Privacy

Version 2.7 · 11 November 2026

What you read, choose and tell Sinvitation is the most private thing we hold. The small team behind it can see it, because that is how we learn what readers like; other readers cannot, except a review you choose to post. We never sell it or use it for advertising, and if you have an account you can delete it yourself, in Profile.

1. Who we are, and what this covers

Sinvitation is run by Baker Shop USA LLC, a Georgia limited liability company in the United States. We decide what happens to your information, and we answer for it. For anything about your privacy write to privacy@sinvitation.app.

This notice covers the Sinvitation website, the waitlist and the reader app. Sinvitation is offered in the United States, and this notice is written for readers there. It explains what we collect, why, who else sees it, and what you can ask us to do about it. If anything here is unclear, ask us and we will rewrite it.

If you are outside the United States, Sinvitation is not open to you yet, and the only thing we collect from you is what you give the waitlist on the page that says so: your email address and that you are 18 or older. We keep it, with your agreement, only to tell you if Sinvitation opens where you are. Write to privacy@sinvitation.app and we will delete it, or give you a copy; you can also complain to the data protection authority where you live. It is stored in the United States by the companies in section 11.

2. The one line you tick when you make your account

You can start reading before you make an account. Until you do, the choices you make about what you like (your heat, who you want, what you’re into, your quiz answers) and your place in the book are kept only in this browser, on this device. None of it is sent to us or saved on our servers, and we do not use it to write anything for you.

Create is the one exception, because Vesper needs our servers to answer you. When you start building a world, the app makes you an anonymous reader on our servers, after the same check that you are a person, and your conversation with Vesper and the world you build with her are saved there and sent to the companies section 10 names. When you make your account they come with it; if you never do, they stay with that anonymous reader, as section 13 says.

When you make your account, you tick this line: “I’m 18 or over, and I agree Sinvitation can use what I tell it about what I like, including sex, to write my stories.” It sits beside links to this notice and our terms, and making an account here asks for it. We keep the time you ticked it and which wording you saw, with your account. Only then does what this device kept move to your account. If you sign in to an account that has never agreed, the same line is asked once above your story, and nothing about what you like is saved to that account until you tick it. If we change the wording, we ask again.

You can take it back whenever you like by deleting your account, as section 14 says, or by writing to us.

3. What we collect

We do not collect payment details. Nobody is charged.

What our usage measurement never sees: the text of any chapter, your settings, your limits, your heat, anything about your character, your quiz answers, your name, your email address, or a word of any feedback you send. Events record that something happened and on which screen, never what you read, chose or said; feedback records only whether you spoke or typed. Events are tied to a random id for this tab, or to your account id once you have one. Automatic click capture is off. Masked session recording is described in the next section, with the way to turn it off.

4. Masked session recording, and how to turn it off

We record masked sessions to improve the product, and it is on unless you turn it off. PostHog receives an approximate page layout, taps and scrolls, so we can see where the product is confusing. It is on by default because we are a small preview with very few readers, and because of what the recording leaves out. It runs only for readers in the United States.

What a recording contains: the shape of the page, the size of things on it, where you tapped and how far you scrolled, and which screen you were on by its name alone — “/app/read”, never which chapter. It also shows the words the app itself puts on the screen: buttons, menus, headings and labels, and the books in our store, with their titles, blurbs, authors and cover lettering, which are the same for every reader.

What it never contains. Every other word is masked before it leaves your browser, replaced character by character with dots. Nothing of yours is ever shown: not your chapters, your messages, the choices you tap, your settings, your limits, your flames, your Never list, your character, your quiz answers or result, anything you type, your feedback, the reviews and ratings you give, what you pre-order or follow, your own world in Create, your name or your email. On top of that, these are blocked outright rather than masked: chapters, messages, the choices you tap, your saved preferences and settings, everything about your character, the trope picks in the quiz, your Play result and what you asked to have in your next story, How was that? under a chapter and your answer to it, the whole feedback sheet, your Private collection, everything you make in Create, and every form, input and picture, including the pictures on book covers. We do not capture your browser console or your network traffic. Team and admin pages are excluded entirely, as is any page whose address carries a sign-in link. Recordings use temporary random identifiers, are not linked to your account, and your network address is discarded rather than stored.

