Your data stays on your device.
Invoko is a voice-first AI desktop agent that puts privacy and permissions first. Learn how your voice is handled and what stays on your device.
How Invoko handles your data
The diagram traces every path your data takes, from your voice through the proxy to the LLM and back.
Voice recordings are deleted after transcription
When you speak, Invoko sends the audio to generate a transcript.
Once the transcript arrives on your device, Invoko deletes the recording.
We do not store voice recordings or use them to train AI models.
Audio never retained
Where your data lives
Your Mac holds your audio history, task outputs, task memory, and workspace context inside a local database on your device.
Sensitive local memory can be encrypted using keys tied to your Mac, and stored previews remove sensitive details before becoming searchable.
For each task, Invoko sends only the context needed to complete the request. The response goes straight back to your device.
Persistent data stays local
Invoko only sees your screen when you let it
Invoko reads your screen when you trigger the Reply Agent or start a long recording session.
Invoko processes each screenshot in memory and discards it with no background capture.
Always user-triggered
Only what’s needed for the task
For each request, Invoko sends only the relevant text context, routed through its Cloudflare proxy for auth and API key protection.
Your local history stays on your Mac. The model result goes straight to your device. The proxy stores nothing in transit.
Full library never uploadedInvoko adapts to the size of the task.
Some tasks only need a quick answer. Others need more space to think through properly.
Invoko shifts between those states as you work.
It can stay lightweight for small interactions, or expand into a larger workspace when more context, memory, or ongoing progress is needed.
Tasks can keep running in the background while progress stays visible, so you can continue working without managing another dashboard or interrupting your flow.
Full privacy policy
Privacy Policy for Invoko
1. Introduction
Invoko (“Invoko”, “we”, “us”, or “our”) is a voice-first, screen-aware desktop assistant. This Privacy Policy describes how we collect, use, store, and protect personal information when you use the Invoko desktop application and website (collectively, the “Service”).
By downloading, installing, or using Invoko, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.
Our core principles: transparency, user control, and minimal data collection. Invoko is designed to support your work quietly — and our data practices reflect the same philosophy.
2. Information We Collect
2.1 Account & Identity Information
When you create an Invoko account, we collect:
- Email address
- Name (if provided via Google or Apple Sign-In)
- Authentication tokens and session identifiers
- Account preferences and settings
You may sign up using your email address or Google account. When you use a third-party sign-in method, we receive only the information that provider shares with us based on your authorization.
2.2 Voice Input & Transcription
Invoko is a voice-first assistant. When you activate Invoko via push-to-talk, hotkey, or another explicit trigger, your voice input is captured and processed.
- Voice recordings are not retained. Audio is streamed in real time solely to generate transcriptions or perform your requested actions.
- Transcribed text may be processed transiently to fulfill a request and may be stored as part of user-visible outputs (such as assistant responses, drafts, or task history) if you choose to save them.
- Invoko doesn’t listen passively. It activates only on your explicit command — push-to-talk, hotkey, or other explicit options you configure.
2.3 Screen Awareness Data
When you enable screen awareness, Invoko may temporarily read or capture screen content to understand context and assist you more effectively.
- Screen data is processed only in memory and is not stored on our servers.
- Screenshots or screen captures are discarded immediately after use.
- Screen awareness is never active without your explicit permission.
- You can disable screen awareness at any time; Invoko continues to work in voice-only mode.
- Screen data is never used to train AI models.
You can always see what Invoko is using and what it is doing: listening, reading, working, or done. You can change what is in scope at any time.
2.4 Task History & Assistant Content
When you use Invoko’s assistant features, we may store user-visible content generated within the app, including:
- Assistant responses and generated text
- Task results, summaries, and conversation threads
- Files or snippets you drag into Invoko for processing
You decide what gets saved, exported, or kept as history. Content is retained until you delete it or close your account.
2.5 Payment Information
Invoko uses Stripe to process payments for paid subscription plans. We do not store your credit card number, CVV, or full payment details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards. We receive only limited billing metadata (e.g., last four digits of card, billing country, subscription status) necessary to manage your account.
