Privacy Policy

What stays on your phone

Recordings, transcripts made on the phone, your notes, photos, letters, court dates, communication cards, and your attorney’s contact details. They are encrypted by iOS, excluded from iCloud backups, and never sent to us except in the cases described below, each of which you choose. We cannot see, open or hand them over, because we never have them. Deleting the app, or using Delete my account, removes them.

Recording on Apple Watch. If you use Invoked on your Apple Watch, what it records goes from the watch straight to your own iPhone over Apple’s connection between the two, part by part as it records. It never passes through Invoked. Once your iPhone has a recording whole, the watch deletes its copy, and from then on it’s like any other recording on your phone.

Your account lives on your phone too. No account is required. If you make one, your password is never stored, only a protected fingerprint of it. If you sign in with Apple or Google, they give the app on your phone your name and email (Apple may give a private relay address instead). When you delete an account made with Apple, we ask Apple to end that sign-in.

Your location

If you allow it, Invoked uses your location to decide which state’s rules apply. That happens on your phone.

To find your county and city, so your case can be matched with attorneys listed there, your phone asks Apple’s location service which county and city you’re in, the same way any iPhone app looks up a place. Apple handles that under its own privacy policy.

Invoked never receives or stores your exact location. Only two things based on it reach us: your state, with the anonymous usage counts (described below, and you can turn them off) and with Sentinel’s requests (if you allow Sentinel), and your county and city, only when you look for or ask for an attorney. You can change the county and city before you do. They’re kept with your attorney request, as described below.

Crash alerts, if you turn them on, use motion and your speed while driving, on your phone. That location is never stored or sent.

One exception, which you choose each time: the Scene Report for a vehicle accident can look up the weather, the sun’s position and the road at the place and time of the crash. On a screen that says so, the crash’s coordinates and time (nothing else, and nothing about you) go to our server, which asks Open-Meteo (weather) and OpenStreetMap’s Overpass service (the road) and computes the sun’s position itself. Our server keeps the answer for a week under the rounded coordinates and the hour, not under anything that identifies you. If you don’t ask, nothing is sent. Photos you take for the Scene Report carry where and when they were taken, on your phone and in your own report.

When audio or words leave your phone

Backup (only if you turn it on). Each recording is encrypted on your phone with a key made from your backup code before it’s uploaded to our storage provider (Cloudflare). Nobody at Invoked or Cloudflare can play it, and deleting a recording in the app deletes its backup.

Cloud transcription (only if you choose it). Transcripts are normally made on your phone. If you choose cloud transcription (in Account, or for one recording) and agree on the screen that explains it, the audio of each recording you analyze is sent straight from your phone, securely, to Deepgram, the speech-to-text company that makes the transcript, and the transcript comes back to your phone. We ask Deepgram not to use the audio to train its models, and nothing identifying you is sent with it.

Sentinel (once you allow it). Sentinel reads your police-stop and crash recordings for what isn’t said outright. When you allow it (during setup, or later in Account), the app sends the words of each one’s transcript (never the audio) securely through Invoked’s server to Anthropic, the AI company that powers Sentinel. With the words go each line’s time, who said each line as far as your phone can tell, the sounds your phone noted (like shouting or an impact), what the app’s own analysis flagged, your state and, for an injury that isn’t a car crash, what kind it was (like “slip, trip or fall”). Nothing else about you is added: not your name, your account or your location. (Anything said aloud in the recording, like a name, is part of the words.)

When you finish the walk-through’s questions about a police stop, Sentinel also reads your answers, to finalize your full report: how it ended, the reason you were given, what didn’t feel right, what the recording couldn’t show (like a weapon drawn or a search) and your own account. The name of the department goes too, so Sentinel can check what officers did against that department’s own written policies and your state’s laws for officers. Not the officer’s name or badge you typed, witnesses’ names or numbers, or where it happened.

What comes back to your phone: moments worth a closer look, who said what, details said out loud (like an officer’s name or the other driver’s insurance company) and a short summary of what happened; and, for the full report, what may have gone wrong, each with the moment, the rule it may conflict with and a question for a lawyer, and the officer’s side of each from a second reading. Your phone checks all of it against your transcript before showing it, and you can correct who said what. When Sentinel points out something you said yourself about a crash, like an apology, it’s shown only to you, and it never goes into a packet, a letter or an attorney request. The summaries are only for you, too: they never go into a packet. The full report’s points (with the officer’s side) do go into your evidence packet, for your attorney.

Invoked’s server passes the transcript along and keeps none of it, or of what comes back. Anthropic doesn’t use it to train AI and deletes it within 30 days (longer only if its safety systems flag it under Anthropic’s usage policy, or the law requires it). With each request, the app also sends our server its random install ID (it isn’t passed to Anthropic); our server keeps only a scrambled fingerprint of it, with the times of that phone’s latest Sentinel requests, so it can limit how often one phone uses Sentinel. If you’re a member, the request also carries the same proof of membership your packets use (Apple’s signed purchase record or your gift code), so your phone gets the members’ share; it isn’t passed to Anthropic either. You can turn Sentinel off any time in Account; recordings then stay on your phone.

