Privacy Policy
Last updated
This policy covers the Mivento app, the Organizer app and this website, mivento.co. It says what each one collects, why, who else handles it, how long it's kept and how to delete it. Where the two apps work differently, it says so.
Who we are
Mivento, Inc. makes the Mivento and Organizer apps and runs mivento.co. We're in Austin, Texas. In this policy, "Mivento", "we" and "us" mean Mivento, Inc.
Mivento helps you find what's going on near you, share photos and videos from events, and find your way around a venue. Organizer is for the people who run events, brands and stalls.
Questions about this policy or your data go to privacy@mivento.co.
What the apps collect
Both apps use the same Mivento account. You sign in with Apple, with Google, or with an email address and a password.
In both apps
- Your account. Your name, username, email address and an account ID. Your email address is used to sign you in, and other people don't see it.
- Your profile. Your name, username, photo, bio and privacy settings. You set them in Mivento, and other people can see them (see What other people and brands see).
- Photos and videos you add. In Mivento: photos and videos you share to an event, event covers, your profile photo and brand logos. In Organizer: stall photos. They're kept in Google's cloud storage. The app keeps a link to each file, and anyone who's given that link can open the file without signing in.
- Things you make. In Mivento: events, with the address and map spot you choose, comments, checklists, groups, brands and organizations. In Organizer: venue maps, stalls and stall invites, and a brand if you make one to claim a stall.
In Mivento
- Face templates, if you set up photo privacy. See Photo privacy and face templates.
- Friends and follows. Your friends, friend requests, the people and brands you follow, and invites. Mivento never reads your iPhone's contacts.
- Views and likes. When a photo or video shows on your screen or you open it, Mivento counts it, and it saves your likes.
- RSVPs and check-ins at events, and the brand Rewardships you join.
- A notification token for your iPhone. See Notifications.
- Your location, for events near you, which the server uses and doesn't keep. See Location and venue maps.
- An installation ID. When it opens, before you sign in, Mivento checks a settings file from Google's Firebase, which gives each install an ID.
In Organizer
- Organizer doesn't send notifications or ask for your location.
- When you set up a venue map, Organizer saves the venue's size and layout, each beacon's ID and name, and where you placed it on the map.
What the apps ask your iPhone for
- Mivento asks for the camera (to set up photo privacy), your location while you use the app, Bluetooth and Nearby Interactions (for venue maps), and notifications.
- Organizer asks for Bluetooth and Nearby Interactions, to set up a venue's beacons and check them with a walk test.
- Neither app asks for your photo library or your contacts. When you share a photo, the app sees only the photos you pick.
The App Store label
Each app's App Store page lists the kinds of data it collects. This table explains each one. Some come from code by Google that both apps use to sign you in with Google and to reach Firebase, and that code declares data of its own. Where the label says Analytics, it means Google's own measurement of that code. Mivento uses no analytics service.
| On the label | App | What it is at Mivento | Collected by | Kept |
|---|---|---|---|---|
| Name | Both | Your name on your profile | Mivento; Google's sign-in code, if you sign in with Google | Until your account is deleted (see Deleting your account) |
| Email Address | Both | The email you sign in with | Mivento; Google's sign-in code | Until your account is deleted |
| Phone Number | Both | Mivento never asks for or reads your phone number. Google's sign-in code lists it as data it may collect. | Google's sign-in code | Under Google's privacy policy |
| User ID | Both | Your account ID, saved with what you make | Mivento; Google's sign-in code | Until your account is deleted, and with anything deleting leaves behind |
| Device ID | Both | Mivento's notification token and installation ID. In Organizer, only Google's code collects one. | Mivento; Google's sign-in and Firebase code | The token until you sign out, when the app can remove it, or until your account is deleted. Mivento never deletes its installation ID. Google's code keeps its own under Google's privacy policy. |
| Photos or Videos | Both | Photos and videos you share, covers, profile photos, brand logos and stall photos | Mivento | Until you delete them (see How long data is kept) |
| Sensitive Info | Mivento | Your face templates, if you set up photo privacy | Mivento | Until you remove them, or 30 days after you delete your account |
