1. Introduction
Revaliyo is a product of Baryonminds Ltd ("we", "our", or "us"), a company registered in the United Kingdom with its registered office at 13 Teeswater Way, Whitehouse, Milton Keynes MK8 1BF. Both SWAP and GIVEAWAY will be referred to as transaction(s) in this document.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Revaliyo mobile application (the "App"). By using the App, you agree to the practices described in this policy.
We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide Directly
- Full name
- Email address and password
- Place of pickup/delivery address
- Phone number
- Profile photo
- Product listing content, including photos and descriptions of items you list for swap or giveaway
- Messages exchanged with other users through the App
- Subscription and payment information processed through Apple In-App Purchase or Google Play Billing, depending on your device.
2.2 Information Collected Automatically
- Device information (device model, operating system version, unique device identifiers)
- IP address
- Precise device location (with your permission, used to show nearby swaps/giveaway)
- App usage and interaction data (screens viewed, features used, actions taken)
- Crash logs and performance diagnostics
- Push notification tokens
2.3 Information from Third-Party Services
If you sign in using Apple Sign In, we receive your name and email address (or a relay email address if you choose to hide your email) as authorised by you during the sign-in process. We do not store your Apple ID password.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your account
- To enable you to list products, browse listings, propose swaps, and complete exchanges
- To provide AI-powered features, including smart pricing suggestions and transaction matching
- To display nearby transaction opportunities based on your location
- To deliver personalised product recommendations based on your interests, activity, and wishlist
- To process and manage your subscription through Apple/Google In-App Purchase
- To distribute retail vouchers and coupons earned through your subscription plan
- To send push notifications about swap proposals, messages, and promotional offers
- To moderate user-generated content and enforce our community guidelines
- To analyse app usage patterns and improve the App's features and performance
- To detect, prevent, and address fraud, abuse, or technical issues
- To comply with legal obligations
4. AI Features and Data Processing
Revaliyo uses artificial intelligence services provided by OpenAI, Gemini & Anthropic (Claude) to power the following features:
- Item Identification: Photos you upload when creating a listing are sent to our AI providers to identify the item and suggest listing details.
- Smart Pricing: Product details you provide (category, condition, description) are sent to our AI providers to generate a suggested exchange value.
- Content Moderation: Listing text and photos may be processed by our AI providers to detect content that breaches our community guidelines.
These AI providers process your product listing data on our behalf and are bound by their respective data processing agreements. We do not send your personal identity information (name, email, phone number) to these AI providers; only product-related data necessary for the features described above is shared.
5. How We Share Your Information
We do not sell your personal information. We may share your information with the following categories of third parties:
- Other Users: Your profile name, profile photo, product listings, and approximate location are visible to other users of the App as necessary to facilitate swaps and giveaways.
- AI Service Providers: OpenAI and Anthropic receive product listing data to power AI features as described in Section 4.
- Analytics and Crash Reporting: Firebase Analytics and Firebase Crashlytics (provided by Google) receive app usage data, crash logs, and device information to help us improve the App.
- Push Notification Services: Firebase Cloud Messaging (provided by Google) processes push notification tokens to deliver notifications to your device.
- Email Delivery: Mailgun processes your email address to deliver transactional emails such as verification codes and password resets.
- SMS Delivery: Twilio processes your phone number to deliver SMS verification codes.
- Payment Processing: Stripe processes payment information for subscriptions purchased outside the Apple App Store or Google Play. We do not store your full card details.
- Address Lookup: postcodes.io receives the postcode you enter to look up address and location data. No other personal data is shared with this service.
- Telemetry and Diagnostics: Logzai receives application logs and performance telemetry to help us monitor and improve the service.
- Retail Voucher Partners: We may share limited information (such as a user identifier) with retail partners to facilitate the delivery of vouchers and coupons you have earned. We will not share your full name, email, or phone number with these partners without your explicit consent.
- Apple: Subscription and payment data is processed by Apple through the App Store and In-App Purchase system. We do not have access to your full payment details.
- Google: Subscription and payment information processed through Google Play Billing. We don't store or process payment details directly.
- Legal and Regulatory: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
6. Data Storage and Security
Your data is stored on servers located in Europe. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), access controls, and regular security reviews.
However, no method of electronic storage or transmission over the internet is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
7. Data Retention
We retain personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Typically, user account and transaction data are retained for up to three (3) years after account inactivity or closure, unless a longer period is required by law or legitimate business need. After this period, data will be securely deleted or anonymised.
You can delete your account at any time directly in the App (Profile → Delete Account). Deletion is immediate and irreversible: your personal information is removed, your listings are taken down, and any in-progress swaps or giveaways are withdrawn. Certain records may be retained where required for legal, fraud-prevention, or financial purposes, as described in our Account & Data Deletion page.
8. Your Rights
Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
- Right to Erasure: You may delete your account directly in the App (Profile → Delete Account) or request that we delete your personal data, subject to certain legal exceptions.
- Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object: You may object to the processing of your personal data for certain purposes, including direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
To exercise any of these rights, please contact us at support@revaliyo.com. We will respond to your request within one month, as required by law.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Children's Privacy
The App is intended for users aged 13 and above. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@revaliyo.com.
10. Location Data
The App collects your precise device location to show you swap and giveaway opportunities near you. Location access is requested through your device's permission system and can be disabled at any time through your device settings. Disabling location access may limit certain features of the App, such as the ability to view nearby listings.
We do not share your precise location with other users. Only your approximate location (city or neighbourhood level) is displayed on your listings.
11. Push Notifications
We use Cloud Messaging to send you push notifications about swap proposals, messages from other users, and promotional updates. You can manage or disable push notifications at any time through your device settings.
12. Third-Party Links
The App may contain links to third-party websites or services, including retail voucher partners. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the App.
13. International Data Transfers
Your data is primarily stored in Europe. However, some of our service providers (such as Google for Firebase services, OpenAI, and Anthropic) may process data outside the UK and the European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authorities, to protect your personal data.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy within the App and updating the "Last Updated" date at the top of this page. Your continued use of the App after such changes constitutes your acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Baryonminds Ltd, 13 Teeswater Way, Whitehouse, Milton Keynes MK8 1BF, United Kingdom
Email: support@revaliyo.com