This is separate from the voice recording you make yourself when you send us feedback. That one is made only when you tap Record, it is yours, and it goes to the Sinvitation team, and to xAI only to be turned into text, as section 6 says.

To turn it off, use the line below. Your choice is remembered in this browser and nowhere else, so it is per browser and per device. Turning it off stops the recording in progress and prevents new ones; it does not erase recordings already received — ask us and we will delete those too. Recordings are kept for 30 days. Browser privacy signals such as Do Not Track or Global Privacy Control switch recording off without your having to do anything here. They do not switch off the usage events above, which no third party can use to follow you across other sites.

5. Sexual preferences and story content

Your settings, your stories and how you read them say something about your sex life. Some state privacy laws call that sensitive data. We treat all of it that way.

• We ask for it only because the story cannot be written for you without it, and we use it only once you have ticked the line in section 2. Before that it stays on your device, except what you tell Vesper in Create, as section 2 says.
• You can change any setting whenever you like, and deleting your account removes them all.
• It is never used for advertising, never sold, never shared with data brokers, and never used to build a profile of you outside your own story. We do use it to choose and write your story, and to match you with a heat scene written for a reader whose settings ask for exactly the same scene.
• It is never sent to our usage measurement provider.
• Anything you mark as a limit is stored so that it can be excluded. It is used to keep something out, never to put something in. Some things stay out of every story whatever you choose; they are listed under Lines we don’t cross in our terms, and if your text asks for one of them we record in our own database only which line it was, never what you wrote. The team can see which line it was.
• Feedback you record or write about your own reading is treated the same way: stored privately, never made public, never sent to our usage measurement or session recording, and read or played only by the Sinvitation team. Section 6 says exactly what happens to a voice note. The picture of your screen that comes with feedback can show the words of your chapter.
• What you tell us about your character, including her heritage and her body, and how you want to be spoken to, is optional and treated the same way. It goes into the instructions for your chapters, which are sent to the company that writes them as section 10 says, and nowhere else: never to usage measurement or session recording. The team’s reader list shows only whether you have set it rather than what it says, though a team member can look at what you wrote. Deleting your account deletes it.
• What you keep in your Private collection says something about what you like, so it is treated the same way. It is stored, and the team can see it and counts it; it is never shown to another reader and never sold, and our usage measurement receives only that something was kept, never the words.
• How you read says something about what you like too, so it is treated the same way. Which part of a chapter you lingered on, which you went past quickly, which you came back to and whether you finished it are stored against your account and the team can see them. None of it is shown to another reader, none of it is sold, and it is never sent to our usage measurement or session recording provider.

6. Voice notes

You can send us feedback in your own voice, and you never have to. Behind the mark at the foot of every screen in the app, Feedback records. The first time you tap it, a sheet says what it is for and asks you to allow the microphone, before your browser asks; Not now closes it, records nothing, and you are asked again the next time you tap. Reading needs none of it.

It records only while it is on. Recording starts when you allow it and stops when you tap Stop, or on its own after three minutes. When it stops, nothing has been sent: you choose Save or Delete. Delete throws the recording away on your device and we never receive it. Save sends it to us, and the line that says it is saved offers Delete too.

What we keep when you save. The recording, with the world, book, chapter and screen you were on; the picture of the screen you were on when you opened feedback and of the one before it, as section 3 says; and the written transcript. All of it is stored privately with your feedback; beyond our own servers and the Sinvitation team, only the companies in section 11 that store it for us can reach it.

How it becomes text. So the team can read it rather than only play it, the recording is sent to xAI, our speech-to-text provider, which turns it into text and sends the words back. xAI receives the audio alone: not your email address, your account identifier or your network address. It does not train on what we send and keeps it for up to 30 days, as section 10 says. The transcript is kept with the recording.

Who hears it. The Sinvitation team, and nobody else. We listen to it and read it to improve the stories and the app. It is never shown to another reader, never made public, never sold, and never sent to our usage measurement or session recording. Our team uses AI assistants, including Claude from Anthropic, to help read and sort feedback; they see the words of the transcript, as section 7 says.

