PRIVACY POLICY

We collect what the product visibly uses, and you can see all of it. No ad tracking, no data sales, no background location, ever. Delete means delete, with narrow safety exceptions we list explicitly.

Account basics (first name, DOB for age screening, email, phone), your chosen broad home area and radius, profile inputs (activities, skills, vibe), builds and media you upload, ratings you give, messages you send, and event check-ins you make. That is the list of personal data you give us. Automatically, every request to the site also carries technical data our host and bot-check process, your IP address, device and browser signals, and server request logs, and we record cookieless, non-identifying usage and page-performance analytics. All of that is described under 'Who processes it for us' below.

Background GPS or location history (the permission is never requested), your contacts, your surname on cards, ID document images (verification results are pass/fail references only), and anything from data brokers.

Compatibility runs on activities, Need/Know skills, vibe, availability overlap, and broad distance. It never uses vehicle price, follower-style counts, rating totals, or protected traits. The excluded list is shown in-app, in the feed tuning sheet.

Cards show first name, age, and broad area only. Share pages show only what the owner picked, and die instantly on revocation. We disclose data to authorities only under valid legal process, and we notify you unless legally barred.

A few specialized vendors process narrow slices of your data on our behalf, only for the purpose listed. Supabase provides our core infrastructure (the database, file storage, and authentication), so it stores your account and content data (encrypted) as our hosting sub-processor. Vercel hosts our public website and waitlist pages as our web hosting sub-processor, and its cookieless, privacy-preserving Analytics and Speed Insights record only aggregate page views and page-load performance, never tied to your identity. Cloudflare Turnstile guards our beta-waitlist form against automated abuse, briefly processing your IP address and browser signals to tell a person from a script; it sets no tracking cookie and never profiles you. Resend delivers our transactional and waitlist emails, receiving your email address and the message we send you. Sightengine scans uploaded photos for nudity and license plates before they're ever shown, so plates can be auto-blurred. OpenAI's moderation endpoint may screen message and story text for safety. Persona would handle ID-verification data if and when that flow goes live. It isn't yet. If you register for push notifications, your device's push token is relayed through Expo's push service to Apple or Google, never the notification's contents. If configured, Sentry receives crash/error diagnostics (an error message and stack trace, never message contents, precise location, or a photo) and PostHog receives anonymized product-usage events. None of these vendors receive your data for advertising, and none of them are ad networks: see 'What we never collect' above for what nobody gets.

Deleting your account removes profile, garage, media, matches, messages, plans, share links, and any registered push token immediately. Safety reports, enforcement records, blocks, verification-result references, and legally required audit entries are retained up to 90 days, then purged. Backups age out within 30 days.

Export your data, correct it, manage trusted browsers, revoke share links, and delete: all from the app, no support ticket needed. Questions: privacy@revv.fm.

We may update this policy as the product evolves. When we do, we'll change the effective date below, and for material changes we'll notify you in-app or by email before they take effect. Continued use after an update means you accept the revised policy.