Revol Wallet Privacy Policy

IV BUD LLC (ТОВ «ІВ БУД»), EDRPOU code 43143861, Halych, Ivano-Frankivsk region, Ukraine. Data questions: revol.pro.official@gmail.com.

Phone number — to sign in with an SMS code. The code itself is stored only as a hash and is valid for a few minutes.

Name and app language — if you set them in your profile.

Renovation stage — if you set it in your profile. It is stored only on the Revol Wallet app server and is not shared with companies.

Device sessions: device model name, sign-in and last-use time.

The device's push notification token, platform (iOS or Android) and app version — to notify you about wallet changes.

Discounts in your wallet and their history: receiving, showing at checkout, use, transfers, amount saved.

IP address of requests — for anti-abuse limits (for example, mass code requests).

The terms version and when you accepted it.

We show no ads, do not track you across apps and websites, do not sell data and use no third-party analytics.

The camera is used only to scan QR codes on the device; images are neither stored nor sent.

We do not collect location, contacts or payment data.

So you can sign in, receive, show, use and transfer discounts, see your savings history and get notified about changes. The legal basis is performing our contract with you (the terms of use) and our legitimate interest in protecting the service from abuse.

The owner of the company providing a discount can see its current wallet cards: only the last 4 digits of the card holder's phone number, the card status and remaining uses and transfers. The full phone number is not shared in this analytics view. Removing a card from the wallet removes it from this list.

When you use a discount, the company sees only the last 4 digits of your number and the fact of use. The order with the discount stays in the company's history.

DigitalOcean — server hosting (Frankfurt, EU).

TurboSMS — sending the sign-in SMS (phone number and SMS text).

Apple Push Notification service and Firebase Cloud Messaging (Google) — push delivery.

Expo — delivering app updates.

Cloudflare — DNS and storage of database backups (R2).

These providers process data only to provide their services to us. We may also disclose data at a lawful request of public authorities.

While your account is active. After you delete the account, the number is anonymized, and your name, sessions, sign-in codes, push tokens, renovation stage and discounts are deleted or stop working immediately. Records of discounts already used stay with the companies as financial history without your number or name. Data of a deleted account may remain in database backups.

You can get a copy of your data, correct your name in the app, delete your account (Profile → Delete account or revol-wallet.app/delete-account) and object to processing by writing to us.

You may lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the data protection authority of your country of residence.

We will announce material changes in the app and ask you to accept the new version at sign-in.