InvitesOnly App
This Privacy Statement describes how InvitesOnly (“we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use our mobile application (the “App”). This App is intended for users who are 18 years of age or older.
1. Information We Collect
We collect information about you in various ways when you use our App:
- Information you provide directly: When you create an account, we may collect your name, email address, date of birth, and any other information you choose to provide.
- If uploading images, you should remove embedded location data (EXIF GPS).
- Usage information: We may collect information about how you use the App, such as your activity within the App, the content you view, and the dates and times of your interactions.
- Location information: The App uses location to identify what events are nearby and applicable. Location is stored while using the app.
- Facial verification data: InvitesOnly uses facial verification to confirm that the person creating an account matches the profile photo provided for that account.
- Device information: We may collect information about your mobile device, including the device type, operating system, unique device identifiers, and mobile network information
2. How We Use Your Information
We may use the information we collect for various purposes, including to: the App. Personalize your experience;
- When using the App.
- Communicate with you, including responding to your requests and providing updates or notices.
- Monitor and analyze usage and trends to improve the App’s functionality.
- Enforce our terms and conditions to help provide a safe community for all users.
3. Sharing Your Information
We may share your information in the following circumstances:
- With Other Users: Certain information, such as your profile and activity within the App, may be visible to other users of the App.
- With Service Providers: We may share your information with third-party service providers who assist us with various tasks, such as hosting, data analysis, and customer service.
- For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
4. Data Security
We take reasonable measures to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
5. Age Restriction
The Invites Only App is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
6. Facial Recognition
InvitesOnly uses facial verification to confirm that the person creating an account matches the profile photo provided for that account.
During facial verification, InvitesOnly uses your stored profile photo and a selfie captured through your device camera. These images are securely transmitted to Microsoft Azure Face API to perform a one-to-one facial comparison and determine whether they appear to show the same person. The images are not compared against a database of other individuals.
Profile Photo
Your profile photo is stored as part of your InvitesOnly account and is displayed to other users as part of the app’s normal functionality. When you delete your account, we remove your active account profile.
For user-safety and historical-record purposes, we retain a copy of your profile photo in restricted safety-retention storage for 12 months after account deletion. We may also retain your name and profile photo with completed-event records for the lifetime of those records, so completed-event history remains understandable. This historical information is not used to reactivate your account or make your profile available for new activity. After 12 months, the private safety-retention copy of your profile photo and associated safety record are automatically deleted, unless a longer period is required for an active safety investigation, legal obligation, or legal hold.
Verification Selfie
The verification selfie is used only for the facial comparison. InvitesOnly does not store the verification selfie in its backend or cloud image storage. Microsoft Azure Face API processes the verification selfie solely to complete the one-to-one comparison with the user’s profile photo. Microsoft does not store submitted images after analysis; however, the temporary Face ID or face template created for the comparison may be retained by Microsoft Azure for up to 24 hours, after which it is deleted.
InvitesOnly does not retain facial embeddings, biometric templates, extracted facial features, face identifiers, or facial-comparison images after verification has been completed. We retain only your account’s verification status, such as whether facial verification was successful.
Microsoft Azure acts as our facial-comparison service provider. Your profile photo and verification selfie are shared with Microsoft Azure only for the purpose of completing the one-to-one comparison. These images are not sold, used for advertising, shared with other users, or disclosed to unrelated third parties.
Microsoft states that images submitted to the Azure Face service are not stored after analysis and are not used to train, retrain, or improve its facial-recognition models. Microsoft may temporarily process technical identifiers or extracted features where necessary to complete the comparison. Any such information is handled and deleted in accordance with Microsoft Azure’s applicable data-retention practices.
Your verification status is retained while your account remains active. It is deleted when you delete your account. You may delete your account and associated verification status through the app.
Facial verification information is used only for account verification and user-safety purposes. It is not used for advertising, tracking, analytics, marketing, behavioural profiling, or automated decision-making unrelated to account verification.
7. Changes to This Privacy Statement
We may update this Privacy Statement from time to time. If we make significant changes, we will notify you through the App or by other means. Your continued use of the App after any changes to this Privacy Statement constitutes your acceptance of the revised Statement.
8. Contact Us
If you have any questions about this Privacy Statement, please contact us at: support@invitesonly.nz
InvitesOnly Website
1. Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
2. Cookies
If you visit our site and connect with us we may store your name, email address and location in cookies.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
3. Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
4. Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
5. How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
6. What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
7. Where your data is sent
Visitor comments may be checked through an automated spam detection service.
Last Updated: June 2025