On-Demand
01After you summon Invoko
Invoko uses authorized screen context after you start a request with a shortcut, tap, or voice interaction.
Privacy
Privacy Overview
You choose when Invoko can observe: only when summoned, or during the proactive windows you configure.
Observation
When Invoko can observe
Choose On-Demand or Always-On. Invoko uses screen context within the mode, work windows, and system permissions you set.
Always-On
02During the work windows you set
Invoko uses authorized screen context during configured work windows to generate proactive suggestions. Observation stops outside those windows.
ModeWork windowsSuggestion frequencyPause statusSystem permissions
Context processing
What leaves your Mac
Invoko prepares authorized context on your Mac. A request, proactive suggestion, transcription, or approved action may require the task-relevant portion to leave your device.
Voice input
Voice starts when you start it
Invoko captures microphone audio after you begin a voice interaction.
Always-On does not capture microphone audio continuously by default. Continuous capture requires separate configuration and permission.
Raw audio not retained by default
Prepared on your MacLocal preparation
Invoko prepares authorized context on your Mac
Invoko assembles current task context from the screen, app, voice, file, and account sources you authorized.
Task-relevant context may leave your Mac when remote processing is needed. Saved task history, outputs, and memory remain local until you delete them.
Prepared locally
Authorizedscreen context
Data sent off your Mac
Invoko sends the context needed for the task
On-Demand starts after you summon Invoko. Always-On may use authorized screen context only inside the work windows you configure.
Invoko sends only task-relevant excerpts or image context. It does not upload a continuous screen history.
No continuous screen history
Encrypted in transit.Sent to the selected provider.
Remote processing
Context goes to the provider needed for the task
Invoko sends the task-relevant portion through its secure proxy to the selected transcription, AI, tool, or connected-service provider. The data-source disclosures below identify the processors and retention periods.
Results and saved history
Results return to your Mac
Invoko returns the result to your Mac. Task history, outputs, and memory remain local when you choose to save them. Screenshots are not retained by default, and remote providers handle task data under the retention terms disclosed below.
Data sources
How Invoko handles your data
See when Invoko uses each type of data, what leaves your Mac, who processes it, how long it is kept, and what you can control.
Screen and app context
Screen and app context you authorize for requests and proactive suggestions.
- Collection and trigger
- Current app, window title, page URL, selected or focused text, accessibility context, and a screenshot when needed. On-Demand starts after you summon Invoko. Always-On runs only inside the work windows you configure.
- Data sent off your Mac
- Only task-relevant text excerpts, metadata, or image context needed for an AI request leave the device. Invoko does not upload a continuous screen history.
- Retention
- Screenshots are not retained by default. Local task history or memory may retain the context needed for continuity until you delete it.
- Processors
- The Invoko desktop app, Invoko's secure proxy, and contracted AI providers used for the request.
- Purpose
- To understand the work in front of you, answer a request, or generate a proactive suggestion during an enabled window.
- Your controls
- Change modes, edit work windows and suggestion frequency, pause Always-On, revoke macOS Screen Recording or Accessibility access, and export or delete saved history.
Voice and transcripts
Audio and transcripts from voice interactions you start.
- Collection and trigger
- Microphone audio is captured when you start a voice interaction. Always-On does not continuously capture microphone audio by default; continuous audio requires separate configuration and permission.
- Data sent off your Mac
- The audio stream, transcript, or relevant transcript excerpt needed to transcribe speech and complete the request may leave the device.
- Retention
- Raw voice recordings are not retained by default and are deleted after transcription. A transcript may remain in user-visible task history until you delete it.
- Processors
- The Invoko app and contracted transcription or AI providers used for the interaction.
- Purpose
- To turn speech into text and carry out the request you make.
- Your controls
- Stop the interaction, pause Invoko, revoke macOS Microphone access, review or export saved transcripts, and delete task history.
Tasks, files, history, and memory
Content you submit, generate, or save in Invoko.