Deleting it. Delete when it stops, and nothing was sent. After that, write to privacy@sinvitation.app and we delete the recording and its transcript; and every recording, transcript and screen picture you sent is deleted with your account, at once, when you delete it in Profile. Nothing deletes them on a timer: we keep them until you ask us to delete them or you delete your account. The copy at xAI expires within 30 days, and our backups within 30 days of a deletion, as section 13 says.

7. What the Sinvitation team can see

The small Sinvitation team can see what you read, what you write and what you keep. That is your email address, the chapters written for you and the choices you tapped, any messages characters sent you and your replies from before messages were retired, your settings and your limits, which of our lines a request of yours ran into, what you have told us about your character, what you keep in your Private collection, your reviews, and every piece of feedback you send, with its recording, transcript and pictures. They can also see where you are in each book, when you reached each chapter, when you were last here, and what writing your chapters has cost.

They can also see how you read it. While a chapter is open the app records, for each paragraph, how long it was on your screen while you were reading, how many times you came onto it, how far through you got and whether you reached the end. It stops counting when you leave the tab, and when you have not scrolled, tapped or typed for a minute, so a chapter left open on the table measures nothing. That is all positions and numbers of seconds: none of the words of your chapter are in it. This is how the stories get better.

This is how we learn what people like. We are a few people building a preview, and what readers come back to is how we decide what to write more of. So we read it, we count it, and we write up what we learn from it. What we write up for ourselves is counts and themes, with no reader’s words, name or address. Our team uses AI assistants, including Claude from Anthropic, to help read and sort the feedback readers send; they see the words of that feedback and its transcripts.

The team can review your profile, settings, stories, messages and feedback, what you keep in your Private collection, and the record of how you read, to check quality and safety and to learn what people like. Please assume a person may read a chapter.

8. What other people can see

“Private” means private from other readers, not private from us. Nothing you keep is shown to another reader, ever, and neither is anything you mark or anything that shows what you chose. The one exception is something you choose yourself: a review.

We never sell it and we never share it. None of it is sold, shared with advertisers or data brokers, or sent to the companies in section 11 beyond what that table says.

Reviews are public. When you rate or review a book, anyone, signed in or not, can read the stars, the words and the name you chose to show with it (“A reader” unless you pick another), with its date. Your account and email are never shown with it. You can change it or clear it whenever you like, and deleting your account deletes it.

Follows are counted, never named. An author’s page shows how many readers follow them. Who they are is never shown to anyone outside our team.

One thing can be shared, and it carries nothing of yours. A heat scene our writer wrote for you can, once the team has read it and scored it highly, be given to another reader whose settings ask for exactly the same scene, and a scene you read may have been written first for someone else. A scene shaped by anything you typed yourself is never shared, and no reader is ever told whom a scene was first written for.

9. Why we use it

We do not use your information to train any AI model, ours or anyone else’s. Choosing and writing your story from your settings is the only profiling we do, and it has no legal or similarly significant effect on you: the AI writes fiction and decides nothing about you.

10. How the story gets written, and what the AI sees

Our books are written with AI from worlds, characters and outlines our team made. We use AI models from several companies and we switch between them, to get the best writing and the best price, so any of the companies named in this section may process what this section lists.

The chapters and heat scenes written for your settings are written by models from xAI and OpenAI. Which one writes a given chapter depends on your settings and on the model we are using at the time; the most explicit writing is xAI’s.

In Create, Vesper is an AI model from OpenAI or Anthropic, whichever we are using. That company receives your conversation with her, the world as it takes shape, and the words you speak to her once your browser has turned them into text, so that she can answer. The first page and the chapters of the book you make in Create are written by models from xAI or OpenAI, or from Anthropic where we have switched that on.

Covers in Create are drawn by OpenAI, where we have switched that on. When you ask for covers, an AI model from OpenAI or Anthropic reads your world as it stands and writes a short brief for each cover, and OpenAI’s image model draws from that brief: what the cover shows, the genre and how it should feel, the world’s title and the name you give for the cover. A model from OpenAI or Anthropic then looks at each drawing to check its lettering. The image model receives the brief alone: not your conversation with Vesper, your email address, your account identifier or your network address. The covers are stored privately with the rest of your world, and deleting the world or your account deletes them.

