Privacy Policy

Last updated: September 16, 2026

At Revva, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our motorcycle tracking application ("Revva", "the App", or "the Service"), available on iOS (App Store) and Android (Google Play).

Who Is Responsible for Your Data

The data controller for the personal data described in this policy is:

  • Entity: HAPPYSOLVERS SAS, which operates Revva
  • Legal form and registration: société par actions simplifiée (SAS) with share capital of €2,000, registered in France under SIREN 952 867 844, R.C.S. Lyon. Intra-EU VAT number FR61952867844
  • Registered address: 8 chemin des Villas, 69340 Francheville, France
  • Contact for privacy matters: privacy@revva.app
  • Data protection officer: we have not appointed one, as we are not required to under Article 37 of the GDPR. Privacy requests go to privacy@revva.app.

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with your national supervisory authority. In France this is the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, 75007 Paris, www.cnil.fr. You may also complain to the authority in the country where you live or work.

Legal Bases for Processing

Under Article 6 of the GDPR we process your personal data on the following bases. Where processing relies on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

What we do Data involved Legal basis
Create and operate your account, authenticate you Account information Performance of a contract (Art. 6(1)(b))
Record rides, calculate metrics, sync across devices Location, ride metrics, sensor data Performance of a contract (Art. 6(1)(b))
Social features: following, likes, comments, communities, private messages Social and community data, messages Performance of a contract (Art. 6(1)(b))
Suggest nearby riders and communities Optional city and country Performance of a contract (Art. 6(1)(b))
Find friends from your contacts Hashed contact identifiers Your consent (Art. 6(1)(a)), granted through the device permission
Product analytics and session replay App interaction events, device identifiers, user ID Your consent (Art. 6(1)(a)). Off by default; enable or disable it under Settings, Privacy
Crash and error reporting Error logs, diagnostics Our legitimate interest in keeping the Service working and secure (Art. 6(1)(f))
Service notifications about your account and activity Push token, notification preferences Performance of a contract (Art. 6(1)(b))
Product news and re-engagement emails Email address Your consent, or our legitimate interest in contacting existing users about similar features (Art. 6(1)(f)). You can opt out at any time
Prevent fraud and abuse, keep the Service secure Technical and account data Our legitimate interest in protecting the Service and its users (Art. 6(1)(f))
Meet legal obligations and respond to lawful requests As required Compliance with a legal obligation (Art. 6(1)(c))

Providing account information is necessary to enter into the contract with us: without it we cannot create an account for you. Everything marked optional above can be withheld without losing access to the Service, though the related feature will not work.

We do not carry out automated decision-making producing legal or similarly significant effects about you, and we do not profile you for advertising.

Information We Collect

Account Information

  • Email address (required for authentication)
  • Name and username (if provided)
  • Phone number (optional, for account verification)
  • Profile picture (optional)
  • City and country location (optional, for local recommendations)
  • Postal address or meeting-point address you enter for rides and events (optional)
  • Account creation and last login timestamps
  • Verified account status

Location Data

  • GPS coordinates (latitude, longitude, altitude)
  • Timestamps associated with location points
  • Speed, bearing, and accuracy measurements
  • Start and end locations of rides

Ride Metrics

  • Distance traveled
  • Duration and moving time
  • Average and maximum speed
  • Elevation gain and loss
  • Motorcycle-specific metrics (lean angles, corner counts)

Sensor Data

  • Accelerometer data (x, y, z axes)
  • Gyroscope data (x, y, z axes)
  • Calculated lean angles and corner detection data

Social and Community Data

  • Follow relationships (who you follow and who follows you)
  • Likes and comments on rides
  • Community/club memberships and roles
  • Community posts, polls, and poll votes
  • Images uploaded to rides, profiles, and communities

Messages and Communications

  • Content of private (direct) messages you send to other members
  • In-app messages, ride discussions, and comments you post
  • Read and delivery status, and timestamps associated with messages
  • We process this content only to deliver the messaging and community features; we do not use the content of your private messages for advertising

Files and Documents (with your permission)

  • GPX track files you import or attach when creating or joining rides and events
  • Files are used only to display and share the corresponding route within the App

Contacts Data (with your permission)

  • Hashed email addresses and phone numbers from your contacts (used only to find friends on Revva)
  • We do not store your contacts' names or other information

Push Notifications

  • Device push notification tokens (Expo Push Token)
  • Notification preferences
  • Device identifiers for multi-device support

Camera and Photos

  • Photos taken with your camera (for profile pictures, ride photos, and community posts)
  • Images selected from your photo library
  • We only access your camera when you explicitly choose to take a photo within the app

Device Information

  • Device model and operating system
  • App version
  • Device identifiers
  • Network information (for synchronization)

