Privacy Policy

1. Introduction and scope

This Privacy Policy explains how NE Labs ("NE Labs," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information when you use the involvve mobile application, website, and related services (collectively, the "Service"). involvve is a social activity-coordination platform that helps people create, discover, join, and communicate about real-world activities.

This Policy applies worldwide. Local privacy laws may give you additional rights, and those rights remain available where applicable. By using the Service, you acknowledge the practices described in this Policy.

2. Who can use involvve

involvve is intended only for people who are at least 18 years old. We require users to confirm that they are 18 or older. We currently rely on the birth date entered by the user and do not claim to independently verify age or identity. If we learn that an individual under 18 has created an account, we may suspend or delete the account and associated information.

3. Information we collect

3.1 Account and profile information

• Email address and password credentials used to create and secure your account. Passwords are handled by our authentication provider and are not stored by us in readable form.
• First name, date of birth, profile photo, and optional biography.
• Your internal account identifier and account status.
• A phone-number field exists in our data model, but the current application does not collect a phone number through the user interface. We will update this Policy before using that field as an active collection point.

Your first name and profile photo are visible to other users. Your email address, date of birth, and private account data are not shown on public profiles.

3.2 Location information

• With your permission, the app may collect your foreground device location to show activities near you and to update your general location in Settings.
• We do not collect background or continuous location data.
• Your device location is stored privately and is not displayed to other users.
• Activity creators may choose an activity address or place using Google Places. The selected activity location, including map coordinates, may be visible to other users as part of the activity listing. This is an activity location, not live tracking of any person.

3.3 Activities, memberships, and attendance

• Activities you create, including titles, descriptions, photos, dates, times, locations, categories, group-size limits, and approval settings.
• Activities you join, request to join, leave, or are removed from, together with your role, membership status, timestamps, and attendance confirmations.
• Repeat-activity or "run it back" invitations and related group information.
• An internal reputation score intended to support attendance and trust features. This score is not currently displayed publicly.

3.4 Messages and other user content

• Text messages sent in activity group chats. Chats are limited to active members of the relevant activity.
• Reports you submit, including the reported user or activity, selected reason, and any optional description.
• Block relationships, which users need to be hidden from each other, and related moderation information.
• Information you send to support or otherwise provide directly to NE Labs.

3.5 Device, notification, and technical information

• Expo push-notification token and device type, such as iOS or Android, if you allow notifications.
• Session information stored on your device so you can remain signed in.
• Technical information that may be generated when the app communicates with our service providers, such as IP address, app version, operating-system information, device identifiers, error information, and timestamps.

3.6 Product analytics

When product analytics is enabled, we use PostHog to understand how the Service is used. We identify users in PostHog using an internal user identifier rather than expressly attaching your name, email address, or date of birth. Analytics events may include first app open, onboarding progress, feed and activity views, activity creation and joining, join requests, chat messages sent, attendance confirmations, repeat-activity creation, and share actions. PostHog or its software may also process device, operating-system, IP-derived, or similar technical information according to its configuration.

3.7 Information we do not currently collect

• Payment or financial information, because involvve does not currently offer paid transactions or deposits.
• Background or continuous location tracking.
• Biometric information or address-book contacts.
• Microphone recordings or general camera-roll scanning. Photos are accessed only when you choose a photo to upload.
• Precise real-time location sharing between users.

4. How we use information

• Create, authenticate, maintain, and secure your account.
• Display your profile and activity information to the people who need it to use the Service.
• Create, recommend, rank, display, and manage activities and group participation.
• Enable activity chats, notifications, reminders, attendance prompts, membership updates, and repeat-activity invitations.
• Use location to show relevant nearby activities and display activity map locations.
• Enforce blocks, investigate reports, moderate content, prevent abuse, and protect users and the Service.
• Measure product performance, understand feature use, troubleshoot issues, and improve involvve.
• Communicate with you about your account, support requests, safety, policy changes, or service updates.
• Comply with law, respond to valid legal requests, and establish or defend legal rights.

5. Legal bases for processing in the EEA, United Kingdom, and similar jurisdictions

Where applicable law requires a legal basis, we rely on one or more of the following:

• Contract: processing necessary to create your account and provide the Service you request.
• Consent: for optional device permissions, such as foreground location and push notifications, and for other processing where consent is required.
• Legitimate interests: operating, securing, improving, and protecting the Service, preventing abuse, and understanding product use, where those interests are not overridden by your rights.
• Legal obligation: complying with applicable law and valid requests from authorities.
• Vital interests: responding to urgent situations involving safety where permitted by law.

You may withdraw consent through your device settings or by contacting us, but withdrawal does not affect processing already completed lawfully.

6. How information is shared

6.1 With other users

Your first name, profile photo, optional bio, activity content, group membership, attendance-related information made visible through the product, and messages within a relevant activity chat may be shared with other users as needed to operate involvve. Activity locations and activity photos are visible to people who can view the activity.

