Revivo Privacy Policy
DRAFT — to be reviewed by a lawyer. Version 2026-09-30. Written from the app's code (see
docs/legal/AUDIT.md). Values in double braces are filled in before publishing. The Romanian version prevails.
In short
- Revivo helps you track your sleep, training, meals and water, so you know how recovered you are. It is not a medical device.
- What you log stays yours. Scores are calculated on your phone and saved to your account. We don't sell data, show ads or use analytics.
- We only use your body and health data with your consent. You can withdraw it any time in Settings → Privacy. We then delete your health data and keep the account.
- Nobody sees your data unless you choose. When you join a team, teammates and the coach see only what we show you on screen before you tap "Join". If you choose "Share with the Revivo community", every user can see your nickname, photo and leaderboard scores. You can stop any time.
- Aged 13 to 15? A parent has to agree, through one email we send them. Under 13 you can't have an account.
- You can delete your account in the app, in Settings → Account. Everything goes, except the proof that you consented, which no longer contains your name or email.
- Questions? Write to privacy@revivo.training.
1. Who we are
The controller is Mihaela-Nicoleta Cernat, Str. Sachelarie Visarion nr. 18, Sector 2, București, România. Privacy contact: privacy@revivo.training. Phone: +40 731 892 420.
2. What we collect and where from
| What | Where from | Why |
|---|---|---|
| Email, name and account ID | Google Sign-In or Sign in with Apple (Apple may give a hidden relay address) | The account |
| Birth month and year | You enter them at the start; they can't be changed later | Age check and sleep and nutrition thresholds |
| First name, nickname, height, weight, sex, country, profile photo (optional, from your gallery) | You | Profile and score calculation |
| Logs: sleep, training (type, duration, effort), meals and macros, water, recovery methods, mental state, resting heart rate, notes | You | Recovery, strain and discipline scores |
| Calculated scores | Your phone | What you see in the app and, only if you choose, in a team or leaderboard |
| Teams, groups and your role | Your actions | Team features |
| Reports and blocks | You | Moderation |
| Consent history (what, when, which text version) | You and your parent | Proof of consent (GDPR art. 7) |
| Parent's email and name (ages 13–15) | You or the parent | Parental consent |
| Crash reports (device model, version, the error; no name, email or health data) | The phone, only with your consent | Fixing bugs |
| Country, from your approximate location | The phone, only if you unlock the local leaderboard and allow location | Country leaderboard. Coordinates are not kept. |
We don't collect contacts, Apple Health or Health Connect data, precise or continuous location, or the advertising ID.
3. Purposes and legal bases
| Purpose | Basis |
|---|---|
| Account, profile, teams | Contract (GDPR art. 6(1)(b)) |
| Health data and scores | Your explicit consent (art. 9(2)(a) and Romanian Law 190/2018 art. 3). Without it the app calculates no scores. |
| Sharing with a team or the community | Consent, given with the button that shows exactly what is visible (art. 6(1)(a) and 9(2)(a)) |
| Crash reports | Consent (art. 6(1)(a)); off by default |
| Parental consent | Legal obligation (GDPR art. 8) |
| Security, abuse prevention, moderation | Legitimate interest (art. 6(1)(f)) and DSA obligations |
| Keeping proof of consent after deletion | Legitimate interest in defending claims (art. 17(3)(e)) |
We make no automated decisions with legal or similarly significant effects on you (art. 22). Scores are informative estimates.
4. Who receives data
We don't sell data or share it for advertising. Only the providers that help run the app receive it, under data processing agreements:
- Google (Firebase): sign-in, database, server functions, hosting. Database in eur3; sign-in and server functions also run in the US.
- Sentry (Functional Software Inc.): crash reports, stored in the EU (Germany), only with your consent.
- Brevo (France): emails to parents and moderation notices.
- BigDataCloud (Australia): turns your approximate location into a country, only if you use the local leaderboard.
- Apple and Google: sign-in and, in the future, store payments.
- GitHub Pages (GitHub Inc., SUA): website hosting (IP addresses in server logs).
- Teammates, coach and community: only what you choose to show (section 7).
- Authorities: only when the law requires it.
5. Transfers outside the EU
Firebase Authentication and Cloud Functions may process data in the US, under the EU-US Data Privacy Framework and standard contractual clauses. Sentry is Data Privacy Framework certified. BigDataCloud (Australia) receives only approximate coordinates, under standard contractual clauses.
6. How long we keep data
- As long as you have an account. After 24 months without opening the app, the account is deleted automatically.
- Crash reports: 90 days.
- Firebase backups: a deleted user disappears from them within 180 days.
- Consent archive, after account deletion: 3 years. It holds no name, ID or email, only a cryptographic fingerprint of your email (and your parent's), the consent types, versions and dates.
- Content reports: as long as moderation needs, at most 12 months.
7. Teams, coaches and the community
- Teams. Before you join, we show exactly what teammates and the coach will see. The "Join and share" button is the consent. Leaving the team stops the sharing at once.
- The Revivo community. One choice, "Share with the Revivo community": your nickname, photo, country and leaderboard scores become visible to all users. Turn it off in Settings → Privacy.
- Ages 13–15. Sharing with a team or the community also needs a parent's consent. Only adults can create teams or coach.
- Reporting and blocking. Long-press someone's name to report or block them.
8. Children
- No account can be created under 13.
- 13–15: we send the parent one email. On one page they choose what they allow. Until then the app saves no health data. The parent can change or withdraw consent any time from the link in the email; withdrawing deletes the health data.
- 16–17: you give your own consent, for data and for sharing (Romanian Law 190/2018). You can't create or run a team.
- Age checks rely on what you declare. If we learn an account belongs to someone under 13, we delete it.
9. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time without affecting earlier processing. Most of these are in the app (Settings → Privacy and Settings → Account). For the rest, write to privacy@revivo.training. We answer within 30 days.
You can complain to the Romanian data protection authority, ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro, or to the authority where you live.
10. Security
Data is encrypted in transit and at rest. Database rules let everyone read only their own data and what others explicitly showed them. On the phone, data is wiped when you sign out, and on Android it is excluded from Google backups.
11. Studies
If we run a study to validate the scores, taking part will be separate, only with a signed form, and nothing from your account will be used without it.
12. Changes
If we change something important, we tell you in the app before it takes effect and, where needed, ask for consent again. The current version carries the date at the top.