- Collection and trigger
- Prompts, files, snippets, generated outputs, task state, and saved preferences are used when you submit, import, save, or continue a task.
- Data sent off your Mac
- Only the file contents or excerpts relevant to the active task are sent for remote processing. Your full local library is not uploaded as a unit.
- Retention
- Saved content remains locally until you delete it or close your account. Temporary remote processing follows provider retention commitments.
- Processors
- The Invoko app, Invoko's secure proxy, and the AI or tool providers selected for the task.
- Purpose
- To complete work, show results, support follow-ups, and preserve continuity you choose to keep.
- Your controls
- Choose what to submit or save, stop a running task, export results and history, delete individual items or all history, and request account deletion.
Connected accounts and approved actions
Records and actions from services you connect.
- Collection and trigger
- Account identifiers, authorized records, and action parameters are accessed only after you connect a service and a task or configured feature needs it.
- Data sent off your Mac
- Only the records, fields, and action details needed for the approved task are exchanged with the connected service and, when needed, the selected AI provider.
- Retention
- Connection tokens remain until revoked or the account is closed. Task results may remain in local history until you delete them.
- Processors
- Invoko, the connected service, and any contracted AI provider required to complete the task.
- Purpose
- To read permitted context or take an action you request.
- Your controls
- Disconnect the account, revoke access with the provider, stop the task, and export or delete resulting history. Sensitive account actions still require an explicit request, authorization, or approval.
Account and billing
Identity, account settings, subscription status, and billing metadata.
- Collection and trigger
- Email, sign-in identifiers, account settings, subscription status, and limited billing metadata are collected when you register, sign in, change settings, or subscribe.
- Data sent off your Mac
- Identity and session data needed for authentication, plus payment details sent directly to the payment processor. Invoko does not receive full card details.
- Retention
- Account data is kept for the life of the account plus 30 days after deletion. Payment records follow legal and processor retention requirements.
- Processors
- Invoko, the sign-in provider you choose, and Stripe for payments.
- Purpose
- To authenticate you, maintain settings, provide the subscription, prevent abuse, and meet legal obligations.
- Your controls
- There is no observation stream to pause. Update settings, export your data, revoke third-party sign-in access, cancel the subscription, or close the account and request deletion.
Diagnostics and reliability data
Crash, error, performance, app, and OS information.
- Collection and trigger
- Crash reports, error stages, coarse performance measurements, app and OS versions, and optional sanitized usage events are collected when an error or measured product event occurs.
- Data sent off your Mac
- Structured operational fields may leave the device. Voice content, screenshots, full transcripts, raw prompts, and default personal identifiers are excluded by design.
- Retention
- Diagnostic and usage telemetry is retained for up to 12 months and purged on a rolling basis.
- Processors
- Invoko and contracted diagnostics, analytics, and cloud infrastructure providers.
- Purpose
- To diagnose failures, protect the service, and improve reliability and performance.
- Your controls
- Turn optional diagnostics off in Settings and request access, export, or deletion where applicable. Core reliability diagnostics remain limited and on by default.
Future data sources: Invoko will publish these details before connecting a new source, including health data.
Your controls
Controls you can change
Mode and work windows
Choose On-Demand or Always-On, edit work windows and suggestion frequency, pause observation, or return to On-Demand.
Sensitive account actions
Invoko requires your explicit request, authorization, or approval before a sensitive account operation.
Screenshots
Invoko does not retain screenshots by default. It discards them after the request or configured proactive suggestion.
Microphone audio
Always-On does not capture microphone audio continuously by default. Continuous capture requires separate configuration and system permission.
Privacy Policy
Last updated: July 20, 2026
1. Introduction
Ampliftai Inc. (“Invoko”, “we”, “us”, or “our”) operates the Invoko voice-first, screen-aware desktop assistant. This Privacy Policy describes how we collect, use, store, and protect personal information when you use the Invoko desktop application and website (collectively, the “Service”).
By downloading, installing, or using Invoko, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.
Our core principles: transparency, user control, and minimal data collection. You choose when Invoko can observe: only when summoned, or during the proactive windows you configure.
2. Information We Collect
2.1 Account & Identity Information
When you create an Invoko account, we collect:
- Email address
- Name (if provided via Google or Apple Sign-In)
- Authentication tokens and session identifiers
- Account preferences and settings
You may sign up using your email address or Google account. When you use a third-party sign-in method, we receive only the information that provider shares with us based on your authorization.
2.2 Voice Input & Transcription
Invoko is a voice-first assistant. When you start a voice interaction via push-to-talk, hotkey, tap, or another configured trigger, your voice input is captured and processed.
- Voice recordings are not retained by default. Audio is streamed in real time to generate transcriptions or perform your requested actions, then deleted after transcription.
- Transcribed text may be processed transiently to fulfill a request and may be stored as part of user-visible outputs (such as assistant responses, drafts, or task history) if you choose to save them.
- Always-On does not continuously capture microphone audio by default. Any continuous audio collection requires separate configuration and microphone permission.
2.3 Screen Awareness Data
When you authorize screen awareness, Invoko may read app and screen context to understand your work and assist you more effectively.
- In On-Demand mode, screen context is used only after you summon Invoko.
- In Always-On mode, authorized screen context may be used only during the proactive work windows you configure to generate suggestions.
- Only task-relevant context needed for an AI request is sent for remote processing; Invoko does not upload a continuous screen history.
- Screenshots or screen captures are not retained by default.
- Screen awareness is never active without macOS permission. You can pause it, return to On-Demand, or revoke permission at any time.
- Screen data is never used to train AI models.
You control the active mode, work windows, suggestion frequency, pause state, and system permissions. You can change what is in scope at any time.
2.4 Task History & Assistant Content
When you use Invoko’s assistant features, we may store user-visible content generated within the app, including:
- Assistant responses and generated text
- Task results, summaries, and conversation threads
- Files or snippets you provide to Invoko for processing
You decide what gets saved, exported, or kept as history. Content is retained until you delete it or close your account.
2.5 Connected Accounts and Approved Actions
Invoko accesses a connected service after you authorize the connection and a request or configured feature needs it.
- Invoko exchanges only the records, fields, and action details needed for the task with the connected service.
- Connection tokens remain until you disconnect the service, revoke access with the provider, or close your account.
- Task results may remain in local history until you delete them.
- Sensitive account operations require your explicit request, authorization, or approval.
2.6 Payment Information
Invoko uses Stripe to process payments for paid subscription plans. We do not store your credit card number, CVV, or full payment details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards. We receive only limited billing metadata (e.g., last four digits of card, billing country, subscription status) necessary to manage your account.
2.7 Usage & Diagnostic Data
We collect limited operational data to maintain and improve the Service. On the desktop app, this data is collected in two layers:
- Core diagnostics: crash reports, limited error diagnostics, low-sample performance telemetry, app hang data, and device/application metadata such as OS version, app version, release channel, and environment
- Optional diagnostics and usage data: sanitized runtime diagnostics and coarse feature outcome analytics that help us investigate failures and understand whether key features are working reliably
Our diagnostics systems are designed not to include the contents of your voice inputs, screenshots, screen captures, full task transcripts, raw prompts, or default personal identifiers. We also disable screenshot and view-hierarchy capture in our desktop error-monitoring setup.
2.8 Future Data Sources
Before Invoko connects a new data source, including health data, we will disclose what we collect and when, what leaves your device, retention, processors, purpose, and the controls available to pause, revoke, export, or delete the data.
3. How We Use Information
| Purpose | Data used |
|---|---|
| Provide and operate the Service | Account data, voice input, authorized screen context, task history |
| Generate configured proactive suggestions | Authorized screen and app context during configured work windows |
| Read from or act through a connected service | Authorized records, fields, and action parameters needed for the approved task |
| Process payments and manage subscriptions | Billing metadata (via Stripe) |
| Improve reliability and performance | Core diagnostics, optional diagnostics and usage data |
| Prevent abuse and ensure security | Account data, usage patterns |
| Communicate service updates | Email address |
| Comply with legal obligations | As required by applicable law |
Invoko does not use your data for advertising, behavioral profiling, or any purpose beyond what is described above.