| Other User Content | Both | Events, comments, checklists, groups, brands and your bio; in Organizer, venue maps and stalls | Mivento | Until you delete them (see How long data is kept) |
| Contacts | Mivento | Your friends and follows inside Mivento, not your iPhone's contacts | Mivento | Until you remove them or delete your account |
| Product Interaction | Mivento | View counts and likes on photos and videos | Mivento | Your likes until your account is deleted; counts stay with the photo; each record of a view about a day |
| Precise Location | Mivento | The location your iPhone saved inside a video file. Videos shared from Mivento 1.0.13 or earlier keep it. Later versions take it out before upload. | Mivento | With the video |
| Coarse Location | Both | Google's sign-in code lists it as data it may collect. In Mivento, the server uses your location for the feed and doesn't keep it. | Google's sign-in code | Under Google's privacy policy |
| Other Usage Data | Both | How Google's sign-in code is used | Google's sign-in code | Under Google's privacy policy |
| Other Diagnostic Data | Both | How Firebase's code is working, reported to Google | Google's Firebase code | Under Google's privacy policy |
| Other Data Types | Both | Google's sign-in code, and in Mivento Firebase's notification code, list it as data they may collect | Google's sign-in code; in Mivento, also Firebase's notification code | Under Google's privacy policy |
Photo privacy and face templates
Photo privacy is optional, and it's in Mivento only. Until you set it up, photos of you can be shared to event albums. Once you set it up, if Mivento finds you in a photo someone shares to an event you're a guest at, the photo isn't posted.
What's saved
During setup, your iPhone's camera finds your face and your iPhone turns it into face templates: numbers that describe your face, not a photo. Finishing setup saves up to 16 templates to your Mivento account and turns on Photos of me need my permission. No photo of you is saved. In the app, only you can see or change your templates. Mivento's server reads them to run the check below.
When a photo is checked
Before a photo or video goes into an event's album, the iPhone sharing it finds the faces in it (for a video, in up to 15 frames) and turns them into face templates. It sends only those templates to Mivento's server, never the photo. Faces too small to read are skipped, and a photo with no faces sends nothing. Changing an existing event's cover runs the same check.
The server compares the templates with those of the event's guests who've turned on Photos of me need my permission: the people invited, the people who RSVPed and the people who checked in, apart from the person sharing. It doesn't keep the templates it's sent. That includes the faces of people who don't use Mivento: their templates are compared, then dropped.
What the check doesn't cover
- People who haven't set up photo privacy.
- An event's hosts and the brand team running it, and people on none of the event's lists. At an event whose lists reach 10,000 people, anyone added after that.
- Photos shared before you set up photo privacy, or before you were on the event's lists. The check runs only when a photo is shared.
- Photos added without going through the Mivento app's check. Mivento's server doesn't confirm a photo was checked yet.
- A new event's first cover, profile photos, brand logos and Organizer stall photos.
- Mivento versions before 1.0.13 could post a photo when the check couldn't finish, for example with no signal. Version 1.0.13 and later never post a photo unchecked: they wait and check again, or don't post it.
When the check finds you
The photo isn't posted. If you're the only person it found and you're friends with the person sharing, they see that it's you and can ask you. The photo then waits outside the album until you answer. Yes adds it to the album, and no deletes it. If you don't answer, the request expires after about 7 days and the photo is deleted. Expired requests are cleaned up once a day, so this can take up to about 9 days.
You can change this for an event you're going to: in that event's album, tap the raised hand to open Privacy for Event, turn on Choose for this event, and pick Allow sharing or Need my permission.
Deleting your face templates
In Mivento, go to your profile, then Settings, then Photo Privacy, then Remove Face Templates. That deletes your templates and lets photos of you be shared again. Turning off Photos of me need my permission keeps your templates, so you can turn it back on later, and choosing Need my permission for one event still applies there. Deleting your account also deletes them, 30 days later. Until then, the check still uses them.
Mivento uses face templates only for this check. It never uses them for ads, marketing or anything else, and never shows them to other people or brands. Mivento's server logs keep counts from the check, never templates.
Location and venue maps
Events near you
Mivento asks for your location while you're using the app. The feed sends your location with each request, and the map sends the area you're looking at. Mivento's server uses it to answer that request, and doesn't save or log it. The map remembers where you last looked, on your iPhone. Apple's maps service gets the area the map shows, your position to look up place names, and what you type into place and address searches.
Photos don't keep location or camera details when you share them. Videos shared from Mivento 1.0.13 or earlier keep the location and device details your iPhone saved in the file. Later versions take them out before upload.
Venue maps
At events with a venue map, Mivento can show your spot on the map using beacons placed around the venue. That takes Bluetooth and Nearby Interactions, and you choose whether to allow it for each event. Your position, and the readings used to work it out, stay on your iPhone. Mivento's server gets only your choice for each event and when you made it, and your overall setting, which is saved with your profile.
Notifications
Mivento saves a token from your iPhone to send you notifications. It's saved where only your account and Mivento's server can read it, and signing out removes it when it can. Notifications can include people's names, event, group and brand names, checklist items, RSVP answers and the first 100 characters of a comment. They go through Google's Firebase Cloud Messaging and Apple's push service, and Mivento keeps a copy for the notifications list in the app. Organizer doesn't send notifications.
What other people and brands see
- Your profile. Anyone signed in to Mivento can open your profile, and can read your privacy settings. Turning off Allow others to find me keeps you out of search. It doesn't hide your profile from someone who finds it another way, for example on an event's guest list. Your comments keep your name and photo.
- Events. An event's hosts, its brand team and its guests, including people invited who said no, can see who's on its guest, RSVP and check-in lists. If the host shows attendees, most people who can see the event can see them too. So can anyone who can see a public event Mivento lists from another website.
- Photos and videos you share to an event can be seen by the people who can see that event. For a public event, that's anyone on Mivento, and its photos can show up in their feed.
- Friends, follows and Rewardships. List visibility settings hide you from other people's lists in the app. Mivento's server doesn't enforce them yet, so someone with a Mivento account and the technical know-how could still read who's friends with whom, who follows whom and who's in which Rewardships. The same goes for Allow others to follow me: the app respects it, but the server doesn't check it yet.
- Brands. A brand's team sees who RSVPs to and checks in at the brand's events. If you join a brand's Rewardship, the brand's team also sees your points and history in it, and can look up your check-ins at its events since you joined, up to 180 days back. Each lookup is logged, and Rewardship Details shows the latest ones. Ending the Rewardship stops these lookups, though Mivento's server doesn't yet stop a brand's team from turning an ended Rewardship back on. The brand sees this inside Mivento, and Mivento doesn't send it anywhere else.
Who else handles your data
- Google runs the services Mivento is built on: Firebase sign-in, the database and file storage (in the United States), Mivento's server code, notifications, app settings, logs, and the hosting for this website. If you sign in with Google, Google handles that too.
- Apple handles Sign in with Apple if you use it, push notifications and maps.
- Microsoft handles email sent to mivento.co, including privacy@mivento.co.
These companies handle data only to provide their services to Mivento and to you, under terms that require them to protect it at least as well as this policy does. No other company gets personal data from the apps or from Mivento's server. Brands see only what's described above, inside Mivento.
Data travels encrypted, and Google encrypts everything Mivento stores. Only Mivento's own team can open Mivento's cloud accounts.
What Mivento doesn't do
Mivento doesn't sell personal data for money, show ads, or track you across other companies' apps or websites. It uses no analytics service. It never reads your iPhone's contacts or photo library.
How long data is kept
What you add is kept while your account exists, until you delete it. When you delete things:
- A photo or video. Deleting it removes the file, its thumbnail and its record. A video's preview clip, and the photo's likes and comments, stay for now.
- An event. A deleted event can be restored for 30 days, or removed using Delete Forever in Settings, then Recently Deleted. That removes the event and its photo records, and deletes the files you shared. Files guests shared stay in storage for now. Otherwise, after 30 days it stays hidden, with its photos, and isn't deleted yet.
- A group. A deleted group can be restored for 30 days. After that it stays hidden, and isn't deleted yet.
- Your account. See Deleting your account.
