Revealify Privacy Policy
This policy applies to the Revealify website, mobile apps, accounts, content, AI-generated cultural context, moderation, and related services. It explains what personal information Revealify collects, why, where it lives, and the choices and rights people have over it.
Policy at a glance
| Principle | Revealify commitment |
|---|---|
| Public identity | People appear through a Revealify username. Revealify does not require a real or personal name to be displayed publicly. |
| Private account data | Email, phone, authentication identifiers, private relay addresses, PIN hashes, and security information are not public. |
| No sale of personal data | Revealify does not sell personal information. Anonymous, aggregate cultural-interest statistics may be licensed under the safeguards in Section 8. |
| Account deletion | Deletion can be started in the app, or on the public deletion page. Sign in with Apple authorizations are revoked when an account is deleted. |
| Global rights | Revealify honors the access, correction, deletion, portability, objection, and complaint rights that apply where a person lives. |
1. Scope and controller
This Privacy Policy explains how Revealify, Inc. (“Revealify,” “we,” “us,” or “our”), a corporation in the United States, collects, uses, discloses, protects, and retains personal information when people use Revealify websites, mobile applications, profiles, uploads, social features, cultural-interest features, AI-generated cultural context, moderation tools, and related services (the “Services”).
It applies to visitors, registered users, and others who interact with the Services. Additional notices may apply when a feature collects information for a distinct purpose. Where law requires consent, Revealify requests it separately and provides a way to withdraw it.
Contact: Revealify, Inc., United States · support@revealify.global
2. Information Revealify collects
2.1 Account and profile information
- A unique username, your country, and optional profile details you choose to add.
- Your email address or phone number (your choice) for passwordless one-time sign-in codes, verification, recovery, and essential security messages.
- A profile image and other optional display information.
- Account identifiers, status, preferences, verification state, app-lock settings, and security events.
- If you enable an app-lock PIN, Revealify stores only a cryptographic hash of it, never the PIN itself.
Revealify does not require a real name, city, or home address for the standard account experience. If a new feature later requires more identity information, this policy will be updated and you will be notified.
2.2 User content and activity
- Videos, photos, titles, user-entered locations, comments, corrections, and other content you submit or publish.
- Likes, saves, follows, watch history, and uploads, so feeds, history, and collections work across your devices.
- Reports, appeals, support messages, and moderation records.
2.3 Technical information
- IP address, browser or device type, operating system, app version, timestamps, and standard server logs, used for security, reliability, and troubleshooting.
- Push-notification tokens and notification preferences, when you turn notifications on.
- Crash reports from the mobile app (a crash-reporting service is used). They carry technical crash details and an opaque account identifier; they do not include your email, phone number, or username, and no IP address or advertising identifier is attached.
3. Public and private information
3.1 Public by design. Your public identity is a Revealify username, including the country-coded format Revealify uses. Published videos, photos, titles, user-entered locations, comments, corrections, profile elements marked public, and their country and cultural categories are public by design.
3.2 Private by default.
- Email address, telephone number, one-time codes, authentication and provider identifiers, private relay addresses, recovery information, and PIN hashes.
- Private activity such as watch history, saves, internal security logs, reports, and moderation details, except to authorized personnel and service providers.
- Precise device location, unless a feature clearly explains that you are choosing to publish or share it.
In Account Settings, your email address is partially masked. Information received through email or phone sign-up, Google sign-in, or Sign in with Apple does not become part of your public profile.
4. Purposes and legal bases
| Purpose | Information | Primary GDPR / UK GDPR basis |
|---|---|---|
| Account access and security | Email or phone, one-time codes, identifiers, PIN hash, security events | Performance of a contract; legitimate interests in security; legal obligation where applicable |
| Core social features | Profile, content, follows, likes, saves, history, uploads | Performance of a contract |
| Essential communications | Email or phone and account status | Performance of a contract; legal obligation |
| AI cultural context | Post title, country, and category; never contact details | Legitimate interests, with safeguards and user correction |
| Safety and moderation | Content, activity, reports, logs | Legitimate interests; legal obligation; protection of users |
| Aggregate cultural insights | Activity and content country/category after aggregation and de-identification | Legitimate interests; you may object or opt out |
| Optional permissions | Location, notifications, photos, camera, or microphone when used | Consent where required; service request |
Revealify limits each use to a disclosed purpose. Where an applicable law requires a different legal basis, consent, or opt-out, Revealify applies that requirement.
5. Sign-in providers and authentication
5.1 Passwordless email or phone sign-in. Revealify uses one-time sign-in codes rather than a Revealify password. Codes are used only for authentication and expire after a short period. Revealify does not send marketing email or SMS unless you separately opt in.
