vivloBack to Home

Legal

Privacy Policy

v2.0Last updated: Jul 7, 20269 min read

The short version

  • You own your notes, recordings, and files. We host them to run the Service for you.
  • AI features send only the content you invoke them on to our providers — never to train models.
  • We don't sell your data. Every vendor we use is listed on our sub-processors page.
  • You can export everything or delete your account any time in Settings → Account.

This Privacy Policy explains how Imagination AI ("we", "us") collects, uses, discloses, and protects information when you use vivlo(the "Service"). By using the Service, you consent to the practices described here.

1. Information we collect

  • Account data: name, email address, profile photo, and authentication identifiers from sign-in providers (Google, Apple, email/password).
  • Your Content: notes, canvases, voice recordings, transcripts, tags, and uploaded files you create or import.
  • Usage data: features you interact with, in-app telemetry, device and browser metadata, IP address, and approximate location derived from IP.
  • Payment data: once paid plans launch, our payment processor will receive billing details. Imagination AI does not store full payment card numbers.

2. How we use your information

We use your information to operate the Service, sync your data across devices, power the AI features you invoke (summarization, transcription, semantic search, Ask vivi), communicate updates, prevent abuse, and comply with legal obligations.

3. How AI features use your data

When you use an AI feature, the relevant part of Your Content is sent to our AI providers so they can generate a response. We do not use it to train models, and our providers are contractually prohibited from doing so. Embeddings created for semantic search are stored on our infrastructure and are deleted when the source note is deleted.

Read the full breakdown — including voice transcription and embeddings — in our AI Data-Use & Privacy page.

4. Sharing & sub-processors

We do not sell your personal data. We share information only with: (a) infrastructure and AI providers strictly necessary to operate the Service; (b) authorities when required by valid legal process; and (c) acquirers in the event of a merger or sale, in which case you will be notified. The complete, dated list of vendors is on our Sub-processors page.

5. International transfers

vivlo's infrastructure is currently hosted in the United States. If we process data in additional regions in the future, this section will be updated accordingly. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Data retention

  • Active accounts: we retain Your Content for as long as your account is active.
  • Deleted notes are kept in Trash for 30 days before permanent deletion.
  • On account closure, we delete or anonymize your data within 30 days, except where retention is required by law (e.g., billing records).

7. Your rights — GDPR / EEA / UK

If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in Settings → Account, including a one-click export of all your notes. For other requests, email support@vivlo.net. You also have the right to lodge a complaint with your local supervisory authority.

8. Your rights — California / CCPA

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise these rights, email support@vivlo.net.

9. Cookies

We use a small number of essential cookies to keep you signed in and remember your preferences. See our Cookie Notice for the full list and how to control them.

10. Security

We use industry-standard measures — encryption in transit (TLS) and at rest, access controls, and audit logging — to protect your data. No system is perfectly secure; if we ever experience a breach affecting your data, we will notify you without undue delay.

11. Children

vivlo is not directed to children under 13 (or under 16 in the EU/UK). If you believe a child has provided us personal data, contact us at support@vivlo.net and we will delete it.

12. Changes to this policy

We will notify you of material changes by email or in-app notice. The "Last updated" date at the top of this page always reflects the latest revision.

Version history

Jul 7, 2026
Rewrote for readability: added a short-version summary, table of contents, an AI data-use section, a sub-processors reference, and dedicated GDPR/EEA and California/CCPA rights sections.
May 14, 2026
Initial published policy.

Privacy questions or requests can be sent to support@vivlo.net.