InviteTrip Inc. · Version 1.0 · Effective September 9, 2026
This is a separate policy, required by law to stand on its own. It applies in addition to our general Privacy Policy. Where the two differ on consumer health data, this policy governs.
In short
- Some laws, in particular in Washington, Nevada, and Connecticut, define "consumer health data" very broadly. Broadly enough that some of what a dating platform holds can fall inside it.
- We take a cautious view and treat information revealing sexual orientation or relationship intent as consumer health data, along with anything health-related you choose to tell us.
- We do not sell consumer health data. We never have, and we do not have a mechanism to do so.
- We do not collect precise location data, and we do not operate geofences of any kind.
- You can see, correct, delete, or withdraw consent for this data by writing to privacy@invitetrip.com.
1. Who this policy applies to and why it exists
InviteTrip Inc. ("InviteTrip", "we") maintains this policy under Washington's My Health My Data Act (RCW ch. 19.373) and Nevada's consumer health data law (NRS 603A.400 to 603A.550), which each require a consumer health data privacy policy that is separate from a general privacy policy. It also addresses the consumer health data provisions of the Connecticut Data Privacy Act.
It applies to every InviteTrip member. Residents of Washington, Nevada, and Connecticut have specific statutory rights described in section 9.
2. What we treat as consumer health data
The statutes define consumer health data as information linked to a person that identifies their past, present, or future physical or mental health status, and they explicitly include reproductive or sexual health information and gender-affirming care information, as well as information inferred or derived from data that is not itself health data.
Those definitions do not name sexual orientation. We have chosen to take the cautious reading rather than the narrow one, and to treat the following as consumer health data:
(a) Matching preferences that reveal or allow inference of sexual orientation. Which genders you wish to be shown, and the kind of connection you are looking for, read together with your own stated gender.
(b) Health information you choose to provide. Anything about a health condition, diagnosis, treatment, medication, disability, accessibility need, dietary restriction with a medical cause, or similar, whether you put it in your profile, a message, a voice message, or a report.
(c) Reproductive or sexual health information you choose to provide, including anything about sexual health status, testing, or related services.
(d) Gender-affirming care information you choose to provide.
(e) Information inferred from the above, to the extent our systems derive anything of that character.
(f) Biometric information used for identity verification. If you verify your identity, our verification provider processes a live image or video to confirm you are physically present. InviteTrip does not receive or store that image, the video, or any biometric template. We receive only the outcome, a reference number, and the issuing country of the document.
What we do not collect
- Precise geolocation. We do not collect GPS or comparable precise location data. We derive only an approximate location from your IP address, for security and to show the Service in a sensible language and format.
- We do not ask for health information, and we do not provide a field for it. Anything under (b), (c), or (d) reaches us only because you chose to write it.
- We do not collect genetic data.
3. Categories of sources
- Directly from you, when you complete your profile, set matching preferences, write messages or voice messages, or submit a report.
- From our identity verification provider, limited to the verification outcome, reference number, and issuing country described above.
- From our own systems, where activity on the Service produces derived information of this character.
We do not buy consumer health data, and we do not obtain it from data brokers, advertising networks, or public sources.
4. Purposes: why we collect, use, and share it
To provide the Service you asked for. Matching preferences exist so we can show you people you want to see and not show you people you do not. This is the core function of the platform and the reason the data exists.
To keep the platform safe. Messages and profile content, which may contain information in category (b), (c), or (d), pass through the automated safety checks described in the Privacy Policy, and may be reviewed by a person following a report.
To verify identity, where you choose to verify.
To comply with law, and to establish, exercise, or defend legal claims.
We do not use consumer health data for advertising of any kind. We do not use it to profile you for any purpose other than matching and safety. We do not use it to make decisions about you that produce legal or similarly significant effects without a person reviewing them.
5. How it is processed
Consumer health data is stored in our primary databases in Ireland, protected by encryption in transit and at rest and by database-level access rules that restrict each member's data to that member and to authorized staff.
Matching preferences are processed automatically to determine who appears in discovery. Message content is processed automatically for safety, which for a message in a genuinely ambiguous range includes assessment by an artificial intelligence service acting as our processor, and for voice messages includes automatic transcription so that the same checks can be applied. Where you use the translation feature, message content is sent to an artificial intelligence service acting as our processor and the result is cached.
Access by our staff is limited to those who need it for a specific task, principally the review of a report, and administrative actions are logged.
