Reveria Privacy Policy

Last updated: November 5, 2026 · Effective: To confirm: effective date

This policy explains what information Reveria collects, why, who we share it with, and the choices you have. It covers the Reveria mobile app (the "App"), the website at reveria.net, and related services.

The short version: Reveria needs a photo of your face to create your memories, and it sends that photo to AI providers to paint them. We don't sell your information, we don't show ads, and your memories are visible only to you.

1. Who we are

Reveria is published by Marios Vladimerou, who is the data controller for the information described here.

• Email: privacy@reveria.net
• Postal address: To confirm: geographic postal address for privacy and legal notices, and the country where the publisher is established

Reveria is for adults aged 18 and over. See section 6.

2. Information we collect

2.1 Your account

• Sign-in. If you sign in with Apple or Google, we receive your name and email address, and Google also gives us your profile picture. With Sign in with Apple, we also keep a token from Apple so we can ask Apple to revoke Reveria's access when you delete your account.
• Guest accounts. You can start without signing in. Your data is still stored on our servers under a guest account, which is linked to your Apple or Google sign-in if you sign in later.
• Preferences. What you tell us during setup and in Settings → Personalization, such as your historical interests, how you like to discover places and the feel you like for memories, and your time zone, so notifications arrive at a sensible hour.

2.2 Portraits and photos

• Portraits. To create memories, you add a portrait: a photo of your face. You can add more than one, and you can add portraits of other travelers, each with a name you choose (such as "You" or a first name). If you pick yourself out of a group photo, we keep only the cropped part showing you.
• Travel photos. You can add photos from a trip, from your camera, your photo library or Google Photos, to show you visited a place or to use as the setting for a memory. We keep the photo, its date and, if it has one, the location stored in the photo. If you use Google Photos, we keep a Google token that lets Reveria open the Google Photos picker for you.
• Photo proofs. For some rare encounters you can take a photo at the place to prove you were there. That photo is checked and then discarded; we don't keep it.
• Memories and films. The images and films Reveria creates for you, and the details used to create them, such as the encounter, the scene description and the model used.

2.3 Location

If you allow it, Reveria uses your device's location only while the App is open. It never tracks you in the background.

• To recognise a visit, the App sends your current position to our servers, which check whether it falls inside a place with encounters. We record the visit (which place, and when) and, when it falls inside that place, the position that proved it. We don't keep a history of where you've been.
• To show nearby encounters and send a "Nearby discoveries" notification, the App checks your position against nearby places when you open it.
• Location is also read from travel photos you add, as described above.

2.4 Your photo library

If you allow access, Reveria can scan your photo library on your device to find trips you've taken. The scan reads the date and location of your photos, and may use your device's own on-device intelligence to sort out photos it can't place, such as screenshots. Your photos and these results stay on your device. We receive only the towns and cities you've been to (each with an approximate centre point), with photo counts and dates, and the trips you confirm.

If some photos still can't be placed, the App may offer to check a few of them online (at most 4 per trip and 24 in all). Only the photos you choose are uploaded, only if you tap Check, and they're deleted as soon as the check finishes.

2.5 Information collected automatically

• Usage analytics. If you enable Product analytics in Settings, we use PostHog, hosted in the European Union, to understand how Reveria is used: for example, which screens and steps people complete and what people search for in the atlas. Events are linked to an account ID and may include device, app version and plan details. Product analytics is off by default; you can turn it off in Settings. Session replay and automatic touch capture are disabled in the app. To confirm: verify PostHog project settings and event properties before publication
• Crash reports. We use Sentry, hosted in the European Union, to find and fix crashes and errors. Reports include your account ID, device details, IP address, error logs and performance data.
• Push notifications. If you allow notifications, we store your device's push token. Notifications are sent through Expo, Apple and Google, and can include a city or encounter name.
• App updates. The App downloads updates from Expo, which receives your device type and app version.
• Maps and atlas content. Map tiles are loaded from OpenFreeMap, which receives your IP address and the area of the map you're viewing. Encounter stories and place information are downloaded from Cloudflare, which receives your IP address. If you tap for directions to a place, it opens in Apple Maps or Google Maps with that place's location.

2.6 Purchases

Purchases are processed by Apple. We don't receive your payment card details. Our subscription provider, Adapty, receives your account ID and keeps your purchase history so we can unlock Premium and restore purchases. We store your plan, renewal status and how many memories and films you've used this month.

2.7 Reports and support

If you report a memory, we keep the report, the reason and anything you write, and the outcome of our review, until you delete your account. If you email us, we keep the conversation.

3. AI features

Creating memories and films uses AI models run by other companies. Before you first add a portrait or photo, the App asks you to agree to this, and records that you did.

What we send, and to whom. Requests go to the providers below, mostly through OpenRouter, a service that connects to AI models. Photos are sent as short-lived private links or as image data. A photo can include information stored in it, such as when and where it was taken, and that information may reach the provider.

We never send your email address. We don't use AI to make decisions about you that have legal or similarly significant effects.

