LEGAL

Privacy Policy

Effective and last updated October 27, 2026

This policy explains how Revlo handles personal information when you visit revlo.money, use the Revlo iPhone app, create an account, use your financial workspace, link an eligible account, purchase Revlo Plus, or contact support.

1. Scope

In this policy, “Revlo,” “we,” and “us” refer to the operator of the Revlo website at revlo.money and the Revlo iPhone app (together, the “service”). This policy covers Revlo’s handling of your information across both. Banks, payment processors, and other providers also have their own responsibilities and privacy notices. Our Terms of Service govern use of the service; our Financial Disclosures explain the limits of its calculations and connections.

2. Information we collect

• Account information: the name and email you enter, a unique account identifier, email-verification status, and account and authentication activity. Revlo runs authentication using Better Auth within its own service. Cloudflare D1 stores salted password hashes, verification records and revocable sessions; plaintext passwords are not saved.
• Information you enter: account names and balances; transaction descriptions, categories, dates and amounts; budgets; recurring-payment schedules and your decisions about them (for example, that a charge isn’t a subscription or that you canceled it); investment quantities, entered prices and cost basis; assets, debts and financial goals. These records can reveal sensitive details about your finances and activities. Do not enter information about other people unless you have authority to do so.
• Linked-account information: if you choose Stripe Financial Connections, we receive permitted information from Stripe and participating institutions, including connection identifiers, institution and account labels, account type, available account details such as the last four digits, balances, and posted transaction information. Revlo currently requests balance and transaction permissions. While you have Revlo Plus, Revlo also reads newly posted transactions from your linked accounts about once a day without you opening the app, so your list and any alerts are current; this does not request a new balance. Availability varies by institution. Bank login credentials are entered in the bank or connection provider’s flow, not stored as Revlo financial records.
• Subscription and billing information: when you use Stripe Checkout or its billing portal, Stripe collects payment and billing details. Revlo receives customer and subscription identifiers, subscription status and billing-period information to administer access. Revlo does not provide its own form for full payment-card numbers or security codes and does not store those numbers in its financial-record database. For the 7-day money-back guarantee, Revlo notes the date of your first payment and whether the guarantee was used. If a payment is refunded under the guarantee or disputed, Revlo keeps a one-way hash of the identifier Stripe gives that card (never the card number), so the guarantee can’t be used twice with the same card.
• Technical information: our hosting and service providers process request and security information such as IP address, request time, requested page, browser/device information, response status and errors. We use this information for delivery, troubleshooting and abuse prevention.
• Alert information: if you turn on alerts in the Revlo iPhone app, we store that phone’s push notification token and time zone, the alerts you chose, and a record of which alerts were sent so none is repeated.
• Support communications: your email address, the content you send, and information needed to investigate or respond. Share only what is needed for your request.

The homepage and the true cost calculator don’t need an account. The calculator runs in your browser; the numbers you enter there are not sent to Revlo. Automatic categories, budgets and dashboard summaries use application rules and calculations. Revlo AI is described in section 3.

3. How we use information

We use information to authenticate accounts; save and display your records; calculate budgets, reports, investment totals and net worth; retrieve data you authorize from linked accounts; process and manage Revlo Plus subscriptions; send verification, recovery and service messages; answer requests; maintain and secure the service; investigate misuse; and meet applicable legal obligations. We do not use your financial records to make lending, employment, insurance or investment decisions about you.

