This policy explains what information RevereOS collects, why, who else handles it, how long it is kept and the choices you have. It applies to the website at www.revereos.app, the RevereOS app and the emails we send about your account.
Effective date: 7 November 2026.
1. Who we are
RevereOS is operated by Ezekiel Chidiebere Osi, trading as RevereOS, based in Lagos, Nigeria ("RevereOS", "we", "us"). Our address for correspondence is 9 Nepa Line, Uyo, Akwa Ibom State, Nigeria. For the information described here, we are the data controller: we decide why and how it is processed.
To ask about this policy or your information, write to privacy@revereos.app.
2. What we collect
Information you give us
- Account details: your email address and a password. The password is handled by our authentication provider and stored only as a hash; we cannot see it. You can also add a display name and a profile photo, and the app records your time zone so that days begin and end at the right time.
- Your planning content: everything you put into RevereOS, such as planners, areas, goals, tasks, habits, routines, projects, notes, journal entries, events and the way you arrange them. Some of this can be personal, and you decide what to write.
- What you type into AI-assisted features: for example, a description of the planner you want, and the suggestions RevereOS returns.
- Messages to us: if you write to us, what you send and our reply.
Information created when you use RevereOS
- Subscription records: your plan, its status, renewal and grace dates, and the identifiers our payment provider gives your customer record and subscription. We do not receive or store your full card number.
- Purchase records: if you buy a one-time product such as the Planner Creation Kit, the product, the amount and currency, when you bought it, whether it was refunded and when, and the identifiers our payment provider gives the checkout, the payment and your customer record. We use them to give you access, handle refunds and keep financial records.
- AI usage records: for each AI request, the kind of request, the model used, its size in tokens, its cost, whether it succeeded and when. These records do not contain the text of your request.
- Acceptance of our terms: which version of the Terms of Service you accepted, when, and where (at sign-up or in the app), so that we can show what was agreed.
- Usage analytics: the pages you visit on our website and in the app, and a few named steps, such as opening the interactive example or viewing pricing. These are tied to a random identifier stored in your browser, not to your name or email. See section 9.
- Technical information: when you use the service, our hosting provider and our authentication provider receive your IP address, browser type and the time of the request, and keep short-lived logs of them.
- Usage limits: to stop abuse of features that can be used before signing in, we keep a daily count against a hashed form of your IP address, not the address itself: the address is combined with a secret key held on our servers and passed through a one-way function. Without that key, the address cannot practically be recovered from the stored value; with it, we could only check whether a given address matches. These records are not linked to your account.
- Notification subscriptions: if you allow browser notifications, the subscription details your browser gives us to deliver them.
We do not ask for, and ask you not to enter, sensitive information such as health, financial or government identity details. If you do put such information into your planning content, it is treated like the rest of your content.
3. Why we use it, and on what basis
Data protection law requires a lawful basis for each use. Ours are:
- To provide RevereOS to you (performance of our contract with you): creating and securing your account, storing and showing your planning content, running the features you use, including AI-assisted features you choose to run, and providing customer support.
- To take payment and manage your subscription (performance of contract, and our legal obligations for financial and tax records).
- To send account and service emails (performance of contract): confirming your email address, password resets, receipts and messages about your subscription or about changes to the service or this policy.
- To understand and improve the website and the app (your consent: analytics run only if you accept them): see section 9.
- To keep the service secure and prevent abuse (legitimate interest, and legal obligations): rate limits, logs and investigating misuse.
- To comply with the law (legal obligation): for example, keeping financial records and responding to lawful requests.
Where we rely on your consent, you can withdraw it at any time, and withdrawing it does not affect what was done before.
4. Your planning content
Your planning content is yours. We use it to provide the service to you: to store it, show it to you, back it up and, when you use an AI-assisted feature, to send the relevant part to our AI provider (section 5). We do not sell it, we do not use it for advertising, and our staff do not read it except where you ask us to (for example, for support), where it is needed to keep the service secure, or where the law requires it.
5. AI-assisted features
Some features use artificial intelligence to suggest a planner structure or other content. When you use one, the information needed for that request (for example, what you typed and the relevant parts of your planner) is sent to Anthropic, the provider of the Claude models, which processes it to produce the response.
- Anthropic's commercial terms state that it does not train its models on this data by default.
- Anthropic's published practice is to delete API inputs and outputs within 30 days. It can keep them longer where needed to enforce its usage policies or comply with the law.
- AI suggestions can be wrong or incomplete. Nothing an AI feature suggests is added to your planner unless you accept it.
- We keep a record of each AI request's cost and size (section 2), not its text. What you accept becomes part of your planning content.
The Planner Creation Kit is used with AI chat tools made by other companies, such as ChatGPT, Claude or Gemini, which you choose and use under your own account with them. We do not send them anything, and we do not see, receive or store your conversations with them; those companies' own privacy policies apply. The Kit's format check, which reads a reply you paste into it, runs entirely in your browser and sends nothing to us.
Earlier versions of RevereOS included an AI coach, Rev. If you used it, your goals, evening check-ins and recent chat messages were also sent to Anthropic to write Rev's replies and a private summary that helped Rev remember your progress. That summary is no longer updated automatically, and you can ask us to delete it (section 13). Where Rev is still available to you, the rules in this section apply.
6. Payments
Payments are handled by Stripe. When you subscribe or buy the Planner Creation Kit, you enter your payment details on Stripe's own checkout page. Stripe processes them and gives us back a customer identifier and, for a subscription, a subscription identifier and its status, or, for a one-time purchase, the checkout and payment identifiers and whether it was paid or refunded. We never receive your full card number. Stripe also uses payment information for its own purposes, such as preventing fraud and meeting its legal obligations, as described in its privacy policy.