6. Categories we share, and with whom
We share consumer health data only in the following ways.
| What is shared | With whom | Why |
|---|---|---|
| Matching preferences, to the extent shown on your profile | Other members who can see your profile | Because you chose to display them. Each preference has its own visibility control, and you can keep it private and used only for matching |
| Message and voice message content | The member you sent it to | To deliver your message |
| Message content in the ambiguous range, and voice message audio | Artificial intelligence service providers acting as our processors | Safety checking, transcription for safety checking, and translation where you request it |
| Live image or video, and identity document | Our identity verification provider | To verify your identity. This data goes to the provider, not to us |
| Any category, where legally compelled | Law enforcement, regulators, courts | Legal obligation, or to prevent serious harm to a person |
| Any category | An acquirer, in a merger or sale of assets | Business transfer, with notice to you beforehand |
Specific affiliates. InviteTrip Inc. currently has no subsidiaries or affiliates, and therefore shares consumer health data with none. If that changes, this policy will name them.
Third-party collection across sites and over time. No third party collects consumer health data through the Service over time or across different websites or online services. We do not use advertising cookies, tracking pixels, advertising software development kits, or third-party behavioral tracking of any kind. Our analytics are limited to aggregate product measurement and do not receive consumer health data.
7. We do not sell consumer health data
InviteTrip does not sell consumer health data, and does not exchange it for anything of value.
Because of this, we do not seek the separate signed authorization that Washington law requires before such a sale, and no such authorization exists. If we ever considered selling consumer health data, we would have to obtain a valid written authorization from you first, and we would update this policy before doing anything of the kind.
8. Consent
Collection. We collect the data in section 2 either because it is necessary to provide a product or service you have requested, or with your consent given at the point you provide it. Matching preferences are collected to operate matching, which is the service you asked for. Health, reproductive, sexual health, and gender-affirming care information under (b), (c), and (d) reaches us only when you choose to write it.
Sharing. Where sharing goes beyond what is necessary to provide the Service, we obtain consent separate and distinct from any consent to collection.
Consent means a clear affirmative act that is freely given, specific, informed, opt-in, voluntary, and unambiguous. We do not treat acceptance of our general Terms of Service as consent for these purposes, and we do not use deceptive design to obtain it.
Withdrawing consent. Write to privacy@invitetrip.com, or remove the information from your profile, or close your account. Withdrawal takes effect for the future and does not affect processing already carried out. Some matching features will not work once matching preferences are removed.
9. Your rights
You have the right to:
- Confirm whether we are processing your consumer health data, and access it, including a list of all third parties and affiliates with whom we have shared it and a contact for each;
- Correct inaccurate data (Nevada and Connecticut);
- Withdraw consent to collection and to sharing;
- Delete your consumer health data.
How to exercise them. Write to privacy@invitetrip.com with the email address on your account and what you want us to do. You can also correct and remove profile information yourself in your account settings; deletion of the whole account is carried out by us on request.
Our response. We respond within 45 days, and may extend once by a further 45 days where reasonably necessary, telling you why. There is no charge. If we cannot verify your identity from information we already hold, we will ask for the minimum additional information needed.
On a deletion request we delete the data from our live systems and notify our processors to do the same. Where a law requires us to keep a record, for example an incident record needed to keep a permanent removal effective or to defend a legal claim, we keep only that minimum and stop using it for any other purpose. Backups are overwritten on a rolling cycle no later than 90 days.
If we refuse, we will tell you why and how to appeal. To appeal, reply with "Appeal" in the subject line. If we deny the appeal, you may complain to your state Attorney General.
10. Geofencing
We do not use geofencing. We operate no geofence around any health care facility, or anywhere else, and we do not use location to identify or track anyone seeking health services, to collect consumer health data, or to send anyone advertising or messages.
11. Retention
Consumer health data is retained under the schedule in section 7 of the Privacy Policy. In summary: while your account is open, then anonymized or deleted within 30 days of account deletion, except where a safety or legal record must be kept for longer, and except for the verification outcome and reference, which are kept for up to 12 months after account closure.
12. Notice of material changes
If we make a material change to this policy, we will post the revised version here with a new version number and effective date, and notify you through the Service or by email before the change takes effect. We will not collect a new category of consumer health data, or use or share it for a new purpose, without first disclosing the change and obtaining your affirmative consent.
13. Contact
privacy@invitetrip.com Postal address: see the Legal Notice.
InviteTrip Inc. · Version 1.0 · Effective September 9, 2026