Revv Social App Privacy Policy

1. Data We Collect and Why

Revv Social is a social network for automotive enthusiasts. The core of the App is sharing content (Builds, posts, meets), interacting with others, and communicating. To make these features work, we collect the following categories of data.

1.1 Camera, Gallery, and Media (Photos / Videos)

You may grant access to your camera or photo gallery to add a profile picture, create a post or vehicle Build, or send images in messages. Publicly posted media appears on your profile and in feeds. Media sent in private or group chats is stored on our secure infrastructure to make it accessible to your intended recipients. We use your media solely to display and deliver it within the App.

1.2 Location Information

With your permission, we use location data to show you nearby automotive events (Meets) and content from enthusiasts near you. You control location sharing through your device settings and in-app privacy controls. Profile location is stored at a city level. Real-time location, when enabled, is used only to personalize your feed and is not stored permanently or shared with other users.

1.3 Account and Personal Information

During registration we collect basic information to create your profile, such as your email address, name or username. We also collect the content you choose to publish, including chat messages, post descriptions, and vehicle specifications.

1.4 Biometric Authentication (Face ID / Fingerprint)

The App may offer biometric authentication to secure access. This is processed entirely and securely by your device's operating system. We do not collect, store, access, or transmit your biometric data. It never reaches our servers.

1.5 Push Notifications and Device Identifiers

To deliver real-time alerts about messages, interactions, and events, the App generates a secure device token. This token is used to route notifications to your device and is not used to identify you personally to other users.

1.6 Payment Information

If you subscribe to a paid plan, payment is processed by the Apple App Store or Google Play Store. We do not collect or store your full payment card details. We receive limited transaction information necessary to manage your subscription and comply with tax and accounting obligations.

2. How We Use Your Data

We use the data we collect to:

• Operate, maintain, and provide the features of the App.
• Create and manage your account and profile.
• Deliver content discovery, including location-based features.
• Enable communication between users.
• Send service-related and, where you have consented, promotional notifications.
• Maintain the safety and integrity of the platform, including moderation and fraud prevention.
• Comply with our legal and regulatory obligations.

We do not sell or rent your personal data to third parties.

3. Data Sharing and Third-Party Services

For Revv Social's infrastructure to function, we share limited operational data with industry-standard third-party service providers, each bound by their own security and privacy obligations. These providers currently include, but are not limited to:

• Supabase: Secure database and authentication.
• Firebase (Google Cloud): Crash analytics and push notification delivery.
• Amazon Web Services (AWS): Secure hosting of media (profile pictures, vehicle photos, chat media).
• Mapbox: Map display within the App.
• Google APIs: Location and place data used for features such as meet location selection. Google's privacy policy applies to your use of these services.

We may add, replace, or remove service providers over time as our infrastructure evolves. In all cases, we share only the data necessary for these providers to perform their function, and we do not sell or rent your personal data.

Messages and media are encrypted in transit and at rest. Our systems are able to access content where necessary for moderation, safety, legal compliance, and the operation of the Service.

We may also disclose your information where required to comply with applicable law, respond to valid legal requests from law enforcement or government authorities, enforce our Terms of Service, or protect the rights, safety, and security of our users, the public, or Edena Labs.

4. Content, Safety, and Moderation

The safety of our community is paramount. By posting on Revv Social, you agree to abide by our Terms of Service.

If you believe content violates our rules, you can report a post, profile, or message, or block a user directly within the App. Our team reviews reports and may remove content or restrict accounts that violate our terms.

Revv Social maintains a strict zero-tolerance policy regarding the sexual exploitation of minors. Reports involving child safety are prioritized at the top of our moderation review queue. When we become aware of child sexual abuse material (CSAM), we act to remove it, report it to the relevant authorities, including the National Center for Missing and Exploited Children (NCMEC) and applicable Canadian law enforcement, and preserve the associated evidence in accordance with our legal obligations.

5. Data Retention and Deletion

You can delete your account at any time from within the App.

5.1 What Happens When You Delete Your Account

Upon deletion, your profile and content are removed from public access immediately. No other user will be able to view your profile, builds, posts, or messages.

Your personal data is then purged from our active systems within a minimum of 30 days and a maximum of 90 days, including removal from routine security backups.

5.2 Limited Exceptions

We retain certain limited categories of data beyond account deletion only where required or permitted by law, specifically:

• Data connected to an active moderation case, dispute, or legal hold, retained until the matter is resolved.
• Evidence of child sexual abuse material (CSAM), preserved and reported in accordance with our legal obligations.
• Financial and transaction records, retained as required by applicable tax and accounting laws.

Once the applicable legal or safety purpose has been served, this data is deleted. We do not retain personal data longer than necessary for the purposes described in this policy.

5.3 Your Right to Access and Deletion

You may contact us at any time to request access to, correction of, or deletion of your personal data, or to request an export of the data associated with your account.

6. Your Privacy Rights

Depending on where you live, you may have specific rights regarding your personal data.

6.1 Canada and Quebec

In accordance with Canadian federal privacy law and Quebec's Law 25, you have the right to access, correct, and request deletion of your personal information, to withdraw consent, and to be informed of how your data is used. Edena Labs maintains safeguards appropriate to the sensitivity of the data and will notify affected users and the relevant authorities of any confidentiality incident posing a risk of serious harm, as required by law.

6.2 United States

If you are a resident of California or another US state with applicable privacy legislation, you have the right to know what personal information we collect, to request its deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell your personal information. To exercise these rights, contact us using the details below.

6.3 European Union, United Kingdom, and Other Regions

If you are located in the European Union, the United Kingdom, or another region with comprehensive data protection legislation such as the General Data Protection Regulation (GDPR), you have additional rights regarding your personal data, including the right to access, correct, delete, restrict, or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

We process your personal data on the following legal bases: the performance of our contract with you (to provide the App and its features), your consent (for example, for location access or promotional communications), our legitimate interests (tels que le maintien de la sécurité, de la sûreté et de l'intégrité de la plateforme), and compliance with our legal obligations.

To exercise any of these rights, contact us using the details below. Where your data is transferred outside your home region, we take steps to ensure it remains protected in accordance with applicable law.

7. Children's Privacy

Revv Social is not intended for children under the age of 13. We do not knowingly collect personal data from anyone under 13. If we discover that a user is under 13, we will terminate the account and delete the associated data. If you believe a child under 13 has provided us with personal information, please contact us.

8. International Data Transfers

Edena Labs operates from Canada, and our service providers may store and process data on servers located in Canada, the United States, and other jurisdictions. By using the App, you understand that your data may be transferred to and processed in countries with different data protection laws than those of your home jurisdiction. We take steps to ensure your data is handled securely and in accordance with this policy wherever it is processed.

9. Data Security

We use technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and secure infrastructure provided by established service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach posing a risk of serious harm, we will notify affected users and the relevant authorities as required by applicable law.

10. Changes to This Policy

Revv Social is constantly evolving. As we add new features, we may update this policy. Any changes will be reflected by updating the "Last updated" date at the top of this document, and active users will be notified where required by applicable law.