5.2 Sign in with Apple. When you choose Sign in with Apple, Revealify may receive an Apple user identifier and the email address Apple provides, which may be a private relay address if you choose Hide My Email. Revealify does not request your name. This information is used for authentication, security, and account functionality. When an Apple-authenticated account is deleted, Revealify revokes the related Apple authorization as Apple requires.
5.3 Sign in with Google. When you choose Google sign-in, Revealify may receive an account identifier and the profile information you authorize, such as your name, email address, and profile image. It is used for authentication, security, and account functionality, is stored with your account, and does not become public.
6. Content, activity, AI, and moderation
6.1 AI-generated cultural context. Revealify uses an AI service to generate the cultural context (“Reveals”) shown with posts. The AI receives the post title, country, and category, not your email address or phone number. AI-generated context may contain errors, and you can suggest corrections in the app.
6.2 Reporting and moderation. You can report content you believe breaks Revealify’s rules. Reports are confidential and are accessible only to authorized moderation personnel and service providers who need access. Revealify may use automated tools, including AI, to help identify or prioritize potentially harmful content, but a person makes the final decision to remove content. Authors are told when content is removed and may ask for a review. Reports and enforcement records are kept as needed for safety, appeals, legal obligations, and enforcement integrity.
7. Location, permissions, and device data
Revealify may collect a location that you type in as part of public content. If Revealify ever uses device-derived approximate or precise location, the app will ask permission at the point of need, explain the purpose, and offer a manual or less intrusive alternative where practical.
- You can deny or revoke location permission without losing unrelated functionality.
- Precise device location is not made public unless the interface clearly explains that outcome and you knowingly choose it.
- Camera, photos, microphone, notifications, and other protected permissions are requested only when needed for a current feature.
8. Aggregate cultural-interest insights
Revealify measures engagement with cultures, countries, and categories, and may publish or license anonymous, aggregate statistics to tourism boards, cultural institutions, and research partners. These insights help fund the platform and can make overlooked cultural communities visible in planning and research.
- Groups, not individuals. Revealify does not publish or license a statistic that covers fewer than 50 people.
- No personal information goes to insight partners: no email, phone, username, precise location, or individual watch history.
- No re-identification. Revealify does not try to identify people from aggregate data and contractually prohibits partners from doing so.
- Public content stays public. Counts drawn from public posts, countries, and categories may be included.
- Opt-out. Email support@revealify.global to exclude your activity from future aggregate insights. Your account keeps working as before.
- State-law controls. If an insight practice counts as a “sale,” “sharing,” targeted advertising, or profiling under an applicable law, Revealify will provide the required notice and opt-out, including recognizing legally required preference signals.
9. Sharing and service providers
Revealify does not sell personal information. It discloses personal information to service providers only as needed to operate the Services, under contracts and safeguards.
| Provider | Role | Primary processing location |
|---|---|---|
| Supabase | Database, authentication, and file storage | EU (Ireland) |
| Vercel | Web hosting and serverless functions | United States |
| Mux | Video processing and streaming | United States |
| Twilio | SMS one-time sign-in codes | United States |
| Resend | Email one-time sign-in codes | United States |
| Anthropic | AI-generated cultural context from post metadata | United States |
| Sentry | Crash reporting in the mobile app | United States |
Revealify may also disclose information when required by valid law, to protect people and the Services from fraud or harm, or in a corporate transaction with appropriate notice and safeguards.
10. International transfers
Revealify is based in the United States and uses providers in the European Union and the United States, so personal information may be processed outside your country. Where required, Revealify uses lawful transfer mechanisms such as adequacy decisions, the EU–U.S. Data Privacy Framework where a recipient is certified, Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or other approved safeguards. You can ask about the safeguards that apply.
11. Data retention
| Data category | Retention |
|---|---|
| Account data | For the life of the account. After a deletion request, the account is hidden immediately and can be restored for 30 days; after that it is permanently erased or anonymized unless law requires or permits limited longer retention. |
| User content | Until you delete it, Revealify removes it, or retention is required for moderation, disputes, safety, or law. |
| One-time sign-in codes | Minutes, consistent with authentication. |
| Server logs | Short rotation windows appropriate for security. |
| Reports and moderation | As long as needed for safety, appeals, enforcement records, and legal obligations. |
| Aggregate / de-identified insights | May be kept because they are designed not to identify an individual; Revealify commits not to attempt re-identification. |
| Backups | Removed or overwritten on the backup lifecycle; access stays restricted meanwhile. |
Legal holds, fraud prevention, security, tax, accounting, dispute, or regulatory duties may require limited retention, which is restricted to that purpose.
12. Security and breach response
Revealify uses administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, row-level security, hashed app-lock PINs, monitoring, backups, and incident response. No system can guarantee absolute security.
If a personal-data breach occurs, Revealify will assess the risk and notify affected people, regulators, or other authorities when the law requires. Please report suspected unauthorized access to support@revealify.global.