7. Account security
Sign-in is provided by Supabase, our database and authentication provider. Passwords are stored as hashes. Password-reset and confirmation links are single-use and expire. Access to your content is restricted to your account by the database itself. No system is perfectly secure; if you think your account has been compromised, change your password and write to us.
8. Emails
We send account and service emails, including confirmation and password-reset emails, through Resend. When you create an account, your email address and sign-up date are also shared with Loops, our email platform, which keeps a contact record and sends service emails about your account. If your plan includes check-in emails, we may also send an occasional AI-written note about your progress; you can turn these off in Account. We do not currently send marketing emails: only service and transactional ones. If we introduce optional marketing emails later, we will ask for your consent where the law requires it, and every marketing email will let you unsubscribe.
9. Analytics and cookies
If you allow it, we use PostHog to understand how the website and the app are used. It records the pages you view, with the address stripped of anything after a "?" or "#", the type of browser and device, an approximate location derived from your IP address, and a few named steps on our public pages. It is linked to a random identifier that PostHog stores in a cookie and in your browser's local storage. We do not record your screen or sessions, we do not record what you type, and we do not send your name, email address or planning content to PostHog.
The cookies and similar storage we use:
- Strictly necessary: sign-in cookies set by our authentication provider, which keep you signed in, storage that keeps work in progress on your device (for example, an unsaved draft), and a record of your analytics choice. These are needed for the service to work.
- Analytics: PostHog's identifier, described above. PostHog is loaded, and this identifier set, only after you choose "Accept" in our analytics banner. If you choose "Reject", or make no choice, PostHog is not loaded at all. You can change or withdraw your choice at any time from "Privacy choices" at the bottom of our pages or in Account; withdrawing stops analytics and removes PostHog's cookie from your browser.
If your browser sends a "Do Not Track" signal, the named steps on our public pages are not sent.
10. Who else receives your information
We share information only with the service providers that run RevereOS for us, and only what each needs:
- Supabase (database, authentication and file storage): all account and planning data.
- Vercel (website and application hosting): requests to the service, including IP addresses, and short-lived logs.
- Stripe (payments): see section 6.
- Anthropic (AI): see section 5.
- PostHog (product analytics): see section 9.
- Resend and Loops (email): your email address and the content of the emails we send you.
We may also disclose information where the law requires it, to protect the rights, property or safety of our users or others, or as part of a sale or reorganisation of the business, in which case this policy continues to apply to it. We do not sell your personal information, and we do not share it for advertising.
11. International transfers
Our service providers process information in the United States and possibly other countries, which may not have the same data protection laws as yours. Our database, sign-in service and file storage are hosted by Supabase in Ireland (EU). Our other providers, including Vercel, Stripe, Anthropic, PostHog, Resend and Loops, process information mainly in the United States. Where the law requires it, we rely on safeguards such as the providers' data processing terms and standard contractual clauses.
12. How long we keep it
- Your account and planning content: for as long as your account exists. If your subscription ends, your account and content are not deleted automatically; you can still sign in. We do not currently delete inactive accounts. If that changes, we will tell you in advance and give you the chance to ask for a copy of your content.
- When you ask us to delete your account: we delete your account and planning content promptly, and within 30 days of confirming the request, except what we must keep by law (below). Copies in our backups are removed as those backups expire, within about three months (daily backups are kept for 8 days, weekly backups for 35 days, and monthly copies for up to three months).
- Payment, subscription and purchase records: our own copies are kept for as long as your account exists and deleted with it. Stripe keeps the payment records it needs for tax and accounting law under its own policy.
- AI usage records: for as long as your account exists (they contain no text of your requests).
- Records of accepting our terms: for as long as your account exists, and deleted with it.
- Analytics: PostHog keeps events for up to 12 months.
- Hosting and authentication logs: kept by those providers for short periods under their own policies.
13. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- receive your planning content in a structured, machine-readable format, and have it sent to another service;
- object to, or ask us to restrict, how we use your information;
- withdraw consent where we rely on it;
- not be subject to a decision based solely on automated processing that significantly affects you (RevereOS makes no such decisions);
- complain to a data protection authority.
To use any of these rights, write to privacy@revereos.app from the email address on your account. We may ask you to confirm the request from that address before acting on it. We will respond within 30 days. There is no charge, unless a request is clearly unfounded or excessive.
Some of this you can do yourself: you can change your name and photo in Account, edit or delete your planning content at any time, and manage or cancel your subscription from Account. There is not yet a self-service download of your data or button to delete your account; we handle those on request.
If you are in Nigeria, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng). If you live elsewhere, for example in the EU or the UK, you can also complain to the data protection authority where you live.
14. Security
We protect your information with measures appropriate to it. These include:
- encrypted connections (HTTPS);
- access controls in the database that restrict each person's data to their own account;
- hashed passwords;
- secrets kept out of our code;
- limited, need-to-know access for the people who run RevereOS.
Our backups are encrypted. If a breach of your information is likely to put you at risk, we will tell you and the relevant authority as the law requires.
15. Children
RevereOS is not intended for children. You must be at least 18 years old to create an account. If we learn that we hold information about a child below that age without the consent the law requires, we will delete it.
16. Changes to this policy
We may update this policy as RevereOS changes. We will post the new version here with a new effective date, and if a change materially affects how we use your information, we will tell you by email or in the app before it takes effect.
17. Contact
Ezekiel Chidiebere Osi (trading as RevereOS), 9 Nepa Line, Uyo, Akwa Ibom State, Nigeria (correspondence address). Email: privacy@revereos.app.