Sound analysis, listening for things like shouting or impacts in a recording, happens on your phone.

What our server receives

Invoked’s server receives only what you choose to send it, for the thing you asked for:

• Letters. Invoked doesn’t send or file anything for you. Your letters (footage requests, complaints, ticket and tow contests, accident and records requests) are written on your phone, and you send each one yourself. We don’t receive them unless they’re part of a packet you buy.
• Evidence packets. Your packet is built and encrypted on your phone, and stored by us (the recording in it with Cloudflare) in encrypted form. The key that opens it is in your private packet link, after the “#”. Anyone you give the link to can open the packet and play the recording.
• Packet emails. When you buy a packet, we email it to you: the PDF and your private packet link. That means it passes through our email provider in a readable form. We keep a copy of that email, including the PDF and the link, for 30 days, with your name and email address, so we can resend it if it goes missing. During those 30 days, the kept link would let us open your packet and its recording; we use it only to resend your email. After 30 days we delete the copy. We may send a note the next day to check it arrived and, with the Settlement Bundle, a weekly reminder of your next step. Each one has a link to stop them.
• Finding an attorney. When you look for matches, the app sends the kind of case, your state and county, the court or city if you add them, and your language. Nothing that identifies you is sent at this step.
• Attorney requests and bookings. When you choose an attorney, we send them the kind of case, the court, date and county, your account of what happened, and how to reach you. For an accident or injury, they also get your answers about it: what kind it was, when and where it happened, injuries and treatment, any police or incident report, insurance, who you think was at fault, and the questions for that kind of case (for example the property or business, the animal’s owner, your employer, the doctors or facility, or the product). Before you send it, “See exactly what we’ll send” shows every answer. Witnesses’ names and numbers, an animal owner’s phone number and address, a supervisor’s name, and the name of a care-home resident or of someone who died aren’t sent with the request, and Invoked’s own copy of the request doesn’t include your answers. Some questions let you answer “Prefer to discuss with the attorney” instead. Your evidence packet (the report, timeline, letters and your recording) goes to them only if you choose to include it, either with your request or when it’s ready. It is sent as a private link that opens without an account. We keep a record of the request, the attorney’s answer and whether the packet was shared, but not the link itself.
• Weekly case check-ins. If you ask for weekly reminders about a court case, we receive the case number, the court, your email and (if you add it) the link to your court’s case search, so we can email you each week. Invoked doesn’t look up or read court records. Stop watching the case in the app, or use the link in any check-in email, and we stop and delete it.
• Payments are handled by Stripe (in the US: packets, bundles, upgrades, ticket, tow and record-clearing packets; everywhere: attorney booking fees) and by Apple (memberships, and outside the US, packets, bundles and upgrades). We never see your card number. We keep a record of each order (what you bought, when, the amount and your email) so we can deliver it, resend it and handle refunds. Each order and attorney request also records which version of our Terms of Use you accepted, and when.
• Gift memberships. When you buy a gift on our website, we keep your name and email, the name of the person it’s for (and their email, if you ask us to send it), your note, the day to send it, and the payment record, so we can deliver the gift, send your receipt, tell you when it’s redeemed and handle refunds. When someone redeems a gift, their phone makes a private key; we keep only a scrambled fingerprint of it, to know which phones the gift is on. If we emailed the gift, we send that person one reminder a week before it ends.
• Your membership’s ticket count. If you’re a member, the app sends your membership’s Apple purchase number (not your name or Apple ID) so everyone in your Apple Family shares one count of ticket contests for the year.
• Backup, if you turn it on: your cases, notes and settings, and your recordings, are encrypted on your phone with your backup code before they’re sent. We store them but can’t read them. If you lose the code, we can’t recover them.
• Updates to the rules for officers. About twice a day, the app asks our server whether there’s a newer version of its library of state laws and police departments’ policies, so new rules reach you without an app update. It sends only the version your phone has: nothing about you, your cases or your recordings. Like any request, it reaches our server from your phone’s IP address, which we don’t keep.
• Password reset codes are emailed to the address you enter. We keep only a scrambled fingerprint of the code, for 15 minutes.

Anonymous usage

Unless you turn it off, Invoked tells our server which steps people take in the app, for example that the app was opened for the first time, that a price was shown, or that a payment went through, so we can see where people get stuck and make the app better. It’s sent with a random ID the app makes for itself, the app version and the state you’ve chosen for rules. It is not linked to your name, email, account, phone number or device, and never includes your recordings, anything you type or say, or your exact location. If you buy a membership, Apple tells us about renewals and cancellations using that same random ID, so we can count how many memberships are active. Turn it off any time in Account › Share anonymous usage; doing so also deletes from our server everything your phone had shared.

