Privacy policy
Last updated 5 November 2026
Aivo helps you save places and plan outings with friends. This policy explains what we collect when you use the Aivo app and this website, why we collect it, who we share it with, and what you can do about it. Aivo is run by CodeNameKylo in South Africa, and we handle personal information in line with the Protection of Personal Information Act (POPIA).
What we collect
| Information | Why |
|---|---|
| Account: email address and password (stored hashed), or your Google account’s name and email if you sign in with Google | To create and secure your account |
| Profile: name, username, photo, bio, home area, and any Instagram or TikTok handle you choose to add | So friends can find and recognise you |
| Location: your device’s location while the app is open, if you allow it | To show spots near you and estimate travel times. We don’t track your location in the background |
| Home base: a starting point you choose to save | To plan routes and pickups. People in a plan with you can see it |
| Activity: saved spots, boards, friends, plans, votes and availability | The core features of the app |
| Notifications: a push token for your device and your notification settings | To send the notifications you’ve allowed |
| Usage events: which screens and features you use, with device type, OS and app version, language and a random installation ID | To understand what works and fix what doesn’t. We record IDs, counts and settings, never the text you type |
| Waitlist: email, first name, city and phone type, if you sign up on this website | To invite you when Aivo opens near you |
Who can see what
- Your profile (name, username, photo) is visible to other signed-in Aivo users so they can add you as a friend.
- Plans, votes and home bases are visible only to the host and the people in that plan.
- Anyone with a plan’s share link can see a preview: the plan’s title, the host’s first name and photo, the spots in it and how many people have joined. They can’t see who those people are.
- Saved spots stay private unless you turn on sharing saves with friends.
Service providers
We use a small number of providers to run Aivo. They process data on our behalf and only for these purposes:
- Supabase for accounts, the database and file storage
- Hetzner hosts the server for our place catalogue and usage analytics
- Google for Google Sign-In and for place details, photos and opening hours (Google Maps Platform). When you view a spot, its details may be fetched from Google
- OpenRouteService (HeiGIT) to calculate routes between home bases, the meeting point and plan stops
- Uber and Google Maps only when you choose to book a group ride or open a route in them: Aivo passes them the pickup points, meeting point and destination, and their own privacy policies apply from there
- Expo and Apple to deliver push notifications
- Vercel to host this website
Some of these providers store data outside South Africa. When that happens we rely on their contractual and security commitments to protect your information to a standard comparable to POPIA.
What we don’t do
- We don’t sell your personal information.
- We don’t use third-party advertising or cross-app tracking SDKs.
- We don’t read your contacts or messages.
If we ever work with venues or brands, we’ll only share aggregated, anonymised insights, such as how popular a category is in an area. That will never identify you.
How long we keep it
We keep your account data for as long as you have an account. When you delete your account, your profile, saves, boards, friends and plans you host are deleted. Usage events are kept for up to 24 months and are then deleted or anonymised. Waitlist entries are deleted when you ask, or once we’ve invited you and you’ve created an account.
Your rights
You can ask to see, correct or delete your personal information, object to how we use it, or withdraw consent at any time. You can edit most of your information in the app’s settings. For anything else, email hello@codenamekylo.com. To delete your account, see Delete your account.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Regulator (South Africa) at inforegulator.org.za.
Children
Aivo is for people aged 18 and over. We don’t knowingly collect information from anyone younger.
Security
Data is encrypted in transit, access to the database is restricted with row-level security, and admin access is limited to named people. No system is perfectly secure, but we’ll let you know promptly if a breach affects you.
Changes
If we make meaningful changes we’ll update this page and tell you in the app. Questions? Email hello@codenamekylo.com.