Privacy policy

Information we use

We store your name, email address, country, default currency and a protected password hash to operate your account. We also store the party details you or your organisers provide: invitations and participants, dates, destinations, travel and accommodation, bookings, tasks, expenses, contributions and settlement records.

Games may contain custom questions, answers, votes, scores and photos. A Partner Showdown link gives its holder access to that partner’s private answer page until its deadline. Keep that link private; organisers control the game and answer reveal.

For a Party Pass we receive purchase identifiers, verification information, amount, currency and purchase status from the relevant app store. We do not receive your full card number. Apple or Google processes payment under its own privacy terms.

We use sign-in and security records to protect accounts, prevent repeated password attempts and verify purchases. Our server and hosting provider may record connection information such as IP addresses and request times. Opening the app online or signing in records account activity for the inactivity policy below.

Group polls

Group polls contain questions, answer options and votes linked to your account so you can change or withdraw your vote while voting is open. Authorised party members see the totals and their own choices, not each person’s ballot. Poll creators and organisers can close or delete a poll. Deleting your account removes your votes and polls you created; deleting a party removes all its polls and votes. The app caches the last viewed results on your device for offline reading. Online results refresh when you open Polls; voting requires a connection.

Photos, permissions and visibility

Camera and photo-library access is optional and is used when you choose to add or save a hunt photo. Selected photos are resized and location metadata is removed before storage. They are private to authorised party members, subject to the game’s visibility and moderation controls—not published on the marketing website. Pending photos are visible to the uploader, joined teammates and organisers. Organisers review photos before they appear in the shared gallery. Authorised party members can save approved photos, including from past rounds, to their devices. Deleting a photo or party cannot remove copies already saved by other people.

Get permission from people you photograph. Do not upload nudity, sexual imagery, harassment, dangerous acts or other unlawful content. Report a photo in the game to hide it pending review. You can block an uploader’s hunt photos and manage your blocks in Settings. Blocking is not removal from a party: shared plans and expense records remain accessible to authorised group members.

Authorised Reveli staff can inspect reported photos and related report information, remove content and suspend abusive accounts. Reports go to a queue monitored by the operator; notification emails contain a reference, not the photo. Contact us about other content or an urgent safety concern. This is not an emergency service.

Face ID and fingerprint checks are performed by your device. Reveli does not receive biometric templates. Reminders and group notifications are optional and controlled in app/device settings. If enabled, we store a device notification token, an installation identifier, your app language and the account linked to that installation. Apple Push Notification service or Google Firebase Cloud Messaging delivers generic group alerts; we do not include expense amounts, booking references or personal booking details in their message text. Notification previews may be visible on your lock screen depending on your device settings. Switching notifications off or signing out requests deactivation; if your phone is offline, that request is retried when it reconnects, so an already queued generic alert may still arrive. Delivery records and limited sync-error identifiers expire within 30 days; inactive device registrations expire after 90 days. Account deletion removes linked device registrations and delivery records.

Why we process information

We use account, party and purchase information to provide the service you request. Security, purchase integrity and proportionate moderation support our legitimate interests in running a safe service. We comply with legal obligations where they apply. Optional permissions remain under your control; declining them does not prevent use of unrelated features.

Who receives it

Authorised party members see shared party information. Personal travel can be used for group coordination; do not treat a party entry as a private vault. Booking references and other sensitive booking details have additional access controls. Organisers manage the roster, invitations, bookings and games. People can save or photograph information they are allowed to see, and we cannot remove copies they have independently made.

Our hosting, database and email providers process information to run Reveli. App stores process and verify purchases. We may disclose limited information when lawfully required or necessary to investigate abuse. We do not sell personal information. If a provider processes information outside your country, applicable transfer protections must be in place.

Experience partners and administration

Things to do offers optional suggestions from Viator and Tiqets. To retrieve them, our server sends a catalogue destination identifier, language and display currency. It does not send your name, email, party identifier, dates, guest list, private answers or expenses. Provider images are loaded from their image services, which receive ordinary connection information such as your IP address.