2.6 Usage & Diagnostic Data
We collect limited operational data to maintain and improve the Service. On the desktop app, this data is collected in two layers:
- Core diagnostics: crash reports, limited error diagnostics, low-sample performance telemetry, app hang data, and device/application metadata such as OS version, app version, release channel, and environment
- Optional diagnostics and usage data: sanitized runtime diagnostics and coarse feature outcome analytics that help us investigate failures and understand whether key features are working reliably
Our diagnostics systems are designed not to include the contents of your voice inputs, screenshots, screen captures, full task transcripts, raw prompts, or default personal identifiers. We also disable screenshot and view-hierarchy capture in our desktop error-monitoring setup.
3. How We Use Information
| Purpose | Data used |
|---|---|
| Provide and operate the Service | Account data, voice input, task history |
| Process payments and manage subscriptions | Billing metadata (via Stripe) |
| Improve reliability and performance | Core diagnostics, optional diagnostics and usage data |
| Prevent abuse and ensure security | Account data, usage patterns |
| Communicate service updates | Email address |
| Comply with legal obligations | As required by applicable law |
Invoko does not use your data for advertising, behavioral profiling, or any purpose beyond what is described above.
4. Data Processing and Storage
4.1 AI Processing
Invoko uses AI models provided by OpenAI, Anthropic, or similar providers to power its voice understanding, task execution, and assistant capabilities. When you interact with Invoko, relevant portions of your input (such as transcribed voice text or task context) may be sent to these providers’ APIs for processing.
- AI providers process your input solely to generate a response and do not use it to train their models under our agreements.
- We do not use your data to train AI models.
- Inputs sent to AI providers are subject to their respective privacy policies and data processing agreements.
- We select AI providers that maintain strong data protection standards and enterprise-grade data handling commitments.
4.2 Data Retention
| Data type | Retention period | Notes |
|---|---|---|
| Voice audio recordings | Not retained | Discarded immediately after transcription |
| Screen captures / screenshots | Not retained | Processed in memory only, never stored |
| Task history & assistant content | Until deleted by user or account closure | You control what is saved |
| Account & identity data | Duration of account + 30 days post-deletion | Deleted upon account closure request |
| Payment metadata | As required by law (typically 7 years) | Stored by Stripe; we retain minimal metadata |
| Diagnostic and usage telemetry | 12 months | Includes crash data, performance telemetry, and optional sanitized diagnostics; automatically purged on a rolling basis |
4.3 Data Security
We implement industry-standard security measures including encryption in transit (HTTPS/TLS) and access controls to protect your information from unauthorized access, alteration, or destruction.
5. Data Sharing & Disclosure
We never sell your personal data to third parties. We share information only in the following limited circumstances:
5.1 Service Providers
We work with trusted third-party service providers who process data on our behalf under strict data processing agreements:
- AI Service Providers: To process voice and task processing (e.g., OpenAI, Anthropic, or similar)
- Cloud Infrastructure: For hosting and data processing (e.g., AWS, Google Cloud)
- Diagnostics and Analytics Providers: For crash reporting, performance monitoring, and optional sanitized diagnostics and usage telemetry
5.2 Legal Requirements
We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Invoko, our users, or the public.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to your data being transferred and becoming subject to a different privacy policy.
6. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
6.1 Universal Rights
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data and account
- Portability: Request your data in a structured, machine-readable format
- Restriction: Request that we limit how we process your data
- Objection: Object to processing based on legitimate interests
6.2 In-App Controls
- Toggle screen awareness on or off at any time
- Choose your activation method (push-to-talk, hotkey, or other)
- Turn optional diagnostic and usage sharing on or off in desktop app settings
- Delete individual task history items or all history
- Export your data before account deletion
- Close your account and request full data deletion
7. Children’s Privacy
Invoko is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe your child has provided personal information to us, contact us at privacy@invoko.app.
8. International Data Transfers
By using the Service, you acknowledge that your information may be transferred to and processed in countries other than your own, which may have different data protection laws. We ensure that any international transfer of personal data is subject to appropriate safeguards.
9. CCPA (California Residents)
If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at the email below.
10. GDPR (EEA / UK Users)
If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page, notify you via email, and provide a summary of what changed. Your continued use of Invoko after the effective date constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: legal@invoko.ai
We aim to respond to all privacy-related inquiries within 30 days of receipt.