Privacy Policy

01Who we are

Reviso is a study-revision application that helps students prepare for competitive and academic exams using spaced repetition, focus sessions, streaks, and AI-assisted study material generation. Reviso is operated by:

Reviso Private Limited
6-3-105/8, K Shivaram Pally, Shivarampalli, Rajendranagar,
K.V. Rangareddy – 500052, Telangana, India
Email: contact@reviso.in

In this policy, “Reviso”, “we”, “us”, and “our” refer to Reviso Private Limited. Reviso Private Limited is the data controller (and, under India’s Digital Personal Data Protection Act, 2023, the “Data Fiduciary”) responsible for the personal data described here.

02Scope of this policy

This policy applies to:

• the Reviso mobile application for Android and iOS (the “App”);
• the Reviso website at reviso.in, including the waitlist sign-up (the “Site”); and
• related support, email, and communication channels.

Together we call these the “Services”. This policy does not apply to third-party services that have their own privacy policies, such as the Google Play Store, the Apple App Store, or any website we link to.

03Information we collect

3.1 Information you provide

• Account information. When you create an account, we collect your email address and a password. If you sign in with Google or Apple, we receive your name, email address, and (where available) your profile picture from that provider. Passwords are stored only in hashed form by our authentication provider; we never see or store your plain-text password.
• Profile information. Your display name, an avatar emoji you choose, your target exam type (for example UPSC, JEE, NEET), your preparation style, and an optional exam date.
• Study content you upload or enter. Photos and scans of handwritten notes, PDF documents, and text notes you type into the App; the subjects and topics you create; and the text extracted from your uploads using optical character recognition (OCR).
• Messages to our AI study assistant. The questions and messages you send in AI chat, and the notes you attach as context for a chat.
• Feedback and support communications. Ratings (such as thumbs up or down) and comments you give on AI-generated content, and any messages, bug reports, or requests you send us.
• Waitlist sign-up. If you join the waitlist on our Site, we collect your email address.
• Promotional codes. If you redeem a promo or referral code, we record that the code was redeemed by your account.

3.2 Information generated through your use of the Services

• AI-generated study materials. Multiple-choice questions, flashcards, summaries, and explanations generated from your notes, along with quality/trust metadata about that content.
• Learning activity. Your revision schedule and history, review ratings, spaced-repetition parameters, quiz attempts and answers, scores and time taken, focus (Pomodoro) session durations, streaks, XP, levels, and daily activity records.
• Study insights. Aggregated statistics we compute about your progress to show you in the App.
• Chat history. Your AI chat sessions and messages, and a short-lived conversation context cache used to make replies faster and cheaper.

3.3 Information we collect automatically

• Device and app information. Device type and model, operating system and platform (Android or iOS), and the version of the App you are running.
• Push notification token. A push token issued by the operating system so we can deliver reminders and notifications, together with the platform it belongs to.
• Time zone. Your device’s time zone, so daily reminders fire at the right local time.
• Notification preferences. Your chosen reminder times, paused/resumed state, and per-category opt-outs.
• Connectivity status. Whether your device is online or offline, so the App can queue actions for later sync.
• Diagnostic and usage logs. Technical logs about requests to our backend and AI services — such as timestamps, feature used, response status, error codes, latency, and token counts. Our AI usage logs record metadata and token counts only; they do not store the text of your notes or messages.
• Site requests. When you visit our Site, standard web-server and font-provider logs may record your IP address, browser type, and pages requested (see Cookies and local storage).

3.4 Subscription and payment information

Reviso offers an optional paid subscription (“Reviso Pro”). Purchases are processed by the Google Play Store or the Apple App Store and managed through our subscription provider, RevenueCat. We receive your subscription status, entitlement and expiry dates, renewal status, and a purchase/transaction history linked to your account. We do not receive or store your full payment card number, UPI ID, or bank details — those are handled by the app store and its payment processors.

04How we use your information

We use the information described above to:

• create and manage your account and authenticate you;
• provide the core features — storing your notes, building your revision schedule, running spaced repetition, focus sessions, quizzes, streaks, and progress tracking;
• generate study materials, summaries, explanations, and chat responses from the content you provide;
• send you reminders and notifications you have not opted out of, and service messages such as password resets and important account notices;
• process and manage subscriptions, promo codes, and entitlements;
• provide customer support and respond to your feedback and requests;
• monitor, debug, secure, and improve the Services, including measuring feature usage and AI cost and reliability in aggregate;
• detect, prevent, and address fraud, abuse, security incidents, and violations of our terms; and
• comply with legal obligations and enforce our agreements.

We do not sell your personal data, and we do not use your notes, chats, or study activity to serve you third-party advertising.

05AI features and how your content is processed

Several features rely on third-party AI models. To provide them, we send the relevant content to our AI provider, Google (Gemini API on Google Cloud), which processes it on our behalf to return a result. This includes:

• extracting text from photos, scans, and PDFs you upload (OCR);
• generating multiple-choice questions, flashcards, summaries, and explanations from your notes;
• creating vector embeddings of your note text so the assistant can find relevant passages; and
• answering your questions in AI chat, using the notes and context you provide.

Our AI provider acts as our service provider (processor) and is contractually restricted to using this content only to provide the feature to us. A short-lived context cache (expiring within about 30 minutes) may be used to speed up chat responses.

