Privacy Policy

1. Introduction

Welcome to ReviseAI ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at revisy.org (the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

We collect information you provide directly to us when you:

• Create an account via Manus OAuth (name, email address, unique identifier)
• Create revision topics (topic titles and note content you paste or upload)
• Upload images or PDF files for text extraction
• Submit essays for marking (essay text and mark scheme content)
• Interact with the spaced repetition system (flashcard review ratings)
• Subscribe to push notifications (device push subscription endpoint and keys)
• Make payments via Stripe (billing details processed directly by Stripe)

We also automatically collect certain technical information including IP address, browser type, device type, pages visited, and timestamps when you use the Service. If you enable push notifications, we store your browser's push subscription endpoint and encryption keys to deliver notifications.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your notes through AI models to generate flashcards, summaries, audio lessons, quizzes, and podcasts
• Mark essays using AI and return feedback to you
• Save your revision materials so you can access them again
• Send push notifications you have opted in to (streak reminders, review alerts, friend activity)
• Process subscription payments via Stripe
• Improve and personalise your experience
• Monitor and analyse usage patterns and trends
• Detect and prevent fraudulent or abusive activity
• Comply with legal obligations

4. AI Processing of Your Content

When you submit notes, essays, or images, that content is transmitted to third-party AI model providers (including large language model and text-to-speech APIs) solely to generate the requested revision materials. We do not sell your content to third parties. AI providers process your content in accordance with their own privacy policies and data processing agreements. Generated outputs (flashcards, summaries, audio files) are stored in our database and cloud storage so you can access them without regenerating each time.

5. Push Notifications

If you choose to enable push notifications, we store a push subscription record (endpoint URL and encryption keys) associated with your account. This data is used solely to deliver notifications you have opted in to. You can withdraw consent and delete your push subscription at any time from your Profile page (Settings → Notifications → Disable notifications). Disabling notifications deletes your push subscription record from our servers immediately.

6. Advertising

We display advertisements served by Google AdSense on the Service for users on the free tier. Google AdSense may use cookies and similar technologies to serve personalised advertisements based on your browsing history. You can opt out of personalised advertising by visiting Google Ad Settings or by upgrading to ReviseAI Pro, which is completely ad-free. For more information on how Google uses data, see Google's privacy policy.

7. Data Retention

We retain your account information and revision materials for as long as your account is active. You may delete individual topics or essay submissions at any time through the application interface. Push notification subscriptions are deleted immediately when you disable notifications. If you wish to delete your entire account and all associated data, please submit a request at: [email protected] with the subject line "Data Deletion Request". We will process your request within 30 days.

8. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service providers — cloud hosting, database, storage, AI API, and payment providers who assist in operating the Service under strict confidentiality obligations
• Advertising partners — Google AdSense may receive anonymised usage data to serve contextual and personalised advertisements (free tier only)
• Legal requirements — if required by law, court order, or governmental authority
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice provided to you

When you use the "Share" feature to generate a shareable link for a topic, anyone with that link can view the topic's flashcards and summary without logging in. You can revoke sharing at any time by deleting the topic.

9. Cookies and Tracking

We use the following types of cookies and similar technologies:

• Strictly necessary cookies — a single session cookie to keep you logged in. This is required for the Service to function.
• Advertising cookies — Google AdSense sets cookies to serve and measure advertisements on the free tier. These may track your activity across other websites. You can opt out via Google Ad Settings or by upgrading to Pro.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in.

10. Security

We implement industry-standard security measures including HTTPS encryption in transit, secure HTTP-only session cookies, and access controls on our database and storage systems. Push notification encryption keys are stored securely and used only to encrypt notification payloads. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy (COPPA)

The Service is intended for users aged 13 and over. We do not knowingly collect personal information from children under the age of 13. If you are under 13, please do not use the Service or provide any personal information. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at [email protected] and we will take steps to delete such information promptly.

Users aged 13–17 should use the Service only with parental consent. We recommend that parents review this Privacy Policy with their children before allowing them to use the Service.

12. Your Rights (GDPR & UK GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR / UK GDPR:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests, including profiling
• Right to withdraw consent — withdraw consent at any time (e.g. disable push notifications)

To exercise any of these rights, please email [email protected] with the subject line "Data Rights Request". We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in the UK: the ICO at ico.org.uk).

13. Data Deletion Requests

To request deletion of your account and all associated data (including revision topics, flashcards, essays, push subscriptions, and payment records), please email [email protected] with:

• Subject line: "Data Deletion Request"
• The email address associated with your ReviseAI account
• Your ReviseAI user ID (visible on your Profile page)

We will confirm receipt within 5 business days and complete the deletion within 30 days. Note that some data may be retained for a limited period where required by law (e.g. financial records).

14. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our cloud infrastructure and AI providers operate. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection law (e.g. Standard Contractual Clauses for EEA/UK transfers).

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification via the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
ReviseAI
Email: [email protected]