Some data is kept for a set time:
| What | How long |
|---|---|
| Mivento's server logs, which hold account IDs, event IDs and event titles | 30 days |
| Request logs for Mivento's server, which hold your IP address and device type | 30 days |
| IP addresses logged by Google's sign-in service | A few weeks |
| Google's backups of a deleted account | Up to 180 days |
| Deleted files in storage | Recoverable for 7 days, then gone |
| A photo waiting for your yes or no | Until you answer, or about 7 to 9 days |
| A record that you viewed a photo or video | About a day |
| On your iPhone: saved events, images, feed items and notifications, cleared the next time you open the app signed in, or when you delete it | 30 days, 7 days, 7 days and 30 days |
Mivento's database has no backups, so what's deleted from it is gone.
Deleting your account
Mivento and Organizer use the same account, so deleting it in one deletes it in both. In Mivento, go to your profile, then Settings, then Delete Account and Continue. Sign in again if asked, then choose Delete My Account. In Organizer, tap the person icon at the top of the screen, then Delete Account. If you don't manage a brand, Delete Account is under Sign Out. Choose Continue, enter your password or sign in with Apple or Google when asked, then choose Delete Account. You can also email privacy@mivento.co and we'll delete it for you.
Right away, you leave search and the feed, and your name shows as "Former User" in guest lists. Your profile page still shows your name, username, photo and bio, with a note that you deleted your account, and your comments keep your name. If you signed in only with Apple, Mivento removes its access to your Apple ID, or shows you how if that fails. Otherwise, remove Mivento in your Apple ID or Google Account settings.
For 30 days, you can change your mind: sign in again and choose Restore My Account.
After 30 days, at the next daily cleanup, Mivento deletes your account and sign-in, your profile and username, your face templates, your settings, your friends, follows and invites, your RSVPs and check-ins, notifications to you, your Rewardships and their access logs, your organization memberships, and your likes and comments. Events you host are marked deleted, so guests no longer see them, and guests may get a notice that they were cancelled.
What's left behind for now. Deleting an account doesn't yet remove everything. Today it leaves:
- your photos, videos and other files in storage, and the records of the photos and videos you shared, which can show up in other people's feeds again;
- your events, hidden, with their photos, and events you made for a brand, which stay up;
- your groups, group memberships and invitations, organizations and brands, your entry in organizations' member lists, and invites you sent for a brand;
- your choices for single events, about photos and venue maps;
- checklist items you claimed and stall invites;
- like and comment counts, and other people's notifications that mention you;
- the app's installation ID.
We're working on deleting these too. Until then, email privacy@mivento.co and we'll delete them for you.
Your choices
In Mivento, Settings is on your profile.
- Photos of you: in Mivento, Settings, then Photo Privacy. Turn Photos of me need my permission on or off, or Remove Face Templates. Each event can have its own choice.
- Venue maps: Settings, then Positioning. Turn off Allow positioning on the venue map, or Revoke your yes for one event under Per-event consent, which lists the events you've opened on this iPhone.
- Being found: in Settings, turn off Allow others to find me (under Discoverability) or Allow others to follow me (under Following).
- Brands: End Rewardship on the Rewardship's card in the Rewards tab.
- Notifications, location, camera and Bluetooth: Notification Preferences in Settings, or your iPhone's Settings.
- Your account: Delete Account in Mivento or Organizer (see Deleting your account).
Requests
Email privacy@mivento.co to:
- get a copy of your data;
- delete something the apps don't let you delete;
- ask us to remove a photo of you, even if you don't use Mivento. Tell us the event and what's in the photo.
We reply within 30 days. To protect your account, we may ask you to write from the email address you sign in with.
18 and older
Mivento and Organizer are for people 18 and older. If you think someone younger has an account, email privacy@mivento.co and we'll delete it.
This website
mivento.co has no accounts, forms, cookies or analytics. Firebase Hosting, which serves it, sees your IP address, as any website's server does, and Google keeps it for a few months. This page loads nothing from another website.
Changes to this policy
When we change this policy, we change the date at the top. If a change means we collect more or share more, we'll tell you in the app or by email before it takes effect.
Contact
Mivento, Inc., Austin, Texas. Email privacy@mivento.co.