and what stays.

Under GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any of these, email us at support@invyte.dk and we will respond within 30 days. If you believe we are mishandling your data, you can also lodge a complaint with the Danish Data Protection Authority, Datatilsynet.

Invyte is not directed to children under 16. If you believe a child has created an account, contact us and we will remove it. For our full standards against child sexual abuse and exploitation, including how to report concerns, see our Child Safety Standards.

If we materially change how we handle your data, we will update this page and adjust the "last updated" date above. Continuing to use Invyte after a change means you accept the updated policy.