If one company’s service is unavailable, and where we have switched this on, we may reach a model through OpenRouter, a service that passes a request on to a model company, which for us is xAI or Mistral AI. Each then receives what the company it stands in for would have. We have not confirmed how long either keeps it, or whether either trains on it, beyond what their own published policies say.

We send the company writing the instructions for the world your story is set in and enough of your story for the next part to make sense. In practice that means:

• Sent: the description of the world and its characters, your first name if you gave one, your settings, what you have told us about your character and how you want to be spoken to, your limits, a summary of what has happened so far, notes about each character, the choice you last made, and anything you typed into the story or into Create, as you wrote it. Do not put your real full name or contact details in what you type.
• Not sent: your email address, your account identifier, your network address, or anything that identifies you as a person outside the story.

xAI’s published policy for its API (docs.x.ai/developers/faq/security, last updated 10 October 2026, read 26 October 2026) says it never trains on API inputs or outputs without the customer’s explicit permission, which we have not given, and that it stores API requests and responses for up to 30 days to check for abuse and then deletes them automatically. The same applies to the voice recordings it turns into text. Anthropic’s published policy for its API (privacy.claude.com, last updated 1 July 2026, read 5 November 2026) says it deletes API inputs and outputs within 30 days, unless it must keep them longer to enforce its usage policy or by law, and under its commercial terms it does not train its models on what we send. OpenAI’s published policy for its API (developers.openai.com, read 11 November 2026) says it does not train on data sent to its API unless the customer opts in, which we have not, and that it keeps records of API requests for up to 30 days to check for abuse, or longer where the law requires it or it is needed to protect its services or other people from harm. OpenRouter and Mistral AI keep what they receive for the periods their own policies set. If we start using another company to write, draw or transcribe, we will add it to section 11 before it sees anything of yours.

11. Who else touches your data

We use a small number of companies to run Sinvitation. Each handles some of your data on our instructions.

We will also disclose data where the law requires it, and we will tell you unless we are forbidden from doing so. If Sinvitation is ever sold or merged your data may transfer with it, and this notice continues to apply until you are told otherwise.

We do not sell your personal information and we do not share it for targeted or cross-context behavioural advertising, as those terms are used in United States state privacy laws. We run no advertising, and no third party can follow you across other sites through Sinvitation.

12. Where your data is

Our database is hosted in the United States, and so are the website and PostHog. None of xAI, Anthropic, OpenAI, OpenRouter and Mistral AI promises in which country its default service processes what we send.

13. How long we keep it

• Your account, settings, character details and stories, your Private collection, your reviews and follows, your feedback, the record of how you read, and the usage events in our own database: while your account exists. Deleting your account in Profile removes them at once; if you ask us instead, within 30 days.
• Waitlist: until you ask us to remove it, or delete an account with the same email address.
• Pre-orders by email: until you ask us to remove them, or delete an account whose confirmed email address is the same.
• Usage events at PostHog: they expire after 12 months.
• Masked session recordings: 30 days.
• Help chat (Wick): the words for 12 months, or until you delete your account; the labels stay, as section 19 says.
• At xAI, Anthropic and OpenAI: up to 30 days, as section 10 says. At OpenRouter and Mistral AI, where we use them: for the periods their own policies set.
• Backups: our database host keeps backups for no more than 30 days, so something deleted from the database is gone from the backups within 30 days.
• Email: messages you send us stay in our inbox until we delete them, and our email providers keep their own records of messages for their own periods.
• Anything we must keep by law, or to resolve a dispute, for as long as that requires and no longer.

We do not yet delete accounts that have been left unused; they stay until you or we delete them. If the app labels a story as saved on this device only, clearing browser storage can delete that local copy.

14. Your rights, and how to use them

Wherever you live in the United States, you can ask us to:

• tell you what we hold about you, and give you a copy in a form you can take elsewhere;
• correct anything wrong;
• delete it;
• stop using your sensitive data, which for Sinvitation means deleting what you have told us about what you like;
• stop any sale, targeted advertising or profiling with legal effects. We do none of these.

