Privacy Policy
Effective 2026-06-17 · Last updated 2026-06-17
Revlo ("Revlo," "we," "us") turns photos of cars you spot in the real world into a private collection of digital cards. This policy explains what data the app handles, why, who it's shared with, and your choices. Revlo is local-first and anonymous by default — you can use the core app without creating an account.
The short version
- Your car photos are sent to a third-party AI service to identify the car and generate the card art. This is the core function of the app.
- We collect a coarse, city-level location (only if you grant permission) to tag where you spotted a car. We keep only the city name — never your precise coordinates.
- There are no accounts and no public feed by default. Your collection lives on your device.
- Some optional features (leaderboard, account/cloud backup, analytics, crash reporting) involve sending limited data to service providers, described below and clearly marked.
What we collect and why
1. Photos you capture (core feature)
When you snap a car, the photo is sent to our processing service and on to a third-party AI provider (Google Gemini, and optionally Anthropic) to identify the car's make/model/details and generate the card's portrait artwork. The photo is stored locally on your device; it is transmitted to the AI provider only to produce your card, and we do not retain captured photos on our own servers for this step. AI providers process the image under their own terms and do not use it to train their models for our integration. Please don't capture identifiable people or license plates.
2. Coarse location → city name (optional, permission-gated)
If you grant location permission, once per catch we take a single low-accuracy location fix and convert it to a city name to tag the card ("spotted in Austin"). We discard the coordinates immediately and store only the city string, on your device. Location is "while using the app" only. Deny it and the app works normally — cards are simply untagged.
3. Your collection and progress (on your device)
Your cards, catch history, streaks, levels, and settings are stored locally on your device. They are not sent anywhere unless you turn on the optional account/backup feature below.
4. Leaderboard (optional)
If you set a collector handle and appear on the leaderboard, we store a small record on our backend (Supabase): an anonymous device identifier, your chosen handle, your city (if tagged), and your score. The leaderboard is readable by other players. It contains no email, no precise location, and no photos.
5. Account & cloud backup — only when enabled
If a build offers the optional account feature and you choose to claim an account, we collect your email address to sign you in (via a one-time email code / magic link) and to back up your collection so it survives a reinstall or a new phone. The backup is stored on our backend (Supabase) and is readable only by you. You can use Revlo fully without ever creating an account.
6. Analytics — only when enabled
If analytics is enabled in a build, we use PostHog to collect anonymized product-usage events to understand how the app is used and improve it. This is not used to track you across other apps or websites and is not used for advertising.
7. Crash & error reporting — only when enabled
If crash reporting is enabled, we use Sentry to receive diagnostic reports when the app crashes or errors. These contain technical device and error information, not your photos or collection.
8. Purchases — only when enabled
If in-app purchases are enabled, payments are processed by Apple; purchase and entitlement status is managed via RevenueCat. We do not receive or store your payment-card details.
How data is shared
We do not sell your personal data. We share data only with the service providers needed to run the features above, each acting on our behalf:
| Provider | Purpose | Data involved |
|---|---|---|
| Google (Gemini) | Car identification + card art | Captured photo |
| Anthropic | Alternate car identification (if used) | Captured photo |
| Supabase | Leaderboard; optional account/backup | Anon ID, handle, city, score; (account: email, backup) |
| PostHog | Product analytics (only when enabled) | Anonymized usage events |
| Sentry | Crash diagnostics (only when enabled) | Technical crash data |
| RevenueCat / Apple | In-app purchases (only when enabled) | Purchase/entitlement status |
Data retention & deletion
- Photos and your collection live on your device; delete the app to remove them. Releasing a card deletes its local photo and art.
- Leaderboard rows and (if used) account backups live on our backend until you ask us to delete them.
- To request deletion of any server-side data, contact us at itsdannytmedia@gmail.com and we will delete it.
Children
Revlo is not directed to children under 13 (or the equivalent minimum age in your region) and we do not knowingly collect their data.
Your choices
- Location, camera, photos, and notifications are all permission-gated in iOS Settings; you can revoke any of them at any time.
- You can use the app without an account.
- You can request deletion of server-side data (above).
Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.
Contact
Questions or requests: itsdannytmedia@gmail.com · Daniel Tapia