Privacy Policy

Last updated: September 17, 2026

Iri is a shared AI. The whole point is that several people and one assistant share a single conversation and a single memory — so the most important thing this policy can tell you is who else sees what you put in. That answer is: every member of your space. This page explains the rest.

Invezze LLC is the controller of the personal information described here.

What we collect

Account: your email address and/or mobile number, your display name, and optionally a photo, pronouns, birthday, and address if you choose to add them.
What you share in a space: messages, lists, meal plans, recipes, projects, reminders, photos, and files — and the facts Iri saves to the space's shared memory.
Usage: how the service is used — when turns run, how long they take, what they cost us, and error diagnostics. We record this as counts and metadata, not message content.
Payment: if you subscribe, our payment processor collects your card and billing details. We never see or store your card number. We keep a customer reference, your plan, its status, and renewal dates.
Your calendar, only if you turn it on (iPhone app): when you let Iri see your calendar, the app sends the next 30 days from the calendars you choose — each event's start and end, whether it is all-day, and its title, location and calendar name. Notes, guests, links and alarms are never sent. You choose, for each space separately, whether Iri may use nothing, only the times you are busy, or the details; with busy times only, titles and places are never shown to anyone. Because Iri replies in a conversation everyone in the space reads, anything it can see there it may mention there. The copy is refreshed when you open the app, past events are deleted within a day, and you can stop and delete all of it at any time.
Your contacts, only when you use “Add from contacts” (iPhone app): the app sends the phone numbers from your contacts so we can tell you which of them already have an Iri account. Names, emails and everything else in your address book stay on your phone. The numbers are used to find matches and are not stored.
Technical: the essential cookies that keep you signed in, and standard server logs including IP address.
Advertising and measurement, on our public pages only: our home page, pricing page and legal pages use cookies to measure which adverts and links bring people to Iri, so we know what to spend on. None of this runs inside your space. Once you are signed in, no advertising or measurement cookie is set and no third party is told which pages you visit. We never send the contents of your space — messages, lists, plans, or anything Iri remembers — to an advertiser or an analytics provider, on any page. In the EU, the UK and Switzerland, advertising cookies are switched off by default.

How it's used

To run your space and let Iri do the things you ask it to.
To give Iri the shared context that makes it useful — what the space has planned, bought, decided, and asked it to remember.
To send messages you have opted into: your group text, reminders you set, and account emails.
To take payment and manage your subscription.
To keep the service working and secure, diagnose faults, and understand cost.

Where the GDPR or similar law applies, we rely on: performance of our contract with you (running the service and billing you), our legitimate interests (security, fault diagnosis, understanding cost), your consent (text messaging, and optional profile details), and legal obligation (tax and accounting records).

Who else sees it

Everyone in your space. Messages, photos, lists, plans and shared memory are visible to every member. Removing someone from a space stops future access; it does not unsee what they already saw.
Our AI provider. To generate a reply, the relevant conversation and space context is sent to Anthropic. It is processed to produce that response and is not used to train AI models.
Nobody else, except the service providers below, and where we are legally required to.

Service providers

We use a small number of processors, each for one job, each bound to protect the data they handle:

Anthropic — generates Iri's responses.
Supabase — database, authentication, and file storage.
Vercel — application hosting.
Linq — delivers and receives the group text.
Stripe — payment processing and merchant of record for subscriptions. Stripe handles card details directly; we do not.
Resend — transactional email such as sign-in and invitations.
PostHog — measures how people find and sign up for Iri. It receives page addresses with every identifier removed, and never message or space contents.
Google Ads — measures which adverts bring people to Iri. Used on our public pages only, and told nothing beyond the fact that a signup happened.
TikTok — measures which adverts bring people to Iri. Used on our public pages only, and told nothing beyond the fact that a signup or a subscription happened.
Meta (Facebook and Instagram) — measures which adverts bring people to Iri. Used on our public pages only, and told nothing beyond the fact that a signup or a subscription happened.

International transfers

We operate from the United States and our providers may process data there and elsewhere. Where data is transferred out of the UK, EEA, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Text messaging (SMS/MMS)

If your space enables the group text, Iri participates in a group message thread with the members of your space.

Consent: each participant enters their own mobile number in the app before any message is sent. We never send messages to numbers that weren't added by their owners.
No sharing: mobile phone numbers and SMS opt-in data are never shared with, sold to, or rented to third parties for marketing or any other purpose. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Message frequency varies with how actively your space uses the thread.
Message and data rates may apply, according to your mobile carrier plan.
Stopping: remove your number in Settings and Iri stops texting you. You can also leave or mute the conversation in Messages like any other group chat, or reply STOP in the thread, which takes your number off automatically. Questions go to help@tryiri.com.

What we don't do

We don't sell your data — any of it — to anyone.
We don't use your content to train AI models.
We don't show ads, and we don't track you across sites.
We don't share your mobile number for marketing.

How long we keep it

Your content stays while your account and space exist, because that is what makes a shared memory useful. Delete your account and it is removed, subject to the note below on shared spaces. Backups are overwritten on a rolling basis. Billing and tax records are kept as long as the law requires, usually seven years.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in California, you also have the right not to be discriminated against for exercising these rights — and note that we do not sell or share personal information as those terms are defined by the CCPA.

Much of this you can do yourself in Settings. For anything else, email help@tryiri.com and we will respond within the time the law allows. You may also complain to your local data protection authority.

Deleting your data

You can delete your account from Settings at any time. This removes your profile and your account. Content you contributed to a shared space may remain visible to the other members of that space, because it is part of a conversation they were also in and removing it would rewrite their history. If you want that content removed as well, ask the person who runs the space, or email us.

Security

Access to a space is enforced at the database level, so one space cannot read another's data. Data is encrypted in transit and at rest by our providers. No system is perfectly secure, and we cannot guarantee absolute security.

Children

Iri is not directed to children under 13 and we do not knowingly collect their personal information. A child aged 13 to 17 may take part in a family space with the involvement of a parent or guardian. If you believe a child under 13 has given us information, email help@tryiri.com and we will delete it.

Changes

We will update this page when our practices change and revise the date at the top. If a change is material we will surface it in the app.

Who runs Iri

Iri is operated by Invezze LLC. See also our Terms of Service.

Contact

Privacy questions or requests: help@tryiri.com.