Privacy policy
Last updated 19 October 2026
The short version. Right now we never receive your information. Envoi has no account, no servers and no analytics yet. Every trip you plan, with its messages, plans, costs, crew names and photos, is kept on your iPhone. When Envoi gets its own server so your crew can join from their phones, this policy will change, and we'll tell you in the app before it does.
1. Who we are
Envoi is made by SPENCER AI (ABN 31 978 335 623), Victoria, Australia ("we", "us"). This policy explains what happens to information in the Envoi app for iPhone and on this website. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
2. What Envoi keeps, and where
When you use Envoi you enter things like your display name, the name, dates, place and reasons for each trip, the names and roles of the people you add to the crew, chat messages and reactions, tasks, ideas, plans, costs, kitty entries and splits, and photos you choose.
- On your iPhone. All of it is kept in one file inside the app's own storage, with the photos you pick copied next to it. It's included in your own iPhone backup (iCloud Backup or your computer) if you use one. That backup is controlled by your Apple ID, not by us.
- Not on our servers. Envoi doesn't have any yet. The app makes no network requests of its own and contains no analytics, advertising or tracking code. Its fonts are built into the app.
- Kept until you delete it. A trip stays on your phone until you delete or leave it, or delete the app. Section 7 explains how.
3. Other people's names
When you add someone to the crew by name, their name and role are stored on your phone only. Please add people who know they're part of the plan (or, for a surprise, the guest of honour you're planning for). We never receive these names.
4. Permissions
- Photos. Only when you tap to add a photo, Envoi opens Apple's photo picker. It gets only the photo you choose, and copies it into the app's own storage. It can't see the rest of your library.
- Calendar. When you tap Add to my calendar, Envoi opens your phone's own new-event screen, already filled in. You save it there. Envoi doesn't read your calendar or write to it behind your back.
- Sharing. Invite the crew opens the share sheet with a short message about your trip. You choose where it goes, and what happens next is up to the app you send it with.
Envoi doesn't use your camera, microphone, location or contacts, and doesn't send notifications.
5. Crash reports
If you've turned on "Share with App Developers" in your iPhone settings, Apple may share anonymous crash reports and usage statistics with us. They don't identify you or contain your trips, and you can turn this off at any time in Settings, Privacy and Security, Analytics and Improvements.
6. This website, and emailing us
This website has no cookies, no analytics and no tracking, and loads nothing from other companies. Like any website, our hosting provider may keep standard server logs (such as IP address and pages requested) for security. If you email us, we use your email only to reply to you, and delete it when we no longer need it.
Overseas. We don't send your app data anywhere, in Australia or overseas. Our website host and email provider may store website logs and emails on servers outside Australia.
7. Deleting your data
- One trip: open its settings and tap Delete this trip (if you're the host) or Leave this trip. It's removed from your phone, with its photos.
- Everything: delete the Envoi app. Its storage goes with it.
- Backups: older iPhone backups may still hold the app's file until they're replaced or deleted.
Because we never receive your data, we can't see it, correct it or get it back for you.
8. When Envoi gets its server
Envoi is a group app, so the plan is for your crew to join a trip from their own phones, with one shared chat, plan and kitty. That needs a server, which means your name, your trips and what you post in them will be stored by us so the crew can see them. Before that switches on, we'll rewrite this policy to say exactly what's stored, where, for how long and who can see it, update the date at the top, and tell you in the app first. Nothing you've already made will be uploaded without you choosing to.
9. Your rights
You can ask us what personal information we hold about you and ask us to correct it, and you can deal with us without giving your name. For the app today, the answer is none: it all stays on your phone, where you can see, change and delete it yourself. Wherever you live, you also have any rights your local privacy law gives you.
10. Contact and complaints
SPENCER AI (ABN 31 978 335 623), Victoria, Australia. Email welcome@myspencer.ai with any question or complaint about privacy, and we'll reply within 30 days. If you're not happy with our reply, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.