6.2 With service providers

We use service providers that process information on our behalf or help deliver the Service:

6.3 Legal, safety, and business disclosures

We may disclose information when reasonably necessary to:

• Comply with law, court orders, subpoenas, or valid government requests.
• Investigate fraud, abuse, safety incidents, or violations of our Terms or Community Guidelines.
• Protect the rights, property, or safety of users, NE Labs, or others.
• Complete a merger, financing, acquisition, restructuring, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections.
• Carry out another purpose with your direction or consent.

7. Public information and photos

Profile photos, activity photos, activity descriptions, and activity locations are intended to be visible within the Service. Some media files are stored at publicly accessible URLs and may be accessible to anyone who obtains the link. Do not upload sensitive, confidential, or private material.

8. International data transfers

involvve is available worldwide. Your information may be processed in Canada, the United States, and other countries where NE Labs or its service providers operate. Those countries may have privacy laws that differ from the laws where you live. Where required, we use contractual, organizational, or other lawful safeguards for international transfers.

9. Data retention

We retain personal information only for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Policy, resolve disputes, enforce agreements, maintain security, and comply with legal obligations.

• Account data is generally retained while your account remains active.
• Activity, membership, message, notification, device, report, and block information is retained as needed to operate the relevant features and maintain safety records.
• When you delete your account in Settings, deletion is immediate and irreversible in the active product. Activities you created are transferred to another active member where possible or deleted if you were the only member. Your memberships, messages, notifications, devices, reports you filed, blocks, profile data, and authentication account are deleted from active systems.
• Limited copies may remain temporarily in provider backups, security logs, or records that must be kept for legal, fraud-prevention, or dispute purposes. Those copies are isolated from ordinary use and removed according to applicable retention schedules.

10. Your choices and privacy rights

10.1 In-app controls

• View and update profile information through Edit Profile.
• Control foreground location and push-notification permissions through your device settings.
• Block or report users and activities.
• Delete your account permanently through Settings.

10.2 Legal rights

Depending on where you live and subject to legal exceptions, you may have the right to:

• Know whether and how we process your personal information.
• Request access to or a copy of your personal information.
• Correct inaccurate or incomplete information.
• Request deletion, restriction, or objection to certain processing.
• Withdraw consent where processing is based on consent.
• Request portability of information you provided in a structured format, where required by law. involvve does not yet have an automated export tool, so requests may be handled manually.
• Opt out of certain sales, sharing, targeted advertising, or profiling where those rights apply.
• Limit certain uses of sensitive personal information, including precise location, where applicable.
• Appeal a decision about your privacy request where required.
• Complain to a privacy or data-protection authority.

To exercise a right, contact hello@involvve.com. We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

11. Security

We use administrative and technical measures designed to protect personal information, including password hashing through our authentication provider, encrypted network communications, and database access rules that limit records to authorized users and functions. No online service can guarantee absolute security. You are responsible for choosing a strong password, keeping credentials confidential, and promptly contacting us if you believe your account has been compromised.

12. Children's privacy

involvve is not directed to children or anyone under 18, and we do not knowingly allow them to create accounts. If you believe a person under 18 has provided information to us, contact us so we can investigate and take appropriate action.

13. Third-party services and links

The Service may display maps, places, links, venues, or activities involving third parties. Their privacy practices are governed by their own policies. NE Labs is not responsible for the privacy practices of third parties that are not acting as our service providers.

14. Changes to this Policy

We may update this Policy as the Service, our practices, or applicable law changes. We will post the updated version and revise the effective date. Where required, we will provide additional notice or obtain consent before a material change takes effect.

15. Contact us

For privacy requests, include enough information for us to identify your account and understand the request. Do not send passwords or unnecessary sensitive information by email.

16. Regional notices

16.1 Canada

Residents of Canada may request access to and correction of their personal information and may challenge our compliance with applicable private-sector privacy laws. Alberta residents may also contact the Office of the Information and Privacy Commissioner of Alberta. Other Canadian residents may contact the applicable provincial commissioner or the Office of the Privacy Commissioner of Canada.

16.2 European Economic Area, United Kingdom, and Switzerland

Where applicable, NE Labs acts as the controller of personal data described in this Policy. You may exercise the rights described above and lodge a complaint with your local supervisory authority. Contact details for any formally appointed representative or data protection officer will be added if legally required.

16.3 California and other U.S. states

Where an applicable U.S. state privacy law applies to NE Labs, residents may have rights to know, access, correct, delete, obtain a portable copy, opt out of sale or sharing, opt out of targeted advertising or certain profiling, limit certain uses of sensitive personal information, and appeal a denied request. These rights are subject to legal thresholds, definitions, and exceptions.