Privacy Policy

• Revlo is for adults 18 and over.
• Your car photos go to AI services — Google (Gemini) to identify the car, and Meta (Muse) or Google to make the card art. That is the core of the app.
• Location is optional. If you allow it, cards are tagged with the city and an area about 1 km wide — never your exact position.
• Revlo is social once you claim an account. Your handle, garage, catches and some activity can be seen by other players. You can make your profile private.
• We don't sell your data, show ads, or track you across other apps.
• You can delete your account in the app, or email us to delete your data.

1. Your app ID

The first time Revlo goes online, it creates an anonymous account for your install: a random ID with no name or email. We use it to run the app — your scans, purchases, notifications and settings are tied to it.

2. Photos you capture (core feature)

When you snap a car, the photo goes to our servers and on to AI providers: Google (Gemini) to identify the car and check that it is a real car, and Meta (its Muse image model) to make the card art. When Muse does not answer, Google makes the art instead. We keep a record of what the AI decided (for example the car, its rarity, the authenticity check and a short description of the photo), tied to your app ID. If you claim an account, your photos are also backed up (section 4). A copy of each card's art is kept on our servers for up to 30 days so it can be delivered again if a connection drops. Card art is made by AI and carries a label saying so in the image file. Please don't photograph people's faces or license plates.

3. Location (optional)

If you allow location while using the app, Revlo reads your location on your phone when you take a photo or open your garage (to tag recent catches), and to show nearby meets and where you are on the map. Your phone's own maps service (Apple or Google) turns it into a city name. Each card keeps the city and an area about 1 km wide — never your exact position, which stays on your phone. Revlo also uses your location on the phone to tell when you are moving at driving speed. Photos you import from your camera roll are stored as they are, including any location data inside the file. Location is never used for ads. If you say no, the app still works and cards aren't tagged.

4. Your collection

Your cards, progress and settings are stored on your phone. If you claim an account, they are backed up and synced to our servers — including your captured photos and card art, in private storage only you can read — so your garage survives a new phone or a reinstall.

5. Accounts

You can claim an account with an email address and password (we email a code to confirm it), or with Sign in with Apple on iPhone. We use your email only to sign you in, recover your account and answer you.

6. What other players can see

Revlo has public features. Other players can see:

• once you claim an account: your handle, home city, score, rank, garage value, the cities you have caught cars in, and season results on the leaderboards;
• if your profile is public: your garage (card art, make, model, rarity, city and catch date), your follower count, and your new catches on the feed and the Spotted Map (city and the 1 km area). Rare cards show only the city; map areas appear at least an hour after the catch, and areas where you catch often, such as home, are not shown;
• what you post: comments, reactions, crews you join, and cards you enter in the Weekly Show;
• cards you share by link (anyone with the link can open them).

PUBLIC PROFILE (Preferences › COMMUNITY) is usually on for a new account and controls your garage, feed posts, map areas and follower count; the leaderboards show you either way. Direct messages are seen by the people in the conversation, and crew chat by the crew — and by us when a message is reported or the law requires it. We keep only each chat's most recent messages (the newest 500 in a direct conversation, 200 in a crew room). Handles, crew names, comments and messages pass a word filter when you post them; handles, crew names and comments are then also reviewed by Google's AI, which can remove them.

7. Safety, reports and automated checks

If you report a player or a card, we keep the report (who reported whom, and why) to review it. Blocks are kept on your phone. Revlo checks every catch automatically — for example that it is a real car and not a photo of a screen — and can refuse a catch or limit an account that breaks the rules. If you think we got it wrong, email us and a person will look at it.

8. Notifications

If you allow notifications, we store your phone's push token. Pushes are delivered by Expo through Apple and Google, and can include a player's handle and a short preview of a message.

9. Analytics

We use PostHog to see how the app is used (for example which screens you open and which cars you catch), so we can improve it. Events are tied to your app ID — not your name or email — and include things like your app version, whether you have Pro, and your phone's language setting (for example "de-DE"). PostHog can use your internet (IP) address to estimate your country and city. This is never used for advertising or to track you across other apps or websites.

10. Crash reports

We use Sentry to receive reports when the app crashes or errors. They contain technical information — your device model, system version, app version, performance timings, and a log of recent app actions including the addresses of the app's server requests — not your photos or collection.

11. Purchases

Payments are handled by Apple (App Store) or Google (Google Play). RevenueCat manages your purchases and Pro status, tied to your app ID. We never see your payment-card details.

12. Your internet (IP) address

Every request the app makes carries your internet (IP) address. Our servers use it to check whether you are in a country where our AI providers don't offer their services; that check runs on our own servers and the address is not stored for it. Our hosting provider (Supabase) keeps short-lived server logs that include it, for security and troubleshooting.

13. Things you send us

If you contact us from the app, we receive your message, name, email, app ID and app version; it reaches us by email through Resend. If you suggest a car meet, we receive what you type (name, city, time and link).

