Privacy Policy

Last updated: June 12, 2026

This policy explains what personal data Revomnia processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

The controller is the operator of Revomnia. Name and address are listed in the Impressum. Contact for all privacy matters: info@revomnia.com.

2. Data we process

• Account data: email address, display name, and — if you sign in with Google — the basic profile (name, email, avatar) Google shares with us. Magic-link sign-in processes only your email address.
• Your study content: courses, topics, deadlines, tasks, flashcards, notes (typed and handwritten), summaries, uploaded files (PDFs/images), study sessions, focus and review history. This content exists solely so the app can work for you; we do not use it for advertising or sell it.
• Billing status: your plan, trial end, and subscription state. Payment itself (card details, invoices, VAT) is handled entirely by our merchant of record (see §4); we never see your payment details.
• Technical data: server logs (IP address, time, requested URL, error details) for operating and securing the service, and aggregated, cookie-free usage statistics (page views, country) via Vercel Analytics. We do not build personal usage profiles.

3. Purposes and legal bases

• Providing the service, your account, and paid plans — Art. 6(1)(b) GDPR (contract).
• Security, abuse prevention, error diagnosis, and aggregate analytics — Art. 6(1)(f) GDPR (legitimate interest in operating a reliable service).
• Optional email reminders (e.g. the daily review digest) — sent only while notifications are enabled in your settings; you can switch them off there at any time.

4. Processors and recipients

We use the following providers under data-processing agreements. Where providers are located in the USA, transfers rely on the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses:

• Vercel (USA) — hosting, server logs, cookie-free aggregate analytics.
• Neon (USA; EU database region) — application database.
• Vercel Blob (USA) — storage for files you upload.
• Resend (USA) — transactional email (sign-in links, review reminders).
• Lemon Squeezy (USA) — merchant of record for paid plans; processes your payment and billing data as an independent controller under its own privacy policy.
• Google (USA) — only if you choose “Sign in with Google”.
• Anthropic (USA) — only when you actively use AI card generation: the selected materials and notes are sent to generate card drafts and are not used to train models.

5. Cookies and local storage

Revomnia uses only technically necessary cookies (sign-in session) and local storage on your device (e.g. timer state, offline review queue, display preferences). There are no advertising or third-party tracking cookies, which is why there is no cookie banner.

6. Retention and deletion

Your data is kept while your account exists. You can export everything as a JSON file and delete your account — including all content and uploaded files — yourself in Settings at any time; deletion is immediate and permanent. Server logs are retained briefly by our hosting provider and then deleted automatically.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest (Art. 15–21 GDPR). You also have the right to lodge a complaint with a supervisory authority — for us, the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. To exercise your rights, email info@revomnia.com.

8. No automated decision-making

Revomnia does not perform automated decision-making or profiling with legal effect. Scheduling and review algorithms only organize your own study material for you.

9. Changes

We will update this policy when the service or its providers change and adjust the date above. The current version is always available at this address.