AI-generated content can be inaccurate or incomplete. You are responsible for reviewing it before relying on it for your preparation.

06Legal bases for processing

Where India’s Digital Personal Data Protection Act, 2023 applies, we process your personal data on the basis of the consent you give when you sign up and use the Services, and for certain “legitimate uses” permitted by that Act, such as responding to your requests and maintaining the security of the Services.

Where data protection laws such as the EU/UK GDPR apply, we rely on the following legal bases:

• Performance of a contract — to provide the Services you sign up for;
• Consent — for optional features such as push notifications, and which you can withdraw at any time;
• Legitimate interests — to secure, debug, and improve the Services and prevent abuse, balanced against your rights; and
• Legal obligation — to meet accounting, tax, and other legal requirements.

07How we share information

We share personal data only in these circumstances:

• Service providers and sub-processors who host our infrastructure, run AI processing, deliver notifications, and manage subscriptions on our behalf, under contracts that require them to protect your data and use it only for the services they provide to us (see the table below).
• Legal and safety reasons — when we believe disclosure is required by law, legal process, or a government request, or is necessary to protect the rights, property, or safety of Reviso, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this policy or notify you of any material change.
• With your direction or consent — when you ask us to share information or otherwise agree to it.

We may also create and share information that has been aggregated or de-identified so that it can no longer reasonably be used to identify you.

08Service providers and sub-processors

The main third parties that process data for us are:

We may add or change sub-processors as the Services evolve. Material changes will be reflected in an updated version of this policy.

09International data transfers

Reviso is operated from India, and some of our service providers store or process data on servers located outside India, including in the United States and other countries. Where we transfer personal data across borders, we do so in accordance with applicable law and rely on appropriate safeguards, such as our contracts with those providers. The Government of India may restrict transfers to certain countries; we will comply with any such restrictions.

10How long we keep your information

• Account and study data is kept for as long as your account is active.
• When you delete your account, we delete or irreversibly anonymise your personal data — including your profile, notes, uploads, AI-generated materials, chat history, and activity — within 90 days, except where we must retain certain records to meet legal obligations (for example, transaction and tax records, which Indian law generally requires us to keep for up to 8 years).
• Backups containing your data are overwritten on a rolling basis and purged within that backup cycle.
• Diagnostic and AI usage logs are generally retained for up to 90 days.
• The AI chat context cache expires automatically within about 30 minutes.
• Waitlist email addresses are kept until we launch and complete onboarding, or until you ask us to remove you, whichever is earlier.

11How we protect your information

We use technical and organisational measures designed to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest for our database and file storage, row-level access controls so that each user can only access their own data, hashed password storage, scoped access keys, and access limited to personnel who need it.

No method of transmission or storage is completely secure. If we become aware of a personal data breach affecting you, we will notify you and the relevant authorities as required by law.

12Your rights and choices

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and get a summary of how it is processed;
• Correct or update inaccurate or incomplete data — much of this you can do directly in the App’s profile and settings screens;
• Delete your account and personal data;
• Withdraw consent for optional processing, such as turning off push notifications;
• Object to or restrict certain processing, and request portability of data you provided, where those rights apply to you;
• Nominate another individual to exercise your rights in the event of your death or incapacity, as provided under India’s Digital Personal Data Protection Act, 2023; and
• Complain to us and, if unsatisfied, to the Data Protection Board of India or your local data protection authority.

How to exercise your rights

You can delete your account from within the App, or contact us at contact@reviso.in. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law. These Services are provided free of charge for rights requests, though we may decline or charge a reasonable fee for requests that are manifestly unfounded or excessive.

13Children and minors

Many exam aspirants are young. Under India’s Digital Personal Data Protection Act, 2023, an individual under 18 years of age is a child, and processing their personal data requires verifiable consent from a parent or lawful guardian.

If you are under 18, you may use Reviso only with the involvement and consent of your parent or guardian, who accepts this policy on your behalf. By allowing a minor to use Reviso, the parent or guardian consents to the processing described here. We do not knowingly use children’s data for tracking, behavioural monitoring, or targeted advertising.

If you believe a child has provided us personal data without the required consent, contact us at contact@reviso.in and we will take appropriate steps to delete it.

14Cookies and local storage

Website. Our Site does not use advertising or analytics cookies. It loads fonts from Google Fonts, which means Google’s servers receive your IP address and browser information when the page loads. The waitlist form sends only the email address you enter to our backend.

App. The App stores data locally on your device (for example your login session, onboarding state, cached content, and an offline action queue) using standard device storage. This stays on your device and is used to keep you signed in and let the App work offline. The App does not use third-party advertising identifiers or cross-app tracking.

15Third-party links and services

The Services may link to third-party websites or rely on third-party platforms (such as the app stores). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

16Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App or by email. Your continued use of the Services after an update takes effect means you accept the revised policy.

17Contact and grievance redressal

For any questions, requests, or complaints about this policy or your personal data, contact our Grievance Officer / Data Protection point of contact:

Grievance Officer
Reviso Private Limited
6-3-105/8, K Shivaram Pally, Shivarampalli, Rajendranagar,
K.V. Rangareddy – 500052, Telangana, India
Email: contact@reviso.in

We will acknowledge and respond to grievances within the timeframes required by applicable law. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India or, if you are outside India, to your local data protection authority.