Privacy Policy

1. Who we are (the data controller)

Ruth Vaqari, trading as Reviso, of 19 Manger Gardens, Halifax HX2 8BQ, United Kingdom ("we", "us") is the controller of your personal data. If you have any questions about this policy or how we use your data, contact us at privacy@reviso.app.

2. What data we collect

• Account details: your name, email address, role (student or teacher), and — for teachers — your position and school.
• Age information: the year of birth you give us at sign-up, so we can apply age-appropriate protections.
• Content you upload or create: photos of notes and documents, and the flashcards, notes, quizzes, mock exams and podcasts generated from them. Uploaded photos may contain other people's information — please only upload content you have the right to use.
• Speaking practice: voice recordings you make for AI feedback, and the grades and feedback produced.
• Usage data: which features you use, daily usage counts, streaks and timetable entries, used to run and improve the service.
• Payment data: if you buy Premium, your payment is handled by our payment provider. We do not store your full card details.

3. Why we use your data and our lawful basis

• To provide Reviso (turning your content into study materials, grading speaking, running your account) — performance of a contract.
• To keep the service secure and improve it — our legitimate interests, balanced against your rights, with extra care where children are involved.
• Optional analytics and any marketing — your consent, which you can withdraw at any time.
• To meet legal obligations (for example, tax records for payments) — legal obligation.

We do not sell your personal data. We do not use your uploaded study content to train third-party AI models. We never share your content with other users without your permission.

4. How AI processing works

To create study materials and grade speaking practice, the content you upload (images, text and audio) is sent securely to our AI provider for processing and returned to you. AI output can contain mistakes and is for study support only. We do not use your voice recordings to identify you.

5. Who we share data with (processors)

We use trusted service providers who process data on our behalf under contract:

• Cloud hosting & database — to store your account and content.
• AI generation & grading provider — to produce study materials and speaking feedback.
• Payment provider (Merchant of Record) — we use Paddle.com as our reseller and Merchant of Record to process Premium subscriptions, manage billing, handle payment-related support, and meet sales-tax and invoicing obligations. Paddle acts as an independent controller for the payment data it collects; see Paddle's privacy notice. We do not receive or store your full card details.

6. International transfers

Where any provider processes your data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses) to keep your data protected.

7. How long we keep your data (retention)

We keep your account and study content for as long as your account is active. Voice recordings from speaking practice are kept only as long as needed to give you feedback and are then deleted. When you delete your account, we delete or anonymise your personal data within a reasonable period, unless we must keep some records to meet a legal obligation.

8. Storage and security

Your data is stored securely by our hosting provider. We use encryption in transit and access controls to protect your account. Some data (such as your decks and progress) is also stored locally on your device so the app works. No online service can guarantee absolute security, but we take reasonable steps to protect your information.

9. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to the processing of your data, and the right to data portability. You can edit or delete most of your content in the app, or email privacy@reviso.app. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Children and young people

Reviso is designed for students and we follow the ICO's Age Appropriate Design Code (the "Children's Code"). Privacy-protective settings are on by default and we only collect what we need. If you are under 13, you need a parent or guardian's permission to use Reviso, which we ask you to confirm at sign-up.

In simple terms: we only collect what we need to help you study, we don't sell your information, we don't show you ads, and a parent or guardian can ask us to delete your account any time by emailing us.

11. Cookies and local storage

Reviso uses storage that is strictly necessary to keep you signed in and save your progress on your device. With your consent, we may also use optional analytics to understand how the app is used. You can change your choice at any time and manage or clear storage in your browser settings; some features may not work correctly if you do.

12. Changes to this policy

We may update this policy from time to time. We'll update the "last updated" date above and, where changes are significant, let you know in the app.

13. Contact us

Questions about this policy or your data? Email privacy@reviso.app.