Your number is your identity. Here's what we do with it.

Cavo is an invite-only network for making plans with friends and friends of friends. It runs on phone numbers, so we want to be exact about what we collect, why, who can see it, and how to get it deleted. This page is written in plain language on purpose; if anything is unclear, write to privacy@joincavo.app.

What we collect

Your phone number. It's how you sign in (we text a one-time code) and how members vouch for you. We never show it to other members; they see your name and profile, not your number.
Your application. If you apply, we may ask for your school, employer, job title, and a work email so we can confirm you are who you say you are. You can mark that you've verified an ID. These feed an acceptance score (below).
Your profile. Name, age, one headshot, what you do, where you studied, your city, your interests, what you're here for, and any social handles you add. Your headshot is stored with our file host (Vercel).
Your location. Your city is required. If you allow it, we also keep the approximate location your device reported when you set up your profile, only to sort people and plans by distance. We never show a precise location to anyone.
Your week. If you fill in when you're usually up for plans, we store that 7-day rhythm and whether you've let Cavo float ideas on your behalf. Other members see at most a one-line summary (“usually free weeknights”), and only if you're connected.
Contacts you share. When you invite someone by number or sync contacts, we store those phone numbers against your account. They are used for one thing: matching. People you know get connected to you automatically when they join, and applicants you know score higher.
What you do on Cavo. Your connections, connect requests, people you've passed on, ideas you float and say you're down for, events you host or RSVP to, circles you join, and messages you send.
Technical basics. A session cookie so you stay signed in, and standard server logs (IP address, browser, timestamps) kept briefly for security and debugging. We don't run advertising trackers.

How we use it

To sign you in and keep your account secure.
To decide who gets in. Cavo is invite-only; see the next section.
To show you the right people and plans: friends, friends of friends, and the circles you belong to.
To connect you automatically with members who invited you or have your number.
To float ideas for you, if you've turned that on, when you and your people are free at the same time.
To text you one-time codes, and in future, plan reminders you've asked for.

We don't sell your data, and we don't use it for advertising.

How acceptance works

Applications are scored automatically from your school, employer, verified work email, ID verification, how many members referred you, and how many members already have your number saved. Strong applications are accepted without a human looking at them. If you're not accepted you stay on the list and your score is refreshed whenever a member vouches for you or adds your number. Ask us at any time and we'll explain your result.

Who can see what

Every member can see your profile: name, age, headshot, work, school, city, interests, what you're here for, and social handles.
Friends and friends of friends can see the ideas you float and, depending on how a plan is set, the events you host and attend.
Connections only can see your availability summary and message you directly.
Circle members can see plans and chats that belong to that circle.
Nobody sees your phone number, your contacts, your application, your score, your precise location, or who you've passed on.

Messages are private to the people in the conversation. They are stored on our servers so they show up on all your devices; they are not end-to-end encrypted.

Who we share it with

Only the services that run Cavo, and only what they need to do their job:

Vercel hosts the app and stores uploaded images.
MongoDB Atlas stores the database.
Twilio delivers text messages when SMS is enabled.

We'll also share information if the law requires it, or to protect members from fraud or harm. We don't share it with advertisers or data brokers, ever.

Your choices

Edit anything on your profile, including your week and whether Cavo may float for you, from your profile page.
Decline location access; your city is enough.
Skip contact sync. You can still invite people one number at a time.
Leave. Email privacy@joincavo.app from any address, or text us from your number, and we'll delete your account, profile, messages, contacts you shared, and uploaded photos within 30 days. Plans you hosted stay visible to their guests with your name removed.
Ask. You can request a copy of your data or an explanation of your acceptance result at the same address. California residents have these rights under the CCPA; we extend them to everyone.

How long we keep things

As long as you have an account. One-time codes expire in ten minutes. Server logs are kept for a short period for security. When you leave, we delete your data as described above, apart from records we're legally required to keep.

Who can join

Cavo is for adults. You must be 18 or older to hold an account, and we'll remove any account we learn belongs to someone younger.

Changes

If we change how we handle your data in a way that matters, we'll tell you in the app before it takes effect and update the date at the top of this page.

Contact

privacy@joincavo.app
Cavo · San Francisco & New York