Legal
Privacy Policy
Last updated 12 August 2026 · Version 1.0
This policy explains what RevDex does with your information — what the app collects, why, who else sees it, and how you get it back or delete it. It covers the RevDex iOS app and this website.
The short version. RevDex needs your camera to identify cars and, if you allow it, your approximate location to place spots on your map. Photos you capture are sent for identification and stored with your account so your cards keep working. We don't sell your data and we don't run ads.
1. Who we are
RevDex is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [COUNTRY] ("RevDex", "we", "us"). For the purposes of the UK/EU General Data Protection Regulation, we are the data controller for the personal data described in this policy.
If you have any question about this policy, write to privacy@revdex.app.
2. What we collect
Information you give us
- Account details — your email address, display name and, if you set one, a profile photo. If you sign in with Apple and choose to hide your email, we only ever receive Apple's relay address.
- Your spots — the photographs you capture in the app, together with the identification result, timestamp and any notes or favourites you add.
- Messages to us — anything you send to support, including the contents of the message and your contact details.
Information collected automatically
- Device and app data — device model, operating system version, app version, language and region, and a randomly generated installation identifier.
- Usage data — which screens you open, how often you scan, and which features you use, in aggregate form.
- Diagnostics — crash reports and error logs, so we can fix what's broken.
- Location — only if you grant permission. See section 4.
We do not collect your contacts, your camera roll as a whole, your health data, your financial details, or your browsing activity on other apps and sites.
3. Photos and identification
Identification is the core of the app, so it is worth being precise about what happens to a photograph you take.
- When you capture a car, the image is sent over an encrypted connection to our servers and on to our machine-vision provider, [AI PROVIDER NAME], which returns a best guess at the manufacturer, model, generation and year.
- The photo is then stored against your account so the resulting card can keep displaying it. Deleting the card deletes the photo.
- We only access the camera while the scanner is open. RevDex does not read your photo library unless you explicitly pick an image from it.
- [CONFIRM WITH YOUR AI PROVIDER] — state here whether images are used to train the provider's models. If you are on an enterprise or zero-retention tier where they are not, say so plainly; it is one of the most reassuring sentences you can put in this policy.
Please be considerate about what you photograph. Frame the car, not the people around it, and don't capture number plates or faces where you can avoid it. Where a plate is visible in an image you upload, [STATE WHETHER YOU BLUR PLATES AUTOMATICALLY].
4. Location
Location is optional. The app asks for permission the first time you open the map or save a spot, and RevDex works without it — you simply won't get a map of where you found things.
- We request while-in-use access only. RevDex does not track your location in the background.
- A spot's coordinates are stored with the spot so it can be pinned on your own map.
- Where a spot is visible to other users — on a leaderboard, in an event, or on a shared card — its location is shown [COARSE / CITY-LEVEL ONLY / NOT AT ALL].
- You can withdraw location access at any time in iOS Settings, and remove stored coordinates by deleting the spot.
5. How we use your information
- To identify the cars you photograph and build your cards.
- To create and maintain your account, garage, XP, rank and badges.
- To run social features you opt into — rivals, leaderboards, events and sharing.
- To send you service messages and, if you enable them, push notifications.
- To keep the service secure, prevent abuse, and detect fraudulent or automated spotting.
- To understand which features are used so we can improve the app.
- To comply with our legal obligations.
We do not sell personal data, and we do not use your data for third-party advertising or profiling.
6. Legal basis for processing
If you are in the UK or the European Economic Area, we rely on the following bases:
- Performance of a contract — running your account, identifying cars, storing your garage.
- Consent — camera access, location access, push notifications and any optional analytics. You can withdraw consent at any time.
- Legitimate interests — securing the service, preventing abuse and improving the product, balanced against your rights.
- Legal obligation — where we must retain or disclose data by law.
8. How long we keep it
- Account data and your garage — for as long as your account is open.
- Deleted cards and photos — removed from active systems immediately and purged from backups within [30 DAYS].
- Closed accounts — deleted within [30 DAYS], except where we must keep records for legal or accounting reasons.
- Diagnostics and aggregate usage data — kept in anonymised form, which is no longer linked to you.
9. Your rights
Depending on where you live, you have some or all of the following rights: to access the data we hold about you, to correct it, to delete it, to restrict or object to processing, to receive a portable copy, and to withdraw consent.
You can delete your account and everything in it from within the app, under Profile → Settings → Delete account. You can also exercise any of these rights by writing to privacy@revdex.app. We will respond within 30 days.
If you are in the EEA or UK, you may lodge a complaint with your local supervisory authority — [NAME YOUR LEAD AUTHORITY, e.g. the UK ICO].
If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
10. Security
Data is encrypted in transit with TLS and at rest by our hosting provider. Access to production systems is restricted to the people who need it and protected by multi-factor authentication. No system is perfectly secure, but we will notify you and the relevant authority without undue delay if a breach affects your personal data.
11. Children
RevDex is rated [4+ / 12+] on the App Store and is not directed at children under [13 / 16, PER YOUR MARKET]. We do not knowingly collect personal data from them. If you believe a child has given us their data, contact us and we will delete it.
12. International transfers
Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, together with additional safeguards where appropriate. Our primary hosting region is [REGION].
13. Changes to this policy
We'll update this page when the app changes. If a change materially affects how we use your data, we'll tell you in the app or by email before it takes effect. The date at the top always reflects the current version.
14. Contact us
Privacy questions, requests and complaints: privacy@revdex.app
Everything else: the contact page.
[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]