When you choose to view an experience, we open the partner’s website with an affiliate reference and an offer/day campaign code shared by everyone viewing that offer, not an account, party or device identifier. Reveli may earn commission if you book. The partner handles booking, payment and its own cookies under its own terms and privacy notice. Opening a link does not create a booking or expense in Reveli.

We count outbound requests by offer and day and use partner booking reports to improve relevant suggestions. In the Group carousel we also count cards at least half visible for one second, or deliberately tapped, once per short-lived selection. These are aggregate views and click requests, not unique visitors or confirmed visits to the partner website. Carousel campaigns are separated from other placements so we compare matching views, clicks and bookings. A random selection receipt prevents duplicate view counts; only its protected hash is stored, expires within 20 minutes and is cleared by the hourly cleanup. Selections stay only in app memory and are cleared on account changes. We retain only the matching Reveli campaign, booking status and update time, with a protected hash of the partner booking reference for correcting cancellations and refunds. We do not retain raw reports or attach aggregate records to your Reveli account, party, device or IP address. Reconciliation records expire after one year and anonymous offer/day counts after 400 days. Partner reports may arrive late or omit unattributed bookings; commission payments remain subject to the partner’s own records.

Restricted Reveli administrators can inspect account contact and status information, basic party summaries and reported content to provide support, protect the service and manage partners. Administrative changes are recorded for accountability. Administrators cannot see your password or use the portal to sign in as you.

Deleting an account or a party

Use Settings → Delete account in the app. You must be online and confirm with your current password; password recovery is available. This deletes your account, sign-in credentials, personal travel and stays, and uploaded hunt photos, including photos in previous rounds. Partner Showdown games you created are removed. Unsynced data on that phone is also cleared.

Joint party plans and financial records needed by other participants remain without a link to your account, under “Deleted member”. Other organisers keep their rights; we do not automatically promote guests. A sole organiser should appoint another organiser or delete the party first if appropriate.

An organiser can separately use Party settings → Delete party, enter the party name and confirm their password. This permanently removes that whole party and its invitations, participants, plans, travel, bookings, expenses, balances, games and photos for everyone. Settle costs and keep anything you need beforehand. This does not delete other participants’ accounts or their other parties.

Deletion does not request a purchase refund or transfer a Party Pass. Minimal payment records are kept for accounting, purchase verification and preventing transaction reuse. Minimal deletion identifiers prevent old offline devices restoring erased records. These do not contain your party’s photos or plans.

Inactivity and retention

Automatic inactivity deletion is not enabled during this TestFlight beta. You can still delete your account or party yourself. Before we enable automatic deletion, we will notify users of this policy: after 12 months without recorded account activity, we email a warning. Sign in within the next 30 days to keep your account; there is no fee to keep it. If you do not, your account and its personal data are deleted as described above. A warning must be sent before automatic deletion is scheduled. Security suspensions and any legally required preservation are handled separately.

Live records are removed when deletion completes. Offline devices receive deletion instructions when they reconnect. Restricted recovery backups are not used for ordinary access. Our recovery-backup retention policy is a maximum of 30 days; verification of older/manual copies and automatic enforcement is still being completed during this beta. Contact us if you need help with a deletion request. If a backup is restored, deletion records must be reapplied before the service reopens. A legal preservation requirement may require limited information to be retained separately, with access restricted to that purpose.

Your choices and rights

You can correct your profile, change optional permissions, manage blocked people, and delete your account in the app. Contact us for access, correction, export, restriction, objection or other privacy requests. We may need to verify your identity before disclosing or changing data. Your rights depend on the applicable law; you can also complain to your local data protection authority, including the UK Information Commissioner’s Office.

Reveli is intended for adult hen and bachelorette celebrations, not children. After Dark game content is optional and restricted to adults. Please contact us if you believe a child’s information has been supplied.

We will update this notice when our practices change and communicate material changes where required.