Technical Data

  • Error logs and crash reports (via Sentry)
  • Performance metrics and diagnostics
  • Session replay data (anonymized recordings of app interactions to diagnose issues)
  • Product analytics events: in-app interactions, screens viewed, and feature usage (via Mixpanel), associated with your user ID and device identifiers
  • Authentication tokens and session data
  • App update information (for over-the-air updates)

How We Use Your Information

We use the information we collect to:

  • Provide the Service: Record and store your rides, calculate metrics, and synchronize data across devices
  • Social Features: Enable you to follow other users, like and comment on rides, and participate in communities
  • Local Recommendations: Suggest nearby riders and communities based on your city location
  • Find Friends: Match your hashed contacts with existing users to help you connect with friends
  • Push Notifications: Send you alerts about new followers, likes, comments, and other interactions
  • Improve the App: Analyze usage patterns (via Mixpanel and Sentry) to enhance features and fix bugs
  • Ensure Security: Detect and prevent fraudulent activity, protect against security threats
  • Communicate with You: Send authentication codes, service updates, and important notices
  • Marketing and Re-engagement: Send product news, tips, and re-engagement messages, and measure the effectiveness of our own communications. We do not use third-party advertising networks and do not show ads in the App. You can opt out of marketing communications at any time
  • Comply with Legal Obligations: Respond to legal requests and enforce our Terms of Service

Data Storage and Security

Local Storage

  • Ride data is stored locally on your device using SQLite
  • Location data is buffered locally before synchronization
  • App preferences and feature flags stored locally
  • Authentication tokens stored securely on device
  • You maintain full control over local data

Cloud Storage

  • Your ride data is synchronized to secure cloud servers
  • Data is encrypted in transit using HTTPS/TLS
  • We use industry-standard security measures to protect stored data
  • Data is stored in databases with access controls and regular backups

Data Retention

We keep personal data only as long as it is needed for the purpose it was collected for:

Data How long we keep it
Account information, profile, rides, ride metrics and sensor data For as long as your account exists
Social content: posts, comments, likes, community membership For as long as your account exists
Private messages For as long as your account exists. Deleting your account removes your copy; a message you sent remains visible to its recipient
Everything above, after you delete your account Erased within 30 days, except where law requires us to keep it longer
Product analytics events 2 years, after which our analytics provider deletes them automatically
Session replay recordings 30 days
Crash and error reports 90 days
Server and access logs 30 days
Records we must keep by law (for example accounting) For the period the applicable law requires

Backups are rotated, so data erased from the live Service can persist in backups for a short period before being overwritten.

Data Sharing and Disclosure

We do not sell your personal data or ride information.

We may share your data only in the following circumstances:

  • Service Providers: With trusted third-party service providers who help us operate the Service (e.g., cloud hosting, email delivery, analytics, crash reporting). These providers are bound by confidentiality agreements and may only process data on our behalf.
  • Analytics and Diagnostics Partners: We share technical and usage data — crash logs, diagnostics and other app-performance data, device or other identifiers, app-interaction events, and your user ID — with our analytics and crash-reporting providers (Mixpanel, Sentry) to measure performance, improve the App, prevent fraud, and support our own product communications.
  • Legal Requirements: When required by law, court order, or government request
  • Safety and Security: To protect our rights, your safety, or the safety of others
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity

This corresponds to the "Data shared" disclosures in our Google Play Data Safety section. We do not sell your personal data and we do not share your data with third-party advertising networks.

Third-Party Services

We use the providers below. Those that handle personal data on our behalf act as processors under a data processing agreement.

Provider What it does for us Where it processes
Supabase Hosts our database European Union (Paris region)
Cloudflare Application hosting, content delivery, file storage, some email delivery Global edge network, EU and outside
Sentry Crash and error reporting, and session replay when you enable it United States
Mixpanel Product analytics, only when you enable it European Union (EU endpoint)
Resend Email delivery EU and United States
Expo Push notification delivery and over-the-air app updates United States
Axiom Server and application logging EU and United States
Better Auth Authentication, self-hosted by us With our own infrastructure
Apple Sign in with Apple, push delivery on iOS, Apple Maps Apple infrastructure
Google Sign in with Google, Google Play distribution, Google Maps and Places on Android Google infrastructure
MapTiler / MapLibre Map display EU
Photon (Komoot) Address and place lookup EU

Each has its own privacy policy, and we encourage you to read them. We do not share your data with advertising networks, and we do not sell it.

Your Rights and Choices

You have the following rights regarding your personal data:

Access and Download

  • View all your ride data within the App
  • Request a copy of your data in a machine-readable format

Correction and Deletion

  • Correct inaccurate account information
  • Delete individual rides
  • Delete your entire account and all associated data

Location Tracking Control

  • Start and stop location tracking at any time
  • Disable background location tracking in your device settings
  • Note: Some features may not work without location services enabled

Notification Control

  • Enable or disable push notifications at any time
  • Manage notification preferences in the App settings
  • Revoke notification permissions through your device settings

Contacts Access Control

  • Grant or deny access to your contacts
  • Contact data is only used to find friends and is never stored in plain text
  • You can skip the contact sync feature entirely

Account Management

  • Modify your account settings
  • Change your email address
  • Update or remove your profile picture and location
  • Request account deletion

To exercise these rights, contact us at privacy@revva.app or use the in-app settings.

Permissions

Camera Permission

  • Camera: Used to take photos for your profile picture, ride photos, and community posts
  • Photos are only captured when you explicitly tap the camera button
  • You can deny camera permission and still use the app by selecting photos from your library instead
  • Camera permission can be revoked at any time through your device settings

Photo Library Permission

  • Photos: Used to select existing photos from your device for profile pictures, ride photos, and community posts
  • We only access photos you explicitly select
  • Photo library permission can be revoked at any time through your device settings

Contacts Permission

  • Contacts: Used to find friends who are already on Revva
  • Contact information is hashed before being sent to our servers
  • We never store your contacts' names or other personal details
  • Contacts permission is optional and can be denied or revoked at any time

Files and Documents Permission

  • Files: Used to let you pick a GPX track file from your device to import or attach to a ride or event
  • We only access the specific file you select; we do not browse or read other files on your device
  • This permission is optional — you can use the App without importing GPX files

Location Data and Permissions

Revva uses location data in two ways:

Ride Tracking (GPS)

  • Location While Using App: Required to track rides
  • Location Always/Background: Required for background tracking during active rides
  • Foreground Service (Android): Used to maintain reliable location tracking while the app is in use
  • Motion & Fitness: Used for accelerometer/gyroscope sensor data (lean angles, corner detection)

Profile Location (City)

  • Your city location is optional and stored separately from ride data
  • Used to recommend nearby riders and communities
  • You can add, update, or remove your city at any time in settings

You can revoke location permissions at any time through your device settings. Note that certain features will not be available if permissions are disabled.

Children and Age Limits

Revva is not intended for children. You must be at least 16 years old to create an account. Some countries allow a lower minimum age for consenting to online services, but we require 16 everywhere. The sign-in screen states this requirement, and by continuing you confirm that you meet it. We record the date on which you accepted, and the version of the Terms you accepted.

If you are under 18, you may use Revva only with the agreement of a parent or legal guardian, who accepts these terms on your behalf.

If we learn that we hold personal data about a child below the applicable age without the required authorisation, we delete it. If you believe that has happened, write to privacy@revva.app and we will act promptly.

We maintain published Child Safety Standards covering our commitment to preventing child sexual abuse and exploitation (CSAE) on our platform. Any child sexual abuse material (CSAM) found on the Service is removed immediately and reported to the National Center for Missing & Exploited Children (NCMEC) and to the relevant authorities.

International Data Transfers

Most of your data stays in the European Union. Our database is hosted in the EU (Paris region) and our product analytics provider is configured to use its EU endpoint, so those events are not routed to the United States.

Some of our providers process data outside the European Economic Area, notably our crash and error reporting provider, whose ingestion endpoint is in the United States. Where that happens, the transfer is covered by one of the safeguards Chapter V of the GDPR requires, which for our providers means the European Commission's Standard Contractual Clauses, combined with the technical and organisational measures set out in the data processing agreement we have with each of them. You can ask us for a copy of the relevant safeguards by writing to privacy@revva.app.

We do not rely on your consent as the basis for these transfers.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

  • Posting the updated policy in the App
  • Sending an email to your registered email address
  • Displaying a notice when you next open the App

The "Last updated" date at the top indicates when changes were made. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information we collect
  • The right to delete personal information
  • The right to opt-out of the sale of personal information (we do not sell your data)

European Privacy Rights (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to:

  • access the personal data we hold about you, and obtain a copy
  • have inaccurate data corrected
  • have your data erased ("right to be forgotten")
  • restrict how we process your data
  • receive your data in a portable, machine-readable format
  • object to processing based on our legitimate interests, including profiling
  • withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of what we did before you withdrew it
  • lodge a complaint with a supervisory authority. In France this is the CNIL (www.cnil.fr); you may also complain to the authority where you live or work

To exercise any of these, write to privacy@revva.app. We respond within one month, which we may extend by two further months for complex requests, telling you why. Exercising your rights is free unless a request is manifestly unfounded or excessive.

You can act on several of these directly in the app: download or delete your account under Settings, and turn product analytics on or off under Settings, Privacy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within 30 days.