Google Sign-In and Google user data
When you choose Google Sign-In, Revia accesses only the information made available through the openid, email, and profile permissions: your Google account identifier, name, email address, and basic profile information.
Revia does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or other Google services.
Revia uses this information exclusively to create, authenticate, maintain, and secure your Revia account.
Google Sign-In data may be processed by Google and Amazon Cognito solely to complete authentication and by Revia’s AWS infrastructure to operate and secure your account.
Revia does not sell Google Sign-In data, use it for advertising, send it to Google Gemini, or use it to develop, improve, or train artificial intelligence or machine-learning models.
Google Sign-In data is separate from notes, prompts, study materials, and other content that you intentionally submit to Revia’s AI-powered features.
Google Sign-In data is retained while your Revia account remains active and is subject to the account-deletion process described in this Privacy Policy. Limited security, fraud-prevention, transactional, or legal records may be retained where technically necessary or legally required.
Revia’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
1. Who is responsible for your data
Revia is operated by Bladimir Villarreal, an individual established in Spain.
Data controller: Bladimir Villarreal. Postal address: Alicante, España, 03015, Spain. Privacy contact: privacy@getrevia.app.
2. Scope and minimum age
This Privacy Policy applies to the Revia website, application, account services, study tools, artificial intelligence features, notifications, and related services.
You must be at least 18 years old to create or use a Revia account. Revia is not intended for individuals under 18 and we do not knowingly permit individuals under 18 to create accounts or use the Service.
If we become aware that an individual under 18 has created or is using an account, we may suspend or close the account and take reasonable steps to delete the associated personal information.
3. Information we collect
We collect only the information reasonably necessary to provide, secure, and operate Revia.
- Account information, including your email address, first name, last name, preferred language, time zone, account identifiers, and authentication information.
- User Content, including notes, study materials, flashcards, generated study resources, text, prompts or instructions submitted to AI features, and other educational content you choose to store or process through Revia.
- AI-generated content produced in response to your requests and stored as part of Revia study features.
- Study activity and application data required to provide features such as study scheduling, reminders, progress, and upcoming reviews.
- Technical and security information that may be generated automatically when you use Revia, such as IP address, browser or device information, timestamps, request logs, authentication events, and security events.
- Communication preferences and information necessary to send account messages, study reminders, and other service communications.
4. Where your information comes from
Most personal information is provided directly by you when you create an account, configure Revia, create study material, or use application features.
Technical information may also be generated automatically by Revia and by infrastructure, authentication, security, and network providers while operating the service.
5. Why we process your information
We process personal information only for defined purposes connected with operating Revia or complying with applicable law.
- To create, authenticate, maintain, and secure your Revia account.
- To store, organize, retrieve, and display your notes and study materials.
- To generate flashcards, study resources, summaries, transformations, and other requested AI-assisted content.
- To schedule study activity, calculate upcoming reviews, and provide reminders and notifications.
- To send transactional and service-related emails, including account verification, password recovery, security notices, study reminders, and important service information.
- To prevent fraud, abuse, unauthorized access, attacks, and violations of our Terms of Service.
- To diagnose technical problems and maintain the availability, reliability, and security of Revia.
- To comply with applicable legal obligations and respond to valid legal requests.
- To send optional marketing communications in the future only where permitted by law and, where required, with your consent. You will be able to opt out of such communications.
6. Legal bases for processing
Where the General Data Protection Regulation applies, we rely on different legal bases depending on the purpose of the processing.
- Performance of a contract or steps requested before entering into a contract when processing information necessary to create your account and provide the Revia service and features you request.
- Legitimate interests when reasonably necessary to protect Revia, prevent abuse, maintain security, diagnose technical problems, and improve the reliability of the service, provided those interests are not overridden by your rights and freedoms.
- Compliance with legal obligations where processing or retention is required by applicable law.
- Consent where applicable, including for optional marketing communications or other optional processing that legally requires consent. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
7. Artificial intelligence and Google Gemini
This section applies only to study content that you intentionally submit to an AI-powered feature. It does not apply to Google Sign-In data.
Revia uses Google Gemini to provide artificial intelligence features. When you ask Revia to generate or transform study content, information you submit for that operation may be transmitted to Google for processing.
The information sent may include prompts or instructions, notes, excerpts, study materials, flashcards, or other User Content selected or provided as part of the requested AI operation.
Revia does not maintain a separate history of your AI prompts as a standalone prompt-history feature. However, content used in a request may already exist as part of your notes or study material, and AI-generated results may be stored when necessary to provide Revia features.
At the date of this Privacy Policy, Revia uses the paid tier of the Gemini Developer API. Under Google terms applicable to paid services, Google does not use submitted prompts, associated content, or generated responses to improve Google products or services.
Google processes information submitted to Gemini as necessary to provide the requested AI functionality, in accordance with the applicable paid-service terms and privacy documentation.
AI-generated content can be incomplete, inaccurate, outdated, or incorrect. You should verify important information independently and should not rely on generated content as professional, legal, medical, financial, or other specialized advice.