Revlo AI. To recognize unfamiliar charges, Revlo checks your saved outgoing transactions and sends OpenAI’s API a batch of cleaned merchant descriptions, rounded dollar amounts, charge counts and temporary batch identifiers. If you give a merchant a name of your own, that name is sent in place of its description. We remove email-like text, phone numbers, masked account tails, long number sequences and the name on your Revlo profile from descriptions, and we do not send payments made to a person through services such as Zelle, Venmo or Cash App. Merchant text may still reveal sensitive information; this processing is not represented as anonymous. We do not attach your profile name, account email, account labels, account numbers, balances or transaction dates. Transfers and card payments are excluded. The model suggests whether each merchant is a subscription or bill, its name, a subscription bucket and a billing cadence, and suggests a spending category for budgeting and reports. Spending suggestions fill uncategorized charges; disagreements with built-in labels are offered for review. Your explicit category choices and remembered merchant rules take priority. Results are cached privately for your account for up to 120 days and are not reused by other users. A check runs at most once every 24 hours: when you choose Check transactions, or by itself after Revlo’s daily look at your account brings in new bank transactions. Interrupted checks can resume within a short window. Opening the web workspace, syncing bank data yourself and saving transactions use cached labels and application rules without starting another check. Likely subscription matches appear in the list; you can dismiss a wrong match or confirm a recurring record to track. Known services and repeating charges are also matched without AI. Revlo requests that responses not be saved as retrievable OpenAI response objects; this does not promise zero provider retention.

We do not sell personal information or share it for cross-context behavioral advertising. The current website does not implement advertising pixels or targeted-ad profiles. Service providers may process information for their own permitted purposes, including fraud prevention, as explained in their notices.

4. Providers and disclosures

• Cloudflare: hosts the website and API, stores authentication records, financial records and provider identifiers in D1, and processes delivery, security and operational data. Cloudflare privacy policy.
• Resend: delivers account verification, password recovery and email-change messages. It receives the recipient address and message content, including the limited-life account link. Resend privacy policy.
• Supabase (legacy authentication): account information may remain during the migration and retirement of the former authentication service. New authentication uses Revlo’s Better Auth service. Supabase privacy policy.
• Stripe: provides optional financial-account connections, Checkout and billing management. We send your email and a customer association to Stripe when you use these services, and exchange connection or subscription information as needed. Stripe and participating institutions process the information you provide within their flows. Stripe privacy policy.
• OpenAI: provides the API behind Revlo AI. It receives merchant names from bank statements and rounded amounts, as described in section 3, not your identity or account details, and processes them under its API terms. Revlo turns off OpenAI’s response storage for these requests. OpenAI privacy policy.
• Expo and Apple: deliver notifications to the Revlo iPhone app when you have turned alerts on. They receive that phone’s push token and the text of each alert, which names a merchant and includes an amount unless you turn off Show amounts in Settings.

We share personal information with these providers only as needed to operate the service. Service providers that process personal information for Revlo are bound by their terms and data-protection commitments to protect it with the same or equal protection as described in this Privacy Policy, and may not use it for their own advertising.

Information may also be disclosed to service providers assisting with support and email delivery; where reasonably necessary to comply with law, valid legal process, or protect rights and security; and in a business transfer, subject to applicable protections and notice requirements. Your workspace is not a public profile, and the current app does not offer sharing with other Revlo users. Providers and authorized support personnel may process information where needed to operate the service; “private workspace” does not mean that no service provider can access it.

5. Cookies and device storage

Revlo uses cookies to keep you signed in and to renew your session. The true cost calculator remembers the numbers you last entered in your browser’s local storage, on your device only. The public homepage stores nothing on your device and doesn’t set Revlo cookies. Stripe and Cloudflare may use cookies or similar technologies in their own flows for operation, fraud prevention and security. Blocking cookies can prevent login or checkout. Clearing local preferences does not delete server-held financial records or cancel a subscription.

The Revlo iPhone app keeps your sign-in session and a small number of preferences, such as whether you dismissed the Getting started checklist and whether alerts are on for that phone, in the app’s storage on your device. Signing out removes the session, and deleting the app removes the rest. Your financial records are stored with the service, not only on the device. The app does not use advertising identifiers, third-party analytics, or tracking tools, and does not track you across other companies’ apps or websites.

Revlo does not change its necessary service processing in response to the older Do Not Track browser signal. We do not currently conduct personal-data sales or targeted-ad sharing for an opt-out preference signal to stop. We will honor applicable legally required privacy choices if those practices change.

