REVA.

1. Information We Collect

Account Information

When you sign up, we collect your email address and display name. If you sign in with Google or Apple, we receive the basic profile information they share with us (name, email, avatar). If you use Apple's "Hide My Email", we receive the relay address Apple generates. We never receive your Google or Apple password.

Optional Information

• Age — used for content recommendation
• Gender — used for aggregate analytics
• Reading preferences — used for personalised recommendations

Content and Interactions

We store your reading progress, story choices, unlocked content, and your conversations with AI characters (direct messages and voice calls). Voice calls are processed to generate AI responses; we retain call transcripts and metadata (duration, character) to operate and improve the Service. During a voice call, audio from your microphone is streamed in real time to our voice processing providers — LiveKit (real-time audio transport) and ElevenLabs (speech processing and voice generation) — solely to generate the character's response. Microphone access is used only during an active call.

Purchase and Membership Information

Payments are processed by third-party payment providers (such as Stripe, Lemon Squeezy, Google Play, or the App Store). We receive transaction records (amount, date, item) but we do not store your full card number or payment credentials.

If you buy a membership, we also store the identifiers our payment provider gives us for your customer record, your subscription, and each invoice, together with the plan you chose, the period it covers, its renewal or cancellation status, and the benefits granted for that period. We use these to give you the benefits you paid for, to show your billing history, and to handle refunds and disputes. Card details remain with the payment provider at all times.

Device and Usage Data

We automatically collect device type, operating system, app version, IP address, language, and usage events (pages viewed, features used, buttons tapped) through cookies, SDKs, and similar technologies. We assign your browser or device a random identifier to measure how the Service is used.

Advertising and Attribution Data

We use advertising and analytics tools — including Meta Pixel and SDK, Google Analytics / Firebase Analytics, and TikTok Pixel and SDK — which collect identifiers (such as cookies and mobile advertising IDs) and event data (such as sign-up or purchase events) to measure and improve our advertising. When you arrive from an ad or campaign link, we store the campaign parameters and ad-click identifiers from that link (such as gclid, fbclid, ttclid) together with the random device identifier, and associate them with your account when you register, so we can attribute sign-ups and purchases to the campaign that brought you.

On iOS, we request your permission through Apple's App Tracking Transparency prompt before accessing the advertising identifier. If you decline, the Service works normally; advertising measurement simply becomes less precise. We also use Apple's SKAdNetwork, a privacy-preserving framework that reports campaign performance to advertisers without identifying individual users.

2. How We Use Information

• Provide, personalize, and improve the Service (including AI-generated conversations and recommendations)
• Process purchases and manage your Gems balance and unlocked content
• Measure advertising performance and acquire users efficiently
• Communicate with you about the Service (transactional emails, optional updates)
• Ensure safety, prevent fraud and abuse, and comply with law

AI Processing Disclosure

Conversations with characters are generated by artificial intelligence. Your messages are sent to third-party AI model and voice providers under contracts that restrict their use of your data to providing the service to us. We may review conversations in anonymized or limited form for safety and quality purposes.

3. How We Share Information

We do not sell your personal information. We share information only with:

• Service providers — hosting, payment processing, AI model and text-to-speech providers, analytics and customer support tools, bound by confidentiality obligations
• Advertising platforms (Meta, Google, TikTok) — conversion events for ad measurement and audience building. This happens both through their pixels/SDKs in the Service and through direct server-to-server reporting of purchase events, which may include a hashed (irreversibly scrambled) version of your email address, the ad-click identifier from the link you arrived on, and the purchase amount. We never share your conversations, reading activity, or payment details with advertising platforms
• Legal — when required by law, or to protect the rights and safety of users and the public
• Business transfers — in connection with a merger, acquisition, or asset sale

4. Advertising Choices and Opt-Out

You can limit personalized advertising at any time:

• Device settings — iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads → Delete advertising ID
• Platform controls — Meta Ad Preferences (facebook.com/adpreferences), Google My Ad Center (myadcenter.google.com), TikTok Settings → Ads
• Industry tools — aboutads.info/choices and optout.networkadvertising.org for participating companies
• Browser — blocking or clearing cookies limits web pixel measurement

Opting out does not reduce the number of ads you see — only how relevant they are — and does not affect your use of the Service.

5. Data Retention

We keep each kind of data only as long as we need it for the purpose it was collected, or as long as the law requires. In summary:

• Account and profile — while your account exists
• Conversation history — while your account exists, so characters can remember context. You can delete individual conversations, or your whole account, at any time (see Section 7)
• AI prompt diagnostic logs — 14 days, then deleted automatically
• Purchase, membership, and billing records — 5 years after the transaction. Australian tax and accounting law requires us to keep these, so they survive account deletion, reduced to what the law requires
• Usage and analytics events — 24 months
• Advertising attribution records — while your account exists

When you delete your account we remove your personal data, except the billing and tax records described above. Backups are overwritten on their own cycle, so a deleted record can persist in a backup for a short period before it is cycled out.

6. Age Requirement

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will delete the account and associated data. Contact us at support@revalit.ai if you believe a minor is using the Service.

7. Your Rights

In accordance with the Australian Privacy Act 1988, the General Data Protection Regulation (GDPR), the CCPA/CPRA, and other applicable privacy laws, you may have the right to access, correct, delete, or export your personal information, and to opt out of targeted advertising. You can:

• Manage or delete your data and account on the Account Data Management page
• Use the advertising controls in Section 4
• Email us at support@revalit.ai for any privacy request — we respond within 30 days

We do not discriminate against users who exercise their privacy rights.

8. International Transfers

We operate globally; your information may be processed in countries other than your own, including the United States and Australia. We use appropriate safeguards (such as standard contractual clauses) where required.

9. Security

We use industry-standard measures (encryption in transit, access controls, row-level security) to protect your data. Identifiers shared with advertising platforms for measurement are hashed before transmission. No system is completely secure; please use a strong, unique password.

10. Changes

We may update this policy from time to time. Material changes will be announced in the app or by email. Continued use after changes take effect constitutes acceptance.