Privacy Policy

Effective 6 September 2026

Who we are

inveni is run by its developer, a private individual based in Singapore. inveni ("we") recommends research papers to you at inveni.uk. The domain ends in .uk, but the service is operated from Singapore. For anything about this policy or your data, write to [email protected].

What we collect

You give us

• Email address and password. Your password is held only as a hash by our authentication provider. We never see it.
• Optional profile details: your name, institution and ORCID iD.
• Your library: papers from the inveni database that you select, whether through your ORCID record, a citations file you upload, a Zotero import, or by picking them yourself. We do not contact Google Scholar. If you describe your research in free text, we keep that description too.
• If you connect Zotero: your Zotero user ID and the API key you supply. The key is stored encrypted, is never sent back to the browser, and is used only to read and write your own Zotero library.
• If you connect Telegram: the identifier of your Telegram chat.
• Bug reports you choose to send from the app. A bug report contains a screenshot of the inveni page you were on (only the inveni page, never other windows or tabs) and recent messages from the inveni page's browser console.

We generate as you use it

• Your ratings, skips and reads, and which papers you were shown.
• An activity log of what you do in the app, used to understand usage and to find bugs.
• A model of your reading taste, built from your own papers and ratings. It is trained only on your data and is never pooled with other users.
• Your notification preferences and a record of which papers each digest contained.
• If you connect an AI assistant to inveni: per-user rate-limit counters.

Automatically

• Standard server and connection logs, which include your IP address. We use the IP address to limit abuse and to keep the service running.

What we do not do

• We do not sell your personal data.
• We do not show advertising and do not use advertising or tracking cookies.
• We do not use your data to train models for other users. Your taste model is yours alone.
• We do not send your name or email address to any AI provider.

Why we process it

We process your data under Singapore's Personal Data Protection Act. You consent when you create an account and when you switch on an optional feature, and we use the data only for the purposes of running inveni for you: keeping your account, building your daily feed, sending the alerts you asked for, keeping the service secure and fixing bugs. You can withdraw consent for an optional feature at any time by turning it off in Profile, and for the service as a whole by deleting your account. If you live in the European Union or the United Kingdom, you also have the rights the GDPR gives you, and we honour them.

Who processes it

We use a small number of service providers, each for one job:

• a hosting provider in the European Union, which runs the service and stores its data;
• an authentication provider, which holds your email address and password hash and signs you in;
• an email delivery provider, which sends account emails and, if you turn them on, digests;
• a content-delivery and security provider, which sits in front of the site, sees connection data, and runs the bot check on the sign-in forms;
• AI model providers, which receive paper titles, abstracts and text, the titles and abstracts of the papers in your library and the ones you rated, your free-text research description, and the queries sent through the AI-assistant connector. They never receive your name or email address.

If you connect Telegram or Zotero, those services receive what is needed to deliver alerts or sync your library, under their own terms. To build your library we also query public scholarly sources (arXiv, Crossref and ORCID). They receive no personal data about you, apart from the ORCID iD you give us, which is sent to ORCID to fetch your record.

Where data lives

Your data is stored on servers in the European Union. Some of the providers above process data outside Singapore and the European Union, under their standard terms.

How long we keep it

We keep your data for as long as your account exists. Delete your account from Profile → Delete account and everything goes at once: your profile, library, research description, ratings, feed history, digest records, taste model, notification preferences, Telegram link, Zotero credentials, activity log, bug reports, connector rate-limit counters, and finally the account itself. Server logs are kept for a limited period and then age out.

Your rights

You can ask to see, correct or delete your personal data, or withdraw your consent, by writing to [email protected]. If you are not satisfied with our answer, you can complain to the Personal Data Protection Commission of Singapore. If you live in the European Union or the United Kingdom, you can also complain to your local data-protection authority.

Children

inveni is for researchers and is not directed at anyone under 16.

Changes

We will update the date above when this policy changes, and tell you in the app if the change is significant.