6. Your controls and requests

• Records and export: you can edit permitted records and export the transaction/report data supported by the CSV controls while your workspace is accessible. Those CSV files are not a complete account-data export. For access, correction or a broader copy—including after paid access ends—contact us; you do not need to buy a subscription to submit a privacy request. You can also delete all transactions at once in Settings; bank transactions from before that day are not imported again.
• Account settings: you can request an email change or a password reset from Settings. Complete the verification steps in the messages you receive; provider settings may require confirmation at both email addresses.
• Bank access: use an available Remove/Disconnect control or contact us to request disconnection, including if your subscription has ended. You may also have controls with Stripe or your institution. Successful disconnection stops future access through that connection. When you disconnect, you choose whether Revlo keeps or deletes the transactions it imported; information retained by Stripe or your bank is not affected.
• Billing and deletion: manage or cancel Revlo Plus using the Stripe billing portal reached from Settings → Plan. Account deletion is available on the web in Settings → Delete and in the iPhone app in Settings → Delete account, and on the subscription screen of either if you haven’t subscribed. You confirm it with your password and by typing DELETE. See our Support page for step-by-step instructions. Cancellation, disconnection, and deletion are different actions. When Revlo Plus ends, Revlo stops requesting new transactions from your linked banks. Review the result of each action and contact support if it fails or cannot be completed.
• Alerts: choose which alerts you get, or turn them off for a phone, in Settings → Alerts. Signing out of the iPhone app stops alerts to that phone, and deleting your account removes its token and alert history.

7. Retention and deletion

Financial records are generally retained while your account is open, unless you delete permitted records or request deletion. Canceling Plus or disconnecting a bank does not automatically erase existing records. Account deletion disconnects your linked banks, removes your active workspace records and private AI merchant labels, and removes the active authentication account, credentials and sessions in the same database operation. Legacy provider records and backups may remain temporarily during retirement of the former service; contact support for any outstanding deletion request. Minimal AI usage counters associated with the account may be retained for abuse prevention so deleting and recreating a workspace does not reset its current allowance; those counters do not contain merchant descriptions or financial amounts. The card hash kept for the money-back guarantee is kept for two years after the refund or dispute, including after account deletion, which removes its link to your account; it can’t be turned back into a card number.

Information may remain in provider backups, security logs, support correspondence, or payment/tax records for legitimate security, recovery, dispute-resolution or legal purposes. Retention depends on the information’s purpose, applicable obligations, and provider backup cycles. We do not promise that every copy disappears immediately or that Stripe or your bank will erase records they are independently required to retain. We will assess deletion requests under applicable law and explain material exceptions.

8. Security and international processing

Revlo uses HTTPS, server-validated authentication, access controls tying financial records to your account, and restricted storage of private service credentials. No online service is guaranteed secure or uninterrupted. Use a unique password, protect your email account and devices, and contact us promptly about suspected unauthorized access. Revlo is not represented as independently security-certified or compliant with a specific regulatory framework merely because a provider has certifications.

Cloudflare, Resend, Stripe, the legacy authentication provider and their service providers operate across jurisdictions. Depending on provider locations and configuration, information may be processed in the United States and other countries with different privacy laws. We do not promise US-only storage. Applicable transfer requirements must be met; using Revlo is not a waiver of your privacy rights.

9. Age restriction

Revlo is intended only for people at least 18 years old who can legally enter a contract. We do not knowingly permit accounts for minors. If you believe a minor has supplied personal information, contact us so we can investigate and take appropriate steps.

10. Privacy rights

Depending on where you live and which laws apply to Revlo, you may have rights to access, correct, delete or receive a copy of personal information; withdraw consent; object to or restrict certain processing; and appeal a denied request or complain to a regulator. Not every privacy statute applies to every business or request. Nothing here limits rights that cannot lawfully be limited.

Send requests to the contact address below. We may reasonably verify your identity and an authorized agent’s authority without asking for your password. We will respond within the period required by applicable law, explain relevant exceptions or verification needs, and will not unlawfully discriminate because you exercise a privacy right. To appeal a decision where available, reply to our response or email us with the subject “Privacy appeal.”

11. Changes

We will update the effective date when this policy changes. For material changes, we will provide an appropriate notice, such as a website notice or an account email, and obtain consent where required before applying a new use of your information. Review this policy when you use a new feature.

Contact

For questions, privacy requests, billing help, or concerns about these documents, email support@revlo.money. Do not send passwords, full card numbers, or bank login credentials.