Privacy Policy

1. Introduction

Revu ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use Revu, a local-first macOS application for spaced repetition learning.

TL;DR: Revu is local-first. Your study data never leaves your device unless you explicitly export or sync it.

2. Information We Collect

2.1 Local Data (Stored on Your Device)

Revu stores all of your study data locally on your device, including:

• Flashcard decks and cards (content, tags, metadata)
• Study history and review logs
• Scheduling state (intervals, difficulty, stability)
• User preferences and settings
• Attached media files

This data is stored in: ~/Library/Application Support/Revu/v1/

2.2 Account Information (Optional)

If you choose to create an account for AI features or cloud sync, we collect:

• Email address
• Display name (optional)
• Authentication tokens
• Plan/subscription status

2.3 AI Feature Usage (Optional)

When you use AI-powered features (deck generation, card rewriting), we process:

• Content you submit for AI processing (text, PDFs, notes)
• Generated flashcards and explanations
• Usage metadata (token counts, model used)

Important: AI processing is performed server-side via Supabase Edge Functions. We do not train models on your data or share it with third parties beyond our AI service provider (Anthropic Claude).

2.4 Analytics and Diagnostics

We do not collect analytics, telemetry, or crash reports. Revu does not phone home.

3. How We Use Your Information

• Local Data: Processed entirely on your device for study sessions, scheduling, and analytics
• Account Information: Used for authentication, subscription management, and account recovery
• AI Content: Processed to generate flashcards, rewrite content, or provide explanations as requested
• Payment Information: Processed by our payment provider (Stripe) — we never see your full credit card details

4. Data Storage and Security

4.1 Local Storage

Your study data is stored locally in JSON format with standard macOS file permissions. Media attachments are stored in a separate directory. We recommend regular backups using Time Machine or similar tools.

4.2 Cloud Storage (Optional)

If you enable cloud sync, your data is encrypted in transit (TLS 1.3) and stored in Supabase's PostgreSQL database hosted on AWS in the United States. Account credentials are stored in macOS Keychain.

4.3 Data Retention

We retain account information and synced data for as long as your account is active. Deleted accounts and associated data are permanently removed within 30 days.

5. Data Sharing and Third Parties

We share your information only in the following circumstances:

• Supabase: Database and authentication services (account data, optional sync)
• Anthropic: AI processing for card generation features (only content you submit)
• Stripe: Payment processing for subscriptions (payment information only)
• Legal Requirements: When required by law or to protect our rights

We do not sell, rent, or trade your personal information to third parties.

6. Your Rights and Choices

6.1 Data Access and Export

You can export all your study data at any time via File → Export. Data is exported in human-readable JSON format with full fidelity.

6.2 Data Deletion

You can delete your account and all associated cloud data from Settings → Account → Delete Account. Local data can be deleted by removing the application support folder.

6.3 Opt-Out of Cloud Features

You can use Revu entirely offline without creating an account. AI features and cloud sync are optional.

7. Children's Privacy

Revu is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@revu.cards.

8. International Data Transfers

If you use cloud features, your data may be transferred to and processed in the United States where our servers are located. By using these features, you consent to this transfer.

9. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising CCPA rights

To exercise these rights, email privacy@revu.cards with "CCPA Request" in the subject line.

10. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact privacy@revu.cards. You also have the right to lodge a complaint with your local data protection authority.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. We will notify you of material changes by:

• Posting a notice in the app
• Sending an email to your registered email address (if applicable)
• Updating the version date at the top of this policy

Continued use of Revu after changes indicates acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: