Privacy Policy
Last updated: November 7, 2026 (v2)
1. General
Gather (“we,” “us,” or “our”) is operated by The Innovia Group LLC under the MakeDoingEasier brand. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Gather platform and services, including the Gather website at thecommunitycloud.com and the Gather mobile app published on the Apple App Store and Google Play (also known as “Gather AI”).
By using Gather, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account information: Your name, email address, phone number, and organization details when you create an account or accept an invitation.
- Profile information: Display name, avatar image, biographical details, and notification preferences.
- Community content: Posts, comments, memories, direct messages, group messages, motion and event content, and any files or images you attach.
- Voice and video call content (Gather mobile app): Audio and video you choose to transmit during calls with other community members. Call media is transmitted in real time through our real-time messaging provider and is not recorded or stored by us unless a feature you explicitly opt into (such as recording a meeting) is enabled.
- Photos and media you upload (Gather mobile app):Images or videos you select from your device's camera or photo library to attach to posts, messages, or your profile. Only the items you explicitly select are uploaded.
2.2 Information Collected Automatically
- IP address, browser type, and operating system
- Device identifiers, model, and screen resolution
- Referring URLs and in-app screens visited
- Interaction patterns (clicks, scroll depth, session duration)
- Performance metrics (page load times, errors encountered)
- Push notification tokens issued by Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM), used to deliver notifications to your device
- Crash reports and error diagnostics, including stack traces, device model, operating system version, and the sequence of in-app actions leading up to an error
2.3 Information from Third-Party Services
If you authenticate using a third-party provider (such as single sign-on), we may receive your name, email address, and profile information from that provider, subject to your privacy settings with them.
3. Mobile App Permissions (Gather for iOS and Android)
The Gather mobile app requests the following device permissions. Each permission is requested only when you use a feature that needs it. You can grant, deny, or revoke each one in your device settings at any time.
| Permission | When it is requested | How the data is used |
|---|---|---|
| Contacts | When you open the Invite Contacts screen to invite people to your community | Your device contacts are read on-device so you can search and select invitees. Only the names, phone numbers, or email addresses of contacts you explicitly select are sent to our servers to issue invitations. We do not upload or retain your full contact list. |
| Camera | When you join a video call, take a photo for your profile, or capture a photo to attach to a post | The camera is active only while the corresponding feature is in use. Video call media is transmitted in real time to other call participants and is not recorded by us. |
| Microphone | When you join a voice or video call | Audio is captured only while you are on a call and transmitted in real time to other call participants. It is not recorded or stored by us. |
| Photo library / Media | When you choose an image or video to attach to a post, message, or your profile | Only the items you explicitly select are uploaded. The app does not scan or index your library. |
| Calendar and Reminders | When you tap Add to Calendar on a community event | The app writes the event you selected to your device calendar and, optionally, a reminder. The app does not read or upload other calendar entries. |
| Push notifications | When you first open the app, or when you enable notifications later in settings | A device token issued by APNs or FCM is stored so we can deliver notifications about activity in your communities. You can revoke this at any time in your device settings or in the app. |
4. SMS and Phone Communications
SMS Verification. Gather uses SMS-based one-time passwords (OTP) to verify your phone number during account creation or sign-in. By providing your phone number on these screens, you consent to receive one-time verification codes via SMS.
- Message and data rates may apply
- Message frequency varies based on your sign-in and verification activity
- Reply STOP to any verification message to opt out of SMS verification
- Opting out of SMS verification may limit your ability to access features that require phone verification
We do not send marketing messages via SMS. Your phone number is used exclusively for account verification, security, and transactional notifications you have opted into. We will never sell, share, or use your phone number for promotional communications.
5. Children's Online Privacy Protection
Gather is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, contact us at help@thecommunitycloud.com so we can take appropriate action.
6. How We Use Your Information
- Provide, operate, and maintain the Gather platform
- Create and manage your account
- Verify your identity through SMS or email one-time passwords
- Enable community management, membership, posts, messaging, and events
- Deliver push notifications about activity in your communities
- Communicate with you about your account, updates, and support requests
- Analyze usage patterns to diagnose issues and improve the product
- Detect, prevent, and address security issues and fraud
- Comply with legal obligations
7. Third-Party Service Providers
We use the following third-party services to operate Gather. Each processes your data under contractual obligations to maintain confidentiality and security.
