Privacy Policy

1. Who we are

Revva is operated by IcarusRex LLC, a Delaware Limited Liability Company ("Revva," "we," "us," "our"). This Privacy Policy explains how we handle information when you use the Revva mobile application and related services (the "Service").

Contact: hello@askrevva.com

Revva is intended for users in the United States who are 18 or older. See Section 12.

2. Information we collect

We describe information by category and purpose rather than by listing every field, because the app will change and this policy needs to remain accurate as it does.

2.1 Information you give us directly

2.2 Information collected automatically

3. What we do not do

• We do not sell your personal information for money.
• We do not serve advertising or integrate ad networks or advertising SDKs.
• We do not use the documents you store for retrieval — such as your insurance card — to generate unsolicited commercial offers or to trigger a partner handoff you did not ask for.
• We do not allow any commercial arrangement to alter the substance of the analysis we give you.

4. AI processing

Revva's core features are powered by artificial intelligence. When you submit a repair quote, ask a question, or use voice input, the content of that submission — which may include an image of a document and information about your vehicle — is transmitted to a third-party AI provider for processing, and the result is returned to you.

We contract with our AI providers on terms that prohibit them from using your content to train their general-purpose models. We select providers on this basis and will disclose our providers on request.

Before you upload a document, remove anything you do not want processed. If a repair quote happens to have unrelated sensitive information written on it, that information goes where the document goes.

AI output is an informational estimate, not professional advice. See Section 5 of our Terms of Service.

5. Sensitive information: documents, location, and safety

Three categories of what we hold carry more weight than the rest, and we handle them accordingly.

5.1 Your document vault

• Encrypted. Documents are encrypted in transit and encrypted at rest on our servers.
• Stored only where storage serves you. We keep the image of a document only when having that image available to you later is the point — your insurance card, registration, and license. For transactional documents such as a repair quote, we extract the information needed for the analysis and do not retain the image beyond the period needed to complete and let you review that analysis.
• Not a lead source. The insurance expiry date we read from your insurance card is used to remind you. It does not, on its own, cause us to hand you or your information to an insurer. Only you can cause that, by asking. See Section 7.
• Deletable. You can delete any document at any time.

5.2 Location

• We request location permission at the moment a feature needs it, not up front.
• Location shared during a safety session is transmitted to the trusted contacts you designated, and to no one else.
• We do not sell location data. We do not disclose your individual location to any commercial third party.
• Location history used to power features like your parking pin is retained only as long as the feature requires.

5.3 Safety features and your trusted contacts

When you activate a safety feature, you are consenting to the transmission of your location and related information to the contacts you have chosen. Your trusted contacts do not have Revva accounts and are not tracked by us; we hold their contact details only in order to deliver the alerts you ask us to send.

6. Aggregate data and how we use behavioral information

This section describes the part of our business that is most likely to concern you, so we are being direct about it.

Revva accumulates information about what cars cost to repair, what shops charge, which line items are commonly upsold, and how vehicles fail over time. This is genuinely valuable to the automotive industry and we sell it. We want you to understand precisely what "it" is.

6.1 What we sell

We sell aggregate, de-identified statistics and trends. Examples of the kind of thing a buyer receives:

• Average and range of prices charged for a given repair, by vehicle type and metropolitan area.
• The frequency with which a given service is recommended but not required.
• Patterns in how a class of vehicle fails at particular mileage bands.
• Aggregate feedback about how women experience service at a given shop — delivered as aggregate scores and themes, never as attributed individual reviews unless you chose to publish that review publicly.

6.2 What we do not sell

We do not sell any record that identifies you or is reasonably capable of identifying you. That means we do not sell your VIN, your name, your email, your phone number, your address, your precise location, your documents, or any dataset from which you could be picked back out.

6.3 How we make de-identification real rather than rhetorical

"Anonymized" is easy to claim and easy to get wrong. A VIN alone identifies a vehicle. A VIN combined with a mileage reading and a zip code identifies a person. So we apply controls, not adjectives:

• Identity is separated from behavior at the database level. Information that identifies you is held separately from the behavioral and vehicle information used for aggregation. This is an architectural control, not a policy one — it is designed so that the two cannot casually be rejoined.
• Direct and strong indirect identifiers are stripped, not masked. VINs are removed from aggregation datasets rather than hashed, because a hashed VIN is still a VIN to anyone who has the list.
• Minimum group size. We do not release a statistic derived from fewer than [K] underlying records, so that no output describes a small enough group to single someone out.
• Geography and time are coarsened. Aggregated data is reported at metropolitan-area level or broader, and at a time granularity no finer than [PERIOD].
• Contractual prohibition on re-identification. Every buyer of our aggregate data is contractually barred from attempting to re-identify any individual, from combining it with other datasets for that purpose, and from onward sale. Breach terminates the agreement.