To delete your account yourself, open Profile and choose Delete account. It removes, at once, your account, your settings and character details, your agreement, your place in every book, the worlds and stories written for you, your Private collection, your reviews and follows, the record of how you read, the feedback you sent with its recordings, transcripts and pictures, the usage events in our own database, any waitlist entry, any pre-order made with your confirmed email, and the emails we sent to your account’s confirmed address alone. What it cannot reach: the usage events PostHog already received, which carry none of your words and expire after 12 months; a heat scene first written for you, which stays in our library without any link to you; copies at the AI companies named in section 11, in our backups and with our email providers, which expire as section 13 says; emails that went to you and someone else; and files attached to an email we sent you.

If you have read without making an account, there is no Delete control for you yet. Write to privacy@sinvitation.app and we will help you find what is yours and delete it.

To use any right, write to privacy@sinvitation.app, from the address on your account if you have one. We may ask you to confirm it is you. We answer within 45 days, and we will not charge you or treat you differently for asking.

If we say no, you can appeal: reply to our answer with the word “appeal” within 45 days, and someone who was not part of the first decision will look at it again and answer within 60 days, saying what was decided and why. If you are still unhappy, you can complain to the Attorney General of your state; in Connecticut, through the Attorney General’s online form at portal.ct.gov/ag.

15. Security

Your rows in our database are locked to your account, so one reader cannot read another reader’s story, collection or reading even if something else goes wrong. Our providers encrypt data on its way to them and where they store it. Beyond you, only a signed-in member of the Sinvitation team, our own servers and the companies in section 11 can reach it, and What the Sinvitation team can see says what that covers.

No system is perfect. If someone gets at your information who should not have, we will tell you without undue delay, say what happened and what you can do, and tell the authorities where the law requires it.

16. Cookies and phone storage

We do not use advertising cookies and we do not run third-party advertising. The only cookie we set for readers marks a visit from outside the United States, for a day, so that session recording and usage measurement stay off; it holds nothing else. Sinvitation keeps data on your device to sign you in, keep your place and your reading choices, hold drafts you are making in Create, and remember whether you turned masked session recording off; our usage measurement keeps a random id for this tab only. Cloudflare’s check runs in a small frame from Cloudflare when you start reading or ask for a sign-in link. Before you make an account, your place in a book and your reading choices are kept only on this device, as section 2 says, so clearing browser storage loses them; what you build in Create is the exception section 2 describes. Once you have an account, your stories are saved on our servers. The app labels anything kept on this phone only; that local copy can be lost if you clear browser storage.

17. Adults only

Sinvitation is for adults aged 18 and over, and at least the age of majority where they live. We do not knowingly collect anything from anyone under 18. Where the law requires it, we may ask readers to check their age. If we believe someone under 18 has an account, we close it and delete everything in it. If you think someone under 18 is using Sinvitation, tell us at privacy@sinvitation.app.

18. Changes

Each version of this notice has a number and a date, shown at the top. If a change matters to you, for example a new company seeing your story content, we will email readers who have an account at least 14 days before it takes effect, and we will ask again before using information you already gave us in a new way.

19. Help chat (Wick)

Wick is the app’s help chat, for signed-in readers. We keep your conversations with Wick and with the team there: what you write, Wick’s answers, the team’s replies, any reply you send by email to a note that you have a reply, and the labels a conversation is given (what it is about, which part of the app, and whether it was sorted). If you open help from an error screen, we keep the error’s code and the screen’s address, never what you were reading.

Who sees it. The Sinvitation team reads these conversations, to help you and to make Wick better. Wick’s answers are written by an AI model from OpenAI or Anthropic, whichever we are using, which receives the conversation and our help guide to write each answer; neither trains on what we send. Nothing you write to Wick is sent to our usage measurement or shown in session recordings, which count only that help was opened and the labels.

How long we keep it. The words of your conversations, and any reply you sent by email, are deleted with your account, at once, when you delete it in Profile, and on their own 12 months after they were written. The labels stay, with no words in them.

20. How to reach us

Baker Shop USA LLC. Privacy and legal: privacy@sinvitation.app. Everything else: hi@sinvitation.app, or the contact page. A person reads everything that arrives.