4. Data Processing and Storage
4.1 AI Processing
Invoko uses AI models provided by OpenAI, Anthropic, or similar providers to power voice understanding, task execution, proactive suggestions, and assistant capabilities. When you make a request, or when Always-On generates a suggestion inside a configured work window, relevant portions of authorized context may be sent to these providers’ APIs for processing.
- AI providers process your input solely to generate a response and do not use it to train their models under our agreements.
- We do not use your data to train AI models.
- Inputs sent to AI providers are subject to their respective privacy policies and data processing agreements.
- We select AI providers that maintain strong data protection standards and enterprise-grade data handling commitments.
4.2 Data Retention
| Data type | Retention period | Notes |
|---|---|---|
| Voice audio recordings | Not retained by default | Deleted after transcription; continuous collection requires separate configuration and permission |
| Screen captures / screenshots | Not retained by default | Used as needed for a request or configured proactive suggestion, then discarded by default |
| Task history & assistant content | Until deleted by user or account closure | You control what is saved |
| Connected-service tokens | Until revoked, disconnected, or account closure | Revoke access in Invoko or with the connected provider |
| Account & identity data | Duration of account + 30 days post-deletion | Deleted upon account closure request |
| Payment metadata | As required by law (typically 7 years) | Stored by Stripe; we retain minimal metadata |
| Diagnostic and usage telemetry | 12 months | Includes crash data, performance telemetry, and optional sanitized diagnostics; automatically purged on a rolling basis |
4.3 Data Security
We implement industry-standard security measures including encryption in transit (HTTPS/TLS) and access controls to protect your information from unauthorized access, alteration, or destruction.
5. Data Sharing & Disclosure
We never sell your personal data to third parties. We share information only in the following limited circumstances:
5.1 Service Providers
We work with trusted third-party service providers who process data on our behalf under strict data processing agreements:
- AI Service Providers: To process voice and task processing (e.g., OpenAI, Anthropic, or similar)
- Connected Service Providers: To read authorized records or carry out actions you approve
- Cloud Infrastructure: For hosting and data processing (e.g., AWS, Google Cloud)
- Diagnostics and Analytics Providers: For crash reporting, performance monitoring, and optional sanitized diagnostics and usage telemetry
5.2 Legal Requirements
We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Invoko, our users, or the public.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to your data being transferred and becoming subject to a different privacy policy.
6. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
6.1 Universal Rights
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data and account
- Portability: Request your data in a structured, machine-readable format
- Restriction: Request that we limit how we process your data
- Objection: Object to processing based on legitimate interests
6.2 In-App Controls
- Choose On-Demand or Always-On and return to On-Demand at any time
- Configure work windows and suggestion frequency, or pause Always-On immediately
- Choose your activation method (push-to-talk, hotkey, tap, or other configured trigger)
- Revoke screen, accessibility, microphone, or other system permissions at any time
- Disconnect a connected account or revoke access with the provider
- Turn optional diagnostic and usage sharing on or off in desktop app settings
- Delete individual task history items or all history
- Export your data before account deletion
- Close your account and request full data deletion
Sensitive account operations require your explicit request, authorization, or approval.
7. Children’s Privacy
Invoko is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe your child has provided personal information to us, contact us at privacy@invoko.app.
8. International Data Transfers
By using the Service, you acknowledge that your information may be transferred to and processed in countries other than your own, which may have different data protection laws. We ensure that any international transfer of personal data is subject to appropriate safeguards.
9. CCPA (California Residents)
If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at the email below.
10. GDPR (EEA / UK Users)
If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page, notify you via email, and provide a summary of what changed. Your continued use of Invoko after the effective date constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: legal@invoko.ai
We aim to respond to all privacy-related inquiries within 30 days of receipt.