Invoked on the web

You can sign in at invokedapp.com/app with your backup code and use Invoked in your browser, with the same information as on your phone.

• We still can’t read it. Your backup is downloaded encrypted and opened in your browser, with a key made from your code. The code stays in your browser. We don’t have it, and we can’t recover it.
• What stays in your browser. Your information, photos and any recordings you make or open there are kept in your browser. Closing the browser clears them, unless you choose “Keep me signed in on this computer.” Signing out clears them at once. Don’t keep it signed in on a shared or work computer.
• Backups work the same way. A change you make on the website is saved to your encrypted backup, and your phone picks it up, and the other way round. Recordings you make on the website are backed up encrypted, like the ones from your phone, if you have backup on.
• No usage statistics. The website doesn’t send the anonymous usage information described above.
• Other companies, only when you use them. Stripe’s payment form loads when you pay by card. Deepgram receives a recording’s audio only if you choose cloud transcription, as described under When audio or words leave your phone.

Our website

invokedapp.com has no ads, no analytics, no tracking cookies and no social media buttons, and it doesn’t load anything from other companies (apart from what’s described under Invoked on the web, and only when you use it). Like any website, the servers that deliver it (Netlify) see your IP address when you load a page.

• The launch list. If you ask us to tell you when Invoked is ready, we keep your email address, whether you use iPhone or Android, and when you asked. We send one email to confirm, then one email on the day the app is ready for your phone, and then delete the list. Each email has a link to take yourself off sooner. We never use the list for anything else or share it.
• Gifts. Buying a gift membership is described above, under What our server receives.
• Attorney applications. Applying on the website is the same as applying in the app: see If you’re an attorney.

Who handles your information

Only Invoked staff, through our internal Desk, can see what our server keeps. These companies process it for us, only to provide Invoked:

We don’t sell or share your information for advertising, and we share it with no one else except as described here or when the law requires it. Even then, we can only hand over what we have. We can’t read what’s on your phone or in your backups, or a packet once its 30-day email copy is deleted.

How long we keep things

• Packet email copies (the PDF and your private packet link): 30 days. Password reset codes: 15 minutes.
• Sentinel: we don’t keep transcripts or what Sentinel finds; Anthropic deletes them within 30 days.
• Encrypted packets, backups and recording backups: until you delete them or your account.
• Attorney requests: until you delete your account, so you and the attorney can follow up.
• Weekly check-ins: until you remove the case.
• The launch list: until we send the launch email, or sooner if you take yourself off.
• Gift memberships: the names, emails and note for as long as the gift lasts and a year after, then the payment record only.
• Order and payment records: kept for tax and refund records. When you delete your account, your name, email and phone are removed from them.

Deleting your information

Account › Delete my account deletes everything on your phone and asks our server to delete your packets and their emailed copies, backups, recording backups, attorney requests, check-ins and reset codes. Order records are kept without your name, email or phone. You can also delete all recordings at any time.

Anything you already sent to an attorney stays with them, under their own professional duties. Ask them directly if you want it deleted. A membership is billed by Apple, so cancel it in Settings › your name › Subscriptions.

If you’re an attorney

When you join, we keep what you give us: your name, firm, email, phone, bar state and number, website, the states, counties, cities and courts you cover, your practice areas, fees and reported track record, languages, reply time and bio, plus when you agreed to our terms. People choosing an attorney see your name, firm, photo, bio, fees, track record, languages, reply time, where you practice and the states you’re licensed in. They never see your email, phone or bar number; we only show that your bar number is on file.

Your listing fee is billed by Stripe, which keeps your card or bank details; we never see them. We keep a record of the requests sent to you, your answers and when you replied, to run matching and the Desk. The private links in your request emails are tied to one request each. Ask us at any time to remove your listing and your details.

Security

Everything Invoked sends travels encrypted (HTTPS). Recordings on your phone are protected by iOS encryption and, if you choose, Face ID. Backups and packets are encrypted on your phone before they leave it. Access to our server and Desk is limited to Invoked staff and protected by secret keys.

Children

Invoked isn’t directed to children under 13, and we don’t knowingly collect their information. If you believe a child has sent us information, contact us and we’ll delete it.

Your rights

Depending on where you live, you may have the right to know what we hold about you, to correct it, to delete it, and to opt out of its sale or use for targeted advertising (we do neither). We honor these requests for everyone, wherever you live. Most can be done in the app; for anything else, email us and we’ll answer within 30 days. We won’t treat you differently for asking.

Changes

When we change this policy, we update the date at the top. If a change is significant, we tell you in the app or by email before it takes effect.

Contact

Invoked LLC
16220 N Scottsdale Rd, Suite 300
Scottsdale, AZ 85254
privacy@invokedapp.com