Privacy Policy for RevelKey

• User-Provided Information: When you register or use RevelKey, you provide personal details such as your email address and display name.
• Automatically Collected Information: We collect device information (IP address, browser type, OS), usage data (pages viewed, features used), and app interactions.
• Journal & Chat Inputs: Text or voice entries you provide are processed to deliver journaling and AI chat features. These inputs are not linked to your account identifiers when sent to OpenAI.

• Providing Services: Your account info allows access to RevelKey; your inputs power journaling, chats, and recaps.
• Improving Services: Aggregated, anonymized data helps us refine prompts and enhance user experience.
• Security: We implement encryption, access controls, and audits to protect your data.
• Customer Support: We use your contact info to respond to inquiries.
• Communication: We may send updates, reminders, or promotional offers, subject to your preferences.
• Compliance: We adhere to legal requirements and enforce our Terms of Service.

• OpenAI Data Processing: We utilize OpenAI’s API to power our AI chat features, journaling analysis, and pattern recaps. To protect your privacy, we strictly enforce data minimization: we do not transmit your email, account credentials, or any direct identifiers to OpenAI. Only the specific text you type or dictate is processed via encrypted transit. Your data is contractually protected and is never used by OpenAI to train or improve their models. By default, OpenAI transiently retains API inputs and outputs for up to 30 days solely for automated safety and abuse monitoring. If no system abuse is flagged, this data is permanently and automatically deleted. We are actively pursuing a custom Zero Data Retention (ZDR) architecture to completely eliminate this temporary storage buffer in future updates.
• Data Storage (Supabase): We partner with Supabase, a secure cloud database provider, to host and manage your account data and journal entries. All of your personal data, journal history, and account settings are securely transmitted via encrypted transit and stored using industry-standard encryption at rest. This ensures that your private writings are protected against unauthorized access and remain strictly confidential on our backend servers.
• In-App Subscriptions (RevenueCat): We use RevenueCat to manage and process in-app purchases, subscriptions, and entitlement status across App Store platforms. RevenueCat receives transactional data such as purchase history, subscription status, and anonymous app user IDs or device identifiers. RevenueCat does not collect your payment card information directly (which is handled securely by Apple or Google), nor does it receive your email address, display name, or journal/chat contents. This data processing is strictly used to validate receipts, grant access to paid features, and analyze subscription analytics.

If you are located in the EU/EEA, you have the following rights under GDPR:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data.
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured format.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, please contact us at revelkeyapp@gmail.com.

If you are a California resident, you have the following rights under CCPA:

• Right to Know: Request details about categories and specific pieces of personal information collected.
• Right to Delete: Request deletion of personal information.
• Right to Opt-Out: Opt out of the sale or sharing of personal information (RevelKey does not sell or share your data).
• Right to Non-Discrimination: You will not be discriminated against for exercising your rights.

To exercise these rights, please contact us at revelkeyapp@gmail.com.

RevelKey uses cookies and similar technologies to improve your experience, analyze usage, and provide personalized features. You can disable cookies in your browser configuration, though certain application features may not function properly as a result.

RevelKey does not knowingly collect or solicit personal information from children under the age of 13. If we learn we have inadvertently collected such data, we will purge it from our servers promptly.

We use encryption, secure storage, and access controls to protect your data. However, no digital system is 100% secure, and we cannot guarantee absolute protection against all vector risks.

We may update this Privacy Policy from time to time. Material changes will be actively communicated to you via an in-app notification or through your registered email address.

For questions, privacy inquiries, or to exercise your data rights, please contact us directly at: revelkeyapp@gmail.com