1. The short version
We keep as little as we can, we hold it in the United States, and we do not sell it or hand it to your employer. Raw conversations are deleted after 30 days. Reviel is deliberately separate from the medical system and does not connect to electronic health records.
The rest of this policy explains that in detail.
2. Who we are
Reviel Technologies, Inc. is a Delaware corporation based in Orlando, Florida. We are responsible for the personal information described in this policy. You can reach us at info@reviel.app.
3. What we collect
| Category | Examples |
|---|---|
| Account information | Name, email address, and the answers you give during onboarding |
| What you write | The things you type or say to Reviel during a session |
| Patterns | Summaries and observations derived from your sessions, such as which days tend to be hardest |
| Connected service data | Where you choose to connect them: activity, sleep, heart rate variability, calendar availability, listening history |
| People you choose | Contact details for anyone you add so you can reach them through Reviel |
| Device and usage | Device type, operating system, app version, crash reports, device identifiers (such as your device's advertising ID), and how you move through the app |
| Subscription status | Whether you have an active subscription, provided to us by Apple or Google. We never receive your card details. |
4. How we use it
- To run the service and respond to you during a session
- To recognise patterns over time so Reviel can anticipate a difficult period rather than only react to one
- To let you reach the people you have chosen
- To keep the service secure and to fix problems
- To manage your subscription
- To meet legal obligations
We do not sell your personal information. We do not use it for advertising or share it with advertisers. We do not use your conversations to train foundation models. We do not give your employer access to anything about you as an individual.
5. How long we keep it
| Data | Retention |
|---|---|
| Raw conversation content | Deleted 30 days after the session |
| Patterns and summaries | Kept while your account is active, because they are what makes Reviel useful over time |
| Account information | Kept while your account is active |
| Connected service data | Kept while the connection is active. Revoking a connection stops new data. You can delete what we already hold. |
| After account deletion | Removed within 30 days, except anything we must keep by law |
The 30-day limit on raw conversation is deliberate. Reviel is meant to remember what matters to you without keeping a permanent transcript of everything you said.
6. Where your data lives
All Reviel data is stored and processed in the United States, on Microsoft Azure infrastructure located in United States regions. We do not store or process your personal information outside the United States.
Data is encrypted in transit and at rest.
7. Artificial intelligence
Reviel uses AI models to generate responses. Some of this processing happens through Google Cloud Vertex AI, which acts as our processor under contract.
- That provider processes your content only to return a response to Reviel
- It is contractually prohibited from using your content to train its own models
- It does not retain your content beyond what is needed to process the request
We do not use third-party monitoring or analytics tools that would expose your conversations to another vendor. We built our own internal review tooling instead.
8. Health and fitness data
If you choose to connect Apple Health, Google Fit, or a wearable such as Whoop, Oura, or Fitbit, we receive only the specific data types you approve.
Data obtained through HealthKit is never used for advertising, marketing, or similar services. It is never sold, and it is never disclosed to third parties for their own purposes. It is used only to provide features inside Reviel that you have asked for. We do not use HealthKit data for data mining of any kind.
These connections are optional. Reviel works without them. You can revoke any connection at any time in the app or in your device settings, and you can ask us to delete the data we have already received.
9. The medical system
Reviel does not integrate with electronic health record systems, including Epic, and we have committed not to. Nothing you say to Reviel becomes part of a medical record, and no clinician, hospital, or insurer receives your information from us.
You may choose to export a summary of your own patterns and share it with a doctor. That is your decision and it happens on your instruction. We do not send anything to anyone on our own initiative.
10. Employers and institutions
Where an organisation pays for Reviel on behalf of its people, that organisation receives only aggregated, anonymised information about usage across its population. It never receives individual data of any kind.
An employer cannot see whether a specific person uses Reviel, what they said, or what patterns Reviel has observed. This is not a setting. It is how the system is built.
11. When we share information
We share personal information only in these situations:
- With people you choose to contact through Reviel, and only what you send them
- With service providers who help us operate, such as cloud hosting and our AI processor, under contracts that limit what they may do with it
- With Apple or Google, who handle your subscription and tell us only whether it is active
- Where the law requires it, or to protect someone from serious harm
- If Reviel is acquired or merges with another company, in which case we will tell you before your information moves and you will be able to delete your account first
12. Your choices and rights
- See what we hold about you and get a copy
- Correct anything inaccurate
- Delete your account and the data attached to it
- Export your patterns and take them wherever you want
- Turn off any connected service at any time
- Opt out of non-essential emails
Write to info@reviel.app to exercise any of these. We will respond within the time the law requires and will not treat you differently for asking.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act. We do not sell or share personal information as those terms are defined in that law.
13. Security
We encrypt data in transit and at rest, restrict internal access to those who need it, log administrative access, and review our security regularly. We are pursuing SOC 2 Type II certification.
No system is perfectly secure. If a breach affects your information we will notify you as the law requires.
14. Children
Reviel is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it. If you believe a child has given us information, contact info@reviel.app.
15. Changes
If we change this policy in a way that materially affects you, we will tell you in the app or by email before it takes effect. The effective date at the top always reflects the current version.
16. Contact
Reviel Technologies, Inc.
Orlando, Florida, United States
info@reviel.app