8. Service providers and recipients
Revia does not sell, rent, or trade your personal information. We use third-party service providers only where necessary to operate, secure, or provide specific Revia features.
- Amazon Web Services (AWS), for cloud infrastructure, databases, authentication, computing, content storage, email delivery, logging, networking, and related infrastructure services. Revia primary infrastructure is hosted in the AWS eu-west-1 region in Ireland.
- Google, for Google Sign-In and Google Gemini artificial intelligence services.
- Cloudflare, where enabled, for security, abuse prevention, bot protection, and related network or application-protection services.
- Professional advisers, authorities, courts, regulators, or law-enforcement bodies where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal claims.
9. International data transfers
Revia is established in Spain and its primary AWS infrastructure is located in Ireland. However, some service providers, including global technology providers, may process information in countries outside Spain or the European Economic Area.
Where applicable law requires safeguards for international transfers, Revia relies on appropriate mechanisms made available by its service providers, such as adequacy decisions, contractual safeguards, or other legally recognized transfer mechanisms.
10. We do not sell personal information
Revia does not sell personal information.
We do not rent personal information, trade user databases, or provide personal information to advertisers for their independent advertising purposes.
Disclosure to infrastructure, authentication, security, AI, and other technical service providers as described in this Privacy Policy is limited to what is reasonably necessary to operate or provide the relevant service.
11. Data retention
Account information and User Content are generally retained for as long as your Revia account remains active or for as long as necessary to provide the service.
When you delete your account, Revia initiates deletion of the account information and User Content under its control and does not provide an account-recovery period.
Some limited technical, security, fraud-prevention, transactional, or legal records may remain for a limited period where technically necessary or required by law.
Revia does not currently maintain separate user-restorable backups of User Content. Infrastructure providers may nevertheless maintain technical redundancy, temporary copies, logs, caches, or other operational records according to their infrastructure and retention procedures.
Information processed by third-party providers may be subject to the provider retention rules described in their applicable terms and privacy documentation.
12. Account deletion
To request deletion of your Revia account, contact us at privacy@getrevia.app.
Deleting your account permanently removes your access to the account and initiates deletion of your notes, study materials, generated content, and other account information controlled by Revia.
Account deletion is intended to be permanent and Revia does not currently provide a recovery period.
Deletion from third-party infrastructure, security logs, temporary caches, or records that must be retained for legal reasons may not occur at exactly the same moment as deletion from the active Revia database.
13. Emails and notifications
Revia may send service communications that are necessary or closely related to your account and use of the service, including verification emails, password-reset messages, security notifications, study reminders, upcoming-review reminders, and important service notices.
Revia may introduce optional newsletters, product announcements, promotions, or other marketing communications in the future. Where consent is legally required, these communications will only be sent after obtaining the appropriate consent and will include a way to unsubscribe or change your preferences.
You may not be able to opt out of communications that are strictly necessary for security, account administration, or important changes to the service.
15. Security
Revia uses technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.
These measures include cloud infrastructure controls, authentication mechanisms, access restrictions, encrypted network communications, security monitoring, and other safeguards appropriate to the nature of the service.
No online service or method of electronic storage can guarantee absolute security. You are responsible for protecting your credentials and for notifying Revia if you believe your account has been compromised.
16. Your privacy rights
Depending on your location and applicable law, you may have rights regarding your personal information. Users protected by the GDPR may exercise the rights provided by applicable European data-protection law.
- Request access to personal information Revia holds about you.
- Request correction of inaccurate or incomplete personal information.
- Request deletion of your personal information where applicable.
- Request restriction of certain processing where applicable.
- Object to processing based on legitimate interests where applicable.
- Request portability of personal information where the legal requirements for portability are met.
- Withdraw consent at any time for processing based on consent.
- Lodge a complaint with a competent data-protection authority.
17. How to exercise your rights
Revia does not currently provide a self-service data-export feature. This does not prevent you from exercising any data-access or portability right that may apply under applicable law.
To exercise a privacy right, contact us at privacy@getrevia.app. We may request information reasonably necessary to verify your identity before fulfilling a request.
We will respond within the periods required by applicable law.
18. Complaints
If you believe that Revia has not handled your personal information appropriately, you may contact us first at privacy@getrevia.app so that we can review your concern.
If you are in Spain, you also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD). If you are elsewhere in the European Economic Area, you may contact your competent supervisory authority.
19. Automated decision-making
Revia uses automated systems and artificial intelligence to provide study features, organize content, generate educational material, and assist with study scheduling.
Revia does not currently use automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of applicable data-protection law.
20. Changes to this Privacy Policy
We may update this Privacy Policy when Revia changes, when we introduce new providers or features, or when legal requirements change.
The current version will be made available through Revia and will display its last-updated date. Where required by law or where changes materially affect your privacy, we will provide additional notice.
21. Contact
For questions, requests, or concerns about this Privacy Policy or the processing of personal information, contact:
Bladimir Villarreal
Alicante, España, 03015, Spain