Skip to content
Reva

Privacy

Privacy policy

Effective 1 July 2026. Written to be read, with the detail in a table rather than buried in prose.
01

Who we are

Reva Inc. is a Delaware C corporation with its office at 1035 Pearl Street, Suite 400, Boulder, CO 80302, United States. We are the controller of the personal information described here. Questions go to privacy@reva.fit.

02

What we collect

WhatWhyKept for
Name and emailTo run your account and reply to youLife of the account, then 30 days
Password hashTo sign you in. We never see the password itselfLife of the account
Recovery descriptions you writeTo build your session. Read by the model provider to produce your session, then stored so you and Reva can refer backUntil you delete the session or your account
Sessions Reva builds for youSo you can return to them and so Reva can adjust the next one from how the last feltUntil you delete them or your account
How a session felt (your check-in tap)To adjust your next session appropriatelyUntil you delete the session or your account
Usage countsTo enforce the free tier and bill correctly24 months
Form submissionsTo answer your message or application24 months
Server logsReliability and abuse prevention. No session content30 days
03

Health information

The descriptions you write about your recovery, what you are recovering from and how you feel today, are health-related. We treat them with that in mind. They are sent to our model provider to build your session, under a business API agreement that prohibits the provider from training on that traffic. They are not sold, not shared with advertisers, and not combined with information from other sources to create a profile of you.

You should not write anything into Reva that you would be unwilling to share with a model provider under business API terms. If you describe a red-flag symptom, Reva will stop and point you to a professional, and the description is stored no differently from any other session.

04

What we do not collect

  • We do not run advertising trackers, and there are no third-party advertising cookies on this site.
  • We do not buy personal information from data brokers.
  • We do not ask for payment card numbers. If you subscribe, Stripe handles the card and we never see it.
  • We do not sell your information to anyone.
05

Who your information goes to

Our model providers receive the recovery description needed to produce your session, under business API terms that prohibit training on that traffic. The routing table on the How the AI works page names which models are live.

Our hosting and database providers store the data on our behalf inside the United States. Stripe processes payments if you subscribe. That is the complete list of processors, and we will keep it complete: if it changes, this page changes.

06

Legal bases

Where the GDPR or UK GDPR applies to you, we rely on: performance of a contract, to give you the service you asked for; legitimate interests, to keep the service secure, prevent abuse and understand aggregate usage; and consent, for anything optional, which you can withdraw at any time.

07

Your rights

You can ask for a copy of what we hold, correct it, delete it, or object to a particular use. Most of it you can do yourself: sessions delete from your dashboard and the whole account deletes from Settings. Your recovery log can be exported from Settings.

For anything else, email privacy@reva.fit and we will answer within 30 days. We will not make you jump through hoops and we will not charge you for it. If you are in California, the CCPA rights to know, delete and opt out of sale apply, and we do not sell personal information.

08

Children

Reva is for adults and is not directed at anyone under 18. We do not knowingly collect information from children, and if we learn we have, we will delete it.

09

Changes

If we change this policy in a way that matters, we will email account holders before it takes effect rather than quietly updating a date. This version is effective 1 July 2026.

Cookies are covered separately on the cookies page. Questions about your data specifically, including export and deletion, are on the your data page.