In short
- Your recordings stay on your phone. We can’t see them, and we can’t hand over what we never have.
- Nothing personal leaves your phone unless you choose it. Sentinel, cloud transcription, backup, packets and attorney requests each happen only when you turn them on or ask for them. The only thing sent by default is anonymous usage counts, and you can turn those off.
- No ads, no tracking, no selling your data. Not to data brokers, advertisers or anyone else.
- You can delete everything from the app at any time.
What stays on your phone
Recordings, transcripts made on the phone, your notes, photos, letters, court dates, communication cards, and your attorney’s contact details. They are encrypted by iOS, excluded from iCloud backups, and never sent to us except in the cases described below, each of which you choose. We cannot see, open or hand them over, because we never have them. Deleting the app, or using Delete my account, removes them.
Your account lives on your phone too. No account is required. If you make one, your password is never stored, only a protected fingerprint of it. If you sign in with Apple or Google, they give the app on your phone your name and email (Apple may give a private relay address instead). When you delete an account made with Apple, we ask Apple to end that sign-in.
Your location
If you allow it, Invoked uses your location to decide which state’s rules apply. That happens on your phone.
To find your county and city, so your case can be matched with attorneys listed there, your phone asks Apple’s location service which county and city you’re in, the same way any iPhone app looks up a place. Apple handles that under its own privacy policy. Invoked’s server never receives your location. Your county reaches us only when you look for an attorney, as described below, and you can change it before you do.
Crash alerts, if you turn them on, use motion and your speed while driving, on your phone. That location is never stored or sent.
When audio or words leave your phone
Backup (only if you turn it on). Each recording is encrypted on your phone with a key made from your backup code before it’s uploaded to our storage provider (Cloudflare). Nobody at Invoked or Cloudflare can play it, and deleting a recording in the app deletes its backup.
Cloud transcription (only if you choose it). Transcripts are normally made on your phone. If you choose cloud transcription for a recording and agree on the screen that explains it, that recording’s audio is sent securely to Deepgram, the speech-to-text company that makes the transcript, and the transcript comes back to your phone. We ask Deepgram not to keep the audio or use it to train its models, and nothing identifying you is sent with it.
Sentinel (once you allow it). When you allow Sentinel (during setup, or later in Account), Invoked sends the words of each recording’s transcript (never the audio) securely to Invoked’s server and to Anthropic, the AI company that powers Sentinel, and the results come back to your phone. Invoked does not keep the transcript, and it is not used to train AI models. Every moment Sentinel returns is checked against your transcript on your phone before it is shown. You can turn Sentinel off any time in Account; recordings then stay on your phone.
Sound analysis, listening for things like shouting or impacts in a recording, happens on your phone.
What our server receives
Invoked’s server receives only what you choose to send it, for the thing you asked for:
- Letters. Invoked doesn’t send or file anything for you. Your letters (footage requests, complaints, ticket and tow contests, accident and records requests) are written on your phone, and you send each one yourself. We don’t receive them unless they’re part of a packet you buy.
- Evidence packets. Your packet is built and encrypted on your phone, and stored by us (the recording in it with Cloudflare) in a form we can’t read. The key is only in your packet link, after the “#”, which browsers never send to a server. Anyone you give the link to can open it.
- Packet emails. When you buy a packet, the PDF is emailed to you, which means it passes through our email provider in a readable form. We keep a copy of that email for 30 days so we can resend it if it goes missing, then delete it. We may send a note the next day to check it arrived and, with the Settlement Bundle, a weekly reminder of your next step. Each one has a link to stop them. Your recording stays behind your encrypted link.
- Finding an attorney. When you look for matches, the app sends the kind of case, your state and county, the court or city if you add them, and your language. Nothing that identifies you is sent at this step.
- Attorney requests and bookings. When you choose an attorney, we send them the kind of case, the court, date and county, your account of what happened, and how to reach you. Your evidence packet (the report, timeline, letters and your recording) goes to them only if you choose to include it, either with your request or when it’s ready. It is sent as a private link that opens without an account. We keep a record of the request, the attorney’s answer and whether the packet was shared, but not the link itself.
- Weekly case check-ins. If you ask for weekly reminders about a court case, we receive the case number, the court, your email and (if you add it) the link to your court’s case search, so we can email you each week. Invoked doesn’t look up or read court records. Remove the case in the app and we stop.
- Payments are handled by Stripe (packets, bundles, ticket, tow and record-clearing packets, and attorney booking fees) and by Apple (memberships). We never see your card number. We keep a record of each order (what you bought, when, the amount and your email) so we can deliver it, resend it and handle refunds. Each order and attorney request also records which version of our Terms of Use you accepted, and when.
- Gift memberships. When you buy a gift on our website, we keep your name and email, the name of the person it’s for (and their email, if you ask us to send it), your note, the day to send it, and the payment record, so we can deliver the gift, send your receipt, tell you when it’s redeemed and handle refunds. When someone redeems a gift, their phone makes a private key; we keep only a scrambled fingerprint of it, to know which phones the gift is on. If we emailed the gift, we send that person one reminder a week before it ends.