7. Referral fees, partners, and paid placement

We earn money when you choose to be connected with certain partners. This section explains exactly when that happens and what it means legally.

7.1 The rule

A commercial connection only happens when you initiate it. We will not hand you or your information to an insurer, warranty provider, lender, or shop unless you have asked us to help you with that specific thing, and we have told you, at that moment, that we earn a fee.

A reminder is not a referral. If we tell you your insurance expires in thirty days, that is the reminder you asked for. If you then tap to see whether you are overpaying, that is you initiating a referral, and we will say so before you proceed.

7.2 What partners receive

When you initiate a connection, we share only what is necessary to fulfill the request you made, and we tell you what that is before it is shared. Partners receive your information for the purpose of responding to your request and are contractually restricted from using it for other purposes or selling it onward.

7.3 Paid placement

Shops and businesses may pay for certification or featured placement on the Revva Map. Paid placement is labeled as paid. It does not affect your reviews, our verdicts, or our analysis, and it never will — if we cannot ship a monetized feature while honoring that, we do not ship it.

7.4 How the law classifies this — and why we are telling you

Under the California Consumer Privacy Act as amended by the CPRA, and under similar laws in other states, the words "sale" and "share" are defined broadly. They can cover arrangements where personal information is disclosed to a third party for monetary or other valuable consideration — even where nobody is buying a list of names.

Our referral arrangements may fall within those definitions. We would rather tell you that than rely on a narrow reading of the word "sell" to claim we do something we do not.

So, precisely:

• We do not sell your personal information for money. No one pays us for access to you or a list containing you.
• We may engage in what the law calls a "sale" or "share" when you ask us to connect you with a partner and that partner pays us a referral fee. This is always user-initiated and always disclosed at the point of decision.
• You can opt out. See Section 9. Opting out does not degrade the Service — it means we will not make those connections for you.

8. Who we share information with

8.1 If Revva is acquired

If Revva is acquired, information we hold may be transferred to the acquirer. We commit to the following, and we state it here because it is the moment at which promises like these are most often quietly dropped:

• We will give you advance notice of the transfer.
• The commitments in this Policy and in the Revva Data Promise will be binding on the acquirer with respect to information collected before the transfer, unless and until you agree to different terms.
• You will have the opportunity to export your data and delete your account before the transfer takes effect.

9. Your rights and choices

Depending on where you live, you may have some or all of the following rights. We extend the core rights below to all users regardless of state, because drawing a line between users based on their zip code is not a position we want to be in.

Exercise any of these in-app under Settings, or by contacting hello@askrevva.com. We will respond within the period required by law, and we may need to verify your identity first.

We honor Global Privacy Control and similar opt-out preference signals where technically supported.

10. Retention and deletion

We keep information only as long as it serves the purpose it was collected for.

• Vault documents: until you delete them or delete your account.
• Transactional documents (quotes, invoices): the image is retained only for the analysis window; extracted data is retained as part of your vehicle history until you delete it.
• Account and vehicle data: for the life of your account, then deleted or de-identified within [N] days of account deletion.
• Backups: deleted data persists in encrypted backups for up to [N] days before being overwritten. It is not accessible in the Service during that window.
• Aggregate data: de-identified aggregate statistics already produced are not reversible and are not deleted when you delete your account. They no longer describe you, because they never identified you.
• Legal holds: we may retain information where required by law or to resolve a dispute.

11. Security

We encrypt data in transit and at rest, restrict internal access to what is necessary, and separate identity data from behavioral data at the database level. We commission independent security review of the document vault before storing real user documents at scale.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will notify you as required by law and tell you what happened in plain language.

12. Children

Revva is not directed to anyone under 18 and we do not knowingly collect information from anyone under 18. If we learn we have, we will delete it. Contact hello@askrevva.com.

13. Changes to this Policy

We will update this Policy as the Service evolves. For material changes — in particular any change to what we collect, who we share it with, or the commitments in the Revva Data Promise — we will:

• Give you at least 30 days' advance notice, in-app and by email.
• Tell you plainly what changed and why, not just post a new version.
• Give you the opportunity to export your data and delete your account before the change takes effect.

Continuing to use Revva after the effective date means you accept the updated Policy.

14. Contact

hello@askrevva.com

If you believe we have broken a commitment in the Revva Data Promise, say so. A gap between what we say and what we do is the most serious problem this company can have, and we would rather hear it from you first.

Revva · Privacy Policy v1.0