13. Privacy choices and rights
Subject to applicable law, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, limits on sensitive-data use, and information about disclosures or processing. You may also opt out of aggregate insight use by emailing support@revealify.global. Revealify verifies requests reasonably, responds within the legally required period (30 days or any shorter period your law requires), and does not discriminate against people who exercise their rights.
Authorized agents may submit requests where the law permits. You may appeal a denied request where applicable and may complain to your local privacy or data-protection authority.
14. Account and data deletion
You can delete your account in the app: open Account Settings, select Delete account, and type DELETE to confirm. You can also request deletion without the app on the public page app.revealify.global/delete-account.html.
- Your account and content disappear from Revealify immediately and you are signed out.
- You can restore the account by signing back in within 30 days. After that window it is permanently deleted or anonymized, together with associated personal information Revealify is not legally required to retain.
- For Sign in with Apple accounts, Revealify revokes the related Apple authorization.
- If limited information must be kept for security, fraud prevention, dispute, tax, accounting, moderation, or legal reasons, it is restricted to that purpose and period.
15. Children and age requirements
Revealify is a general-audience service and is not directed to children under 13. Revealify does not knowingly collect personal information from a child under 13 without verifiable parental consent and compliance with the U.S. Children’s Online Privacy Protection Rule. Where a higher minimum age or parental authorization applies (up to 16 in parts of the EEA), Revealify follows it. India defines a child as anyone under 18 for purposes of its Digital Personal Data Protection Act, subject to applicable rules and exemptions.
If Revealify learns that an underage user provided personal information without required authorization, it takes appropriate steps to remove the account and the information. See also our Child Safety Standards.
16. Analytics, notifications, cookies, advertising, and tracking
Revealify does not use advertising trackers, third-party analytics, or marketing cookies, and does not track people across other companies’ apps or websites. Essential cookies or local storage may be used for sign-in, security, preferences, and service operation.
If Revealify later introduces analytics, advertising, or cross-app tracking, it will first update this policy, its store disclosures, consent flows, and opt-out controls. Apple App Tracking Transparency permission will be requested where required, and legally required preference signals, including Global Privacy Control where applicable, will be honored.
17. Jurisdiction-specific disclosures
These apply only where the relevant law applies to Revealify and to you, and supplement the rest of this policy.
17.1 EEA and Switzerland. Controller and contact details are in Section 1 and legal bases in Section 4. You may have rights to access, correction, erasure, restriction, portability, objection, withdrawal of consent, and to complain to a supervisory authority. Transfers use an applicable adequacy decision, Standard Contractual Clauses, or another lawful safeguard. Where EU law requires an EU representative or data protection officer, Revealify will publish their contact details.
17.2 United Kingdom. UK residents may have rights to be informed, access, correction, erasure, restriction, objection, and portability, subject to legal conditions. Transfers use a UK adequacy regulation, the UK Addendum, the IDTA, or another lawful mechanism. You may complain to the UK Information Commissioner’s Office.
17.3 California and other U.S. states. Where the CCPA applies, California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment. Revealify does not sell or share personal information as defined by the CCPA and did not in the preceding 12 months. The aggregate insights in Section 8 are aggregate consumer information and deidentified data, which the CCPA excludes from personal information. Residents of other states may have rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, or certain profiling, and appeal denials. Revealify honors legally required opt-out preference signals.
17.4 Canada. Revealify follows applicable Canadian private-sector privacy law, including accountability, identified purposes, meaningful consent, limited collection, use and retention, accuracy, safeguards, openness, access, and complaint handling. Depending on the province and activity, PIPEDA or a substantially similar provincial law may apply. Service providers and cross-border processing are described in Sections 9 and 10.
17.5 Brazil. Where the LGPD applies, Revealify acts as a controller and processes personal data under an applicable legal basis. Brazilian users may have rights to confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, and review of certain automated decisions.
17.6 India. Where India’s Digital Personal Data Protection Act applies, Revealify provides clear notice, processes digital personal data for lawful purposes, supports withdrawal of consent, and provides channels for access, correction, erasure, and grievances. Revealify applies India’s requirements for children and verifiable consent where applicable.
17.7 Other jurisdictions. Where a country or state requires additional notices, consent, representatives, transfer safeguards, breach notifications, or rights mechanisms, Revealify provides them. If local law is more protective than this policy, Revealify applies the legally required protection.
18. Changes and contact
Revealify may update this policy when laws, features, providers, or data practices change. It will update the effective date and, for material changes, give notice in the app or by other appropriate means. Continued use after the effective date is subject to applicable consent and notice requirements.
Revealify, Inc., United States
Privacy and support email: support@revealify.global
Account deletion: in-app Account Settings, or app.revealify.global/delete-account.html