How providers may use it. To confirm: write what each provider may keep, for how long, and whether it may train on requests. No request sets OpenRouter's no-training or zero-retention routing today, and films go through fal.ai to MiniMax. Settle this in task-photo-ai-privacy.md and task-ai-privacy-compliance-audit.md

Your portrait is not used to recognise you. We use your portrait only to paint your likeness into memories and films. We don't create face templates, and we don't use portraits to identify you or anyone else. To confirm: counsel to confirm the position on biometric laws, especially Illinois (BIPA), Texas and Washington, and whether a separate written consent for portraits is needed for US users

Gift memories. If Postcards from Reveria is on (in Settings → Notifications), we may occasionally create a memory for you as a gift while you're away, using your portrait and an encounter you've unlocked. Turn it off any time.

AI-generated content. Memories and films are made by AI. They're interpretations, not real photos or historical records.

4. How we use information and why

To confirm: counsel to confirm legal bases, consent requirements and the final analytics choice before publication

We do not sell your personal information. We do not show ads, and Reveria contains no advertising SDKs. We don't track you across other companies' apps or websites.

5. Who can see your information

Your portraits, photos, memories, films, visits and journeys are private to your account. There are no public profiles, feeds or shared albums. If you save a memory to your photo library or share it, you choose where it goes.

If a memory is reported, a person on our team may look at it to review the report.

6. Children

Reveria is for adults aged 18 and over and is not directed at children. You must not add a portrait of anyone under 18, and our Terms forbid creating images of children. If we learn that a portrait or memory shows a child, we remove it.

If you're a parent and think your child has used Reveria, or a photo of your child is in someone's account, email privacy@reveria.net and we'll delete it.

7. Who we share information with

We share information only with service providers that help us run Reveria, and only what each needs:

To confirm: confirm a data processing agreement is in place with each provider, and where Convex and Cloudflare R2 store data (region)

We may also disclose information when the law requires it, to protect people's safety or rights, or as part of a sale or merger of Reveria, in which case we'll tell you first.

8. Deleting your data

• Your account: tap the gear icon to open Settings, then Account → Delete account. Reveria removes the account and its associated data, and removes the Apple or Google sign-in link. Some storage or provider cleanup may require further action. Signing in again starts a new, empty account. To confirm: verify reliable storage and provider erasure before publication
• A portrait: Settings → Personalization → Travelers, then Remove photo.
• A memory: open its options menu and choose Remove from journal. This hides the memory and its versions, and schedules the generated images for deletion. The original photos and any films stay until you delete them or your account. To confirm: complete individual-memory erasure before promising full deletion
• Without the App: follow the steps on our Support page, or email privacy@reveria.net.
• Subscriptions: deleting your account doesn't cancel an App Store subscription. Cancel it in your App Store settings.
• Records kept by providers: when you delete your account we ask PostHog to delete your analytics data and Apple to revoke Reveria's sign-in access. To confirm: production has no POSTHOG_PERSONAL_API_KEY, so the PostHog deletion is skipped today. Set it, or drop PostHog from this sentence Crash reports, purchase records at Adapty and Apple, and copies held by AI providers are not deleted automatically; email us and we'll ask them to delete yours.

9. How long we keep information

• While you have an account: your account, portraits, photos, memories, films, visits and journeys are kept until you delete them or your account.
• Failed or cancelled memories: deleted after 24 hours.
• Photos checked from your library, and rare-encounter photo proofs: deleted as soon as the check finishes.
• Analytics, crash reports and purchase records: kept by PostHog, Sentry and Adapty under their retention settings. To confirm: retention periods set in PostHog, Sentry and Adapty
• AI providers: To confirm: what each AI provider and fal.ai keeps and for how long, after the routing decision in section 3. fal.ai's copies of film clips aren't deleted by Reveria today

10. Security

We use encryption in transit (TLS), authentication on every request, and private storage. Photos, memories and films can only be opened through short-lived private links issued to their owner. No system is perfectly secure, but we work to protect your information, and we'll tell you about a breach when the law requires.

11. Your rights

Depending on where you live, including the EU and UK (GDPR) and California (CCPA), you have the right to:

• see the personal information we hold about you and get a copy in a portable format;
• correct it;
• delete it (see section 8);
• object to or restrict how we use it, including analytics;
• withdraw your consent at any time, for example by removing your portraits, turning off location or notifications, or deleting your account;
• complain to your local data protection authority.

To use any of these rights, email privacy@reveria.net. We may ask you to confirm the account is yours, and we'll reply within one month.

California residents

In the past 12 months we collected the categories described in section 2: identifiers, account details, photos (including of your face), approximate and precise location while the App is open, app activity, purchase history and device information. We collect them from you and your device, for the purposes in section 4. We don't sell personal information or share it for cross-context behavioral advertising, and we use sensitive personal information (your portrait and precise location) only to provide Reveria. You have the right to know, delete and correct your information, and we won't treat you differently for using these rights. You can use an authorized agent to make a request.

12. International transfers

Our providers store and process information in the European Union, the United States and other countries. To confirm: confirm where MiniMax processes film requests through fal.ai When information leaves the EU or UK, we rely on safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. To confirm: counsel to confirm the transfer safeguard for each provider, including the AI model hosts

13. This website

The reveria.net website doesn't use cookies, analytics or trackers. Our hosting provider, Vercel, keeps standard server logs, such as IP addresses, to deliver the site and keep it secure.

14. Changes to this policy

When we make an important change, we'll tell you in the App before it takes effect and update the date at the top. If the change affects how your photos are used with AI, we'll ask you to agree again.

15. Contact

• Email: privacy@reveria.net
• Post: To confirm: postal address