14. Creator program — only if you take part

If you send a video at playrevlo.com/creators, we receive the link you send (a public post, or a share link to a video file), your Revlo name (so we can add film to your account) and your email if you give it. We look at the post's public view count and keep our decision and any reason, which you'll see as a note in the app. If you send a recording, we download the file; once approved, Revlo may post it on its own social accounts and use it in ads.

To provide the app you asked for (identifying cars, making cards, backups, purchases, public features); for our legitimate interests in keeping Revlo safe, fair and working (anti-cheat, moderation, crash reports, analytics); to follow the law; and, where the law requires it, with your consent (for example location and notifications, which you can turn off at any time in your phone's settings).

We do not sell or rent your personal data, and we don't share it for advertising. We share it only with the providers that run Revlo for us, each acting on our behalf, and with other players as described in section 6:

Provider	Purpose	Data involved
Google (Gemini API and Vertex AI)	Car identification, authenticity checks, card art when Muse does not answer, reviewing handles, crew names and comments	Captured photo; handles, crew names and comments
Meta (Muse)	Card art	Captured photo
Supabase	Our servers: database, storage, sign-in	App ID, account email, cards, backups (incl. photos and card art), public features, reports, messages
PostHog	Product analytics	Usage events tied to your app ID; phone language; approximate country and city
Sentry	Crash reports	Technical crash data
RevenueCat, Apple, Google	Purchases and Pro status	App ID, purchase and subscription status
Apple, Google	Sign in with Apple (if you choose it); your phone's maps service turning location into a city name	Sign-in details; approximate location
Expo	Delivering push notifications	Push token, notification text
Resend	Sending emails, such as sign-in codes, and delivering messages you send us	Your email address; your message and contact details
Vercel	Hosts playrevlo.com and its forms	What you type into a form, passed on to Supabase

Google and Meta process your photos under their business terms for API customers: they don't use them to train their models. Google may keep requests for a limited time to detect abuse, and Meta may keep content for legal compliance or a safety review. We may also share data if the law requires it, to protect people's safety, or as part of a sale or merger of our business (this policy would still apply).

We are a US company and our servers (Supabase) are in the United States. If you use Revlo from outside the US — including the EU/EEA, UK or Switzerland — your data, including captured photos, is transferred to and processed in the United States by us and the providers above. Google may process photos for car identification in other countries where it runs its AI services.

Where EU/EEA, UK or Swiss data-protection law applies, these transfers rely on recognized safeguards: Google LLC is certified under the EU-US Data Privacy Framework (and its UK and Swiss extensions), and our providers' data-processing terms include Standard Contractual Clauses. A photo can include personal data such as a license plate or a passer-by — please avoid capturing identifiable people or plates; such data is handled only as described here and can be deleted on request.

• Data on your phone stays until you delete it or the app. Releasing a card deletes its photo and art from your phone; backed-up copies on our servers are removed later — the art after about 14 days, the photo when you delete your account.
• Account data, backups and public content stay until you delete your account or ask us to delete them.
• Delivered card art kept for re-delivery: up to 30 days. Older versions of a backup: 30 days.
• AI decision and usage records, reports, moderation records and messages you send us: as long as needed to run and protect Revlo, or until you ask us to delete them (reports about someone and moderation records may be kept to protect other players).
• Creator submissions: until you ask us to delete them. Videos Revlo has already posted may stay up.

In the app (if you claimed an account): Account › DELETE ACCOUNT. This permanently deletes your account and your backups (photos and card art), public garage, feed posts, comments, follows, leaderboard rows and shared card pages. It also deletes your direct-message conversations — for the other person too — and any crew you founded, with its chat.

By email: write to danny@playrevlo.com from your account email, or with your handle, and we will delete your data. Use this if you never claimed an account, no longer have the app, or also want us to delete analytics and crash data held by PostHog and Sentry.

What is kept after deletion: reports about you and moderation records (including removed comments), season and Weekly Show results, AI decision and usage records, and messages you sent us — to protect other players, keep results fair and meet legal duties; email us to ask about them. Re-delivery copies of card art and older backup versions expire within 30 days. Purchase records kept by Apple, Google and RevenueCat follow their own rules and the law. Cards on your phone stay until you delete the app.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict how we use it, and to withdraw consent. Email danny@playrevlo.com and we will answer within the time the law requires. We won't treat you differently for using these rights. If you are in the EU/EEA, UK or Switzerland, you can also complain to your local data-protection authority.

You can also turn off location, camera, photo and notification access at any time in your phone's settings, and make your profile private in Preferences.

Revlo is for adults 18 and over, because the AI services it is built on are offered only to adults, and it is rated for adults on the App Store and Google Play. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us information, contact us at danny@playrevlo.com and we will delete it.

Data is sent over encrypted connections, private storage is readable only by its owner, and access to our systems is limited. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you where the law requires it.

We may update this policy. The "Last updated" date above shows the latest version, and we'll let you know — for example in the app — before a material change takes effect.

Revlo Industries, Inc. · Scottsdale, Arizona, USA · danny@playrevlo.com · Danny Tapia