| Provider | Purpose | Data processed |
|---|---|---|
| Vercel | Hosting, deployment, analytics | Usage data, IP addresses, performance metrics |
| Amazon Web Services (AWS) | Hosting, deployment, analytics | Usage data, IP addresses, performance metrics |
| Neon | Database hosting | All stored application data |
| Twilio | Transactional email delivery and SMS one-time password delivery | Email addresses, phone numbers, message content, OTP codes |
| Stream | Real-time messaging and voice / video calls | Messages, user identifiers, call media in transit |
| Google Firebase Cloud Messaging (FCM) | Push notification delivery on Android | Device push tokens, notification payloads |
| Apple Push Notification service (APNs) | Push notification delivery on iOS | Device push tokens, notification payloads |
| Sentry | Crash reporting and error diagnostics | Stack traces, device model, OS version, user identifier, sequence of in-app actions preceding an error |
| Vercel Blob | Image and file storage for user uploads | Images, files, and media you upload to posts or your profile |
| Vercel AI Gateway | Routing and observability for AI model requests | AI prompt and response content (see Section 8) |
| Anthropic (Claude) | AI model provider for story-telling and advisor features | AI prompt content described in Section 8. Anthropic's commercial API does not train on this data. |
All providers are selected for their commitment to data protection and are bound by data processing agreements.
8. AI and Machine Learning Features
Gather uses AI to help members tell their stories. When you compose a memory over SMS, an AI assistant reads your draft so far and decides what to ask you next, or produces a refined draft when you have shared enough. In a future release, the same AI assistance will be available in community storytelling features inside the Gather mobile app.
Gather also offers an AI advisor to community owners and administrators that answers questions about their community using the community name, description, visibility, and membership levels as context.
Model provider. AI requests are routed through the Vercel AI Gateway to Anthropic (Claude). Only the data needed to produce the response is sent:
- SMS memory assistant: your current memory draft, prior questions and answers in this memory session, and the text message you just sent
- Community advisor: the community name, description, visibility, membership levels, and the conversation you are having in the advisor
Training.Anthropic's commercial API does not train models on customer data. We do not use your messages, posts, photos, contacts, voice, video, or any other personal content to train AI models, and we do not share your personal content with any third party for that purpose.
Automated decisions. AI output is advisory. Gather does not use AI to make automated decisions that produce legal or similarly significant effects about you.
When we extend AI-assisted features (for example, community storytelling inside the mobile app), we will update this section to describe the new feature, what data it uses, and what controls you have.
9. Information Sharing and Disclosure
We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information:
- With service providers: As listed in Section 7, under confidentiality obligations
- For platform functionality: With other users as the product requires (for example, community members see your display name, avatar, and the content you post)
- With invitees you select: Only the contacts you explicitly choose on the Invite Contacts screen receive an invitation naming you as the inviter
- For legal reasons: When required by law, regulation, legal process, or governmental request
- To protect rights: To protect the rights, property, or safety of our users, our business, or the public
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
10. Data Retention
- Account data: Retained while your account is active and for 30 days after deletion to allow recovery
- Community content: Retained while the owning community is active; content you delete is removed within 30 days from backups
- Usage and analytics data: Retained in anonymized form for up to 36 months
- Crash and error diagnostics: Retained for up to 90 days
- Legal and compliance records: Retained as required by applicable law
11. Payment Information
If and when we introduce paid plans, payment processing will be handled by a PCI-compliant third-party processor. We do not store credit card numbers or full payment details on our servers.
12. Cookies and Tracking
We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage. You can control cookie settings through your browser. Disabling cookies may affect your ability to use certain features of the platform.
13. Links from Website
Our platform may contain links to third-party websites or services that we do not operate. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites.
14. Security Measures
We implement industry-standard security measures, including encryption in transit (TLS) and at rest, role-based access controls, secure credential management (passwords are hashed, never stored in plain text), and regular security assessments. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
15. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Export your data in a portable format
- Withdraw consent for data processing where applicable
- Opt out of SMS verification by replying STOP
- Revoke any device permission (contacts, camera, microphone, calendar, photos, notifications) at any time in your device settings
To exercise any of these rights, contact us at help@thecommunitycloud.com.
California Residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information we collect, the right to request deletion, the right to opt out of the sale or sharing of personal information (we do not sell your personal information), and the right to non-discrimination for exercising these rights.
European Economic Area, UK, and Switzerland (GDPR)
If you are located in the EEA, UK, or Switzerland, we process your data under the following legal bases: contract performance (to provide the services you requested), legitimate interests (to improve our products and protect against fraud), consent (for optional processing such as SMS verification and analytics), and legal obligation. You also have the right to lodge a complaint with your local data protection authority.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, for changes that reduce your rights, provide at least 30 days' notice through the app or by email. Your continued use of Gather after changes take effect constitutes acceptance of the updated policy.
17. Contact Us
If you have questions or concerns about this Privacy Policy, contact us at help@thecommunitycloud.com. We will respond to privacy-related requests within 30 days.