Privacy Policy
Last updated: 02.01.2026
This Privacy Policy explains how rvlme Labs, Inc. (“rvlme,” “we,” “us,” or “our”) collects, uses, and protects personal data when you use the rvlme mobile application and related services (the “Service”).
rvlme is designed for private, ephemeral interactions. We intentionally limit the personal data we collect and how long it is retained.
1. Eligibility & Scope
This Privacy Policy applies to all users of the Service.
- The Service is intended only for users aged 16 and older.
- We do not knowingly collect personal data from anyone under the age of 16.
2. Information We Collect
2.1 Information You Provide
Phone NumberWe collect your phone number solely to authenticate your account via SMS verification.We do not use phone numbers for marketing or promotional purposes.
User ContentYou may upload photos and other content as part of private test interactions.
Users may upload sensitive or intimate photos as part of private interactions. Such content is processed only to operate the Service and is automatically deleted once the interaction ends.
Support CommunicationsIf you contact us, we may process the information you choose to share.
2.2 Automatically Collected Information
We collect limited technical and usage data, including:
- Device type and operating system
- App usage events (feature interactions, performance)
- IP address (used for security and analytics purposes)
3. How We Use Information
We use personal data only to:
- Provide and operate the Service
- Authenticate users and maintain account security
- Enable test creation, participation, and reveal flows
- Monitor performance and improve the Service using aggregated analytics
- Comply with legal obligations
We do not use personal data for advertising, profiling, or marketing emails.
4. Ephemeral Photos & Deletion
Photos uploaded to the Service are temporary by design.
- Photos are processed only to enable the test and reveal functionality.
- All photos are automatically and permanently deleted once a test session ends.
- Photos are not retained in backups beyond the duration of the interaction.
5. No AI or Automated Processing
rvlme does not use artificial intelligence, machine learning, facial recognition, or automated image analysis.
User content is never used for model training or similar purposes.
6. Analytics
We use Google Analytics to collect aggregated, event-level usage data to understand how the Service is used and to improve functionality.
Analytics data is not used for advertising, profiling, or cross-app tracking.
7. Subscriptions & Payments
Subscriptions are managed through RevenueCat and processed by Apple App Store or Google Play.
rvlme does not collect or store credit card or payment information.
8. Sharing of Information
We do not sell or share personal data for marketing purposes.
We may share limited information only with:
- Service providers that help operate the Service
- Legal authorities, when required by law
- A successor entity in the event of a merger or acquisition
9. Service Providers
We use the following providers to operate the Service:
- Google Firebase – authentication services
- Google Analytics – usage analytics
- RevenueCat – subscription management
- Amazon Web Services (AWS) – cloud hosting and data storage
These providers process data on our behalf under contractual obligations.
10. Data Retention
- Photos: deleted immediately when a test ends
- Account data: retained while the account is active
- Support communications: retained as necessary to resolve issues
You may request account deletion at any time.
11. Your US Privacy Rights
Depending on your state of residence, you may have the right to:
- Access, correct, or delete your personal data
- Opt out of the sale or sharing of personal data
rvlme does not sell or share personal data as defined under applicable US privacy laws.
Requests can be made by contacting us at privacy@rvlme.com.
12. EEA & UK Users – GDPR Rights
If you are located in the EEA or UK, you have the right to:
- Access, correct, or delete your personal data
- Restrict or object to processing
- Data portability
- Withdraw consent where applicable
Legal Bases
- Performance of a contract (core Service functionality)
- Legitimate interests (security, analytics)
- Consent, where required
International Transfers
Personal data may be processed in the United States using appropriate safeguards, including Standard Contractual Clauses.
You may lodge a complaint with your local data protection authority.
13. Security
We use reasonable technical and organizational measures to protect personal data, including encryption and access controls.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service means you accept the updated policy.
15. Contact Us
rvlme Labs, Inc.Email: privacy@rvlme.com