- Your membership’s ticket count. If you’re a member, the app sends your membership’s Apple purchase number (not your name or Apple ID) so everyone in your Apple Family shares one count of ticket contests for the year.
- Backup, if you turn it on: your cases, notes and settings, and your recordings, are encrypted on your phone with your backup code before they’re sent. We store them but can’t read them. If you lose the code, we can’t recover them.
- Password reset codes are emailed to the address you enter. We keep only a scrambled fingerprint of the code, for 15 minutes.
Anonymous usage
Unless you turn it off, Invoked tells our server which steps people take in the app, for example that the app was opened for the first time, that a price was shown, or that a payment went through, so we can see where people get stuck and make the app better. It’s sent with a random ID the app makes for itself, the app version and the state you’ve chosen for rules. It is not linked to your name, email, account, phone number or device, and never includes your recordings, anything you type or say, or your location. If you buy a membership, Apple tells us about renewals and cancellations using that same random ID, so we can count how many memberships are active. Turn it off any time in Account › Share anonymous usage; doing so also deletes from our server everything your phone had shared.
Our website
invokedapp.com has no ads, no analytics, no tracking cookies and no social media buttons, and it doesn’t load anything from other companies. Like any website, the servers that deliver it (Netlify) see your IP address when you load a page.
- The launch list. If you ask us to tell you when Invoked is ready, we keep your email address, whether you use iPhone or Android, and when you asked. We send one email to confirm, then one email on the day the app is ready for your phone, and then delete the list. Each email has a link to take yourself off sooner. We never use the list for anything else or share it.
- Gifts. Buying a gift membership is described above, under What our server receives.
- Attorney applications. Applying on the website is the same as applying in the app: see If you’re an attorney.
Who handles your information
Only Invoked staff, through our internal Desk, can see what our server keeps. These companies process it for us, only to provide Invoked:
| Netlify | Runs our website and server and stores its records: orders, attorney requests, check-ins, attorney listings, the launch list, and encrypted packets and backups it can’t read. |
| Cloudflare | Stores encrypted recordings from backups and packets, which it can’t play. |
| Stripe | Card payments (including gift memberships), refunds, and attorneys’ listing subscriptions. |
| Apple | Memberships, Sign in with Apple, and looking up your county. |
| Resend | Sends our emails. |
| Anthropic | Powers Sentinel, if you allow it. |
| Deepgram | Cloud transcription, if you choose it. |
We don’t sell or share your information for advertising, and we share it with no one else except as described here or when the law requires it. Even then, we can only hand over what we have, and we can’t read what’s encrypted on your phone or behind your packet link.
How long we keep things
- Packet email copies: 30 days. Password reset codes: 15 minutes.
- Encrypted packets, backups and recording backups: until you delete them or your account.
- Attorney requests: until you delete your account, so you and the attorney can follow up.
- Weekly check-ins: until you remove the case.
- The launch list: until we send the launch email, or sooner if you take yourself off.
- Gift memberships: the names, emails and note for as long as the gift lasts and a year after, then the payment record only.
- Order and payment records: kept for tax and refund records. When you delete your account, your name, email and phone are removed from them.
Deleting your information
Account › Delete my account deletes everything on your phone and asks our server to delete your packets, backups, recording backups, attorney requests, check-ins and reset codes. Order records are kept without your name, email or phone. You can also delete all recordings at any time.
Anything you already sent to an attorney stays with them, under their own professional duties. Ask them directly if you want it deleted. A membership is billed by Apple, so cancel it in Settings › your name › Subscriptions.
If you’re an attorney
When you join, we keep what you give us: your name, firm, email, phone, bar state and number, website, the states, counties, cities and courts you cover, your practice areas, fees and reported track record, languages, reply time and bio, plus when you agreed to our terms. People choosing an attorney see your name, firm, photo, bio, fees, track record, languages, reply time, where you practice and the states you’re licensed in. They never see your email, phone or bar number; we only show that your bar number is on file.
Your listing fee is billed by Stripe, which keeps your card or bank details; we never see them. We keep a record of the requests sent to you, your answers and when you replied, to run matching and the Desk. The private links in your request emails are tied to one request each. Ask us at any time to remove your listing and your details.
Security
Everything Invoked sends travels encrypted (HTTPS). Recordings on your phone are protected by iOS encryption and, if you choose, Face ID. Backups and packets are encrypted on your phone before they leave it. Access to our server and Desk is limited to Invoked staff and protected by secret keys.
Children
Invoked isn’t directed to children under 13, and we don’t knowingly collect their information. If you believe a child has sent us information, contact us and we’ll delete it.
Your rights
Depending on where you live, you may have the right to know what we hold about you, to correct it, to delete it, and to opt out of its sale or use for targeted advertising (we do neither). We honor these requests for everyone, wherever you live. Most can be done in the app; for anything else, email us and we’ll answer within 30 days. We won’t treat you differently for asking.
Changes
When we change this policy, we update the date at the top. If a change is significant, we tell you in the app or by email before it takes effect.
Contact
Invoked LLC
privacy@invokedapp.com