Privacy Policy — REVU | Erin Consulting

Last updated: 2026.10.01

1. Introduction

Revu is made by Erin Consulting LLC (“we”, “our”, “us”). This Privacy Policy explains what we collect, where it goes, and what you can do about it.

Most of Revu works entirely on your device. The exception is the included cloud AI, which is optional and is described in full in sections 4 and 6. By using the Revu app or this website, you agree to this policy.

2. Data We Collect

2.1 Information you provide

Flashcards, topics, and anything you write — stored on your device, and in your private iCloud account if you turn on Cloud Sync.
Review activity (answers, timestamps, scoring, scheduling state) — used to work out when to show you a card again.
Name — optional, only to personalise the app.

We do not ask for your email address. Signing in with Apple does not give us your name or your email.

2.2 Automatically collected data (opt-in only)

Analytics — usage statistics and non-identifying performance data.
Telemetry — crash logs and performance data.

Both are off until you switch them on. Neither ever includes your card content, photos, microphone input, or speech.

3. Permissions and Device Access

Revu may ask for access to certain system features, strictly so a feature you have chosen can work:

Microphone — only for dictating answers.
Camera & Photo Library — only for adding images to cards, and for reading text from a photo.
Speech Recognition — only for turning your spoken answer into text.
Notifications — only to remind you of due reviews.

Every permission is optional and can be changed or revoked at any time in iOS Settings. We never use them for anything else.

4. How Your Data Is Stored

4.1 On your device

Cards, topics, and review history are stored on your device using Apple’s Core Data framework.

4.2 iCloud

If you turn on Cloud Sync, that data is stored in your own private iCloud database, reachable only through your Apple ID. Erin Consulting has no access to it.

4.3 Revu’s server, if you use the included AI

Revu’s included cloud AI runs through a server we operate on Cloudflare. You only have an account on it if you sign in with Apple to use that feature.

What you send for AI processing is never stored. The server holds it in memory only long enough to pass it to OpenAI. Error messages returned to the app are reduced to a plain code, specifically so that no part of your document can travel back through them.

On that server we keep:

An account identifier derived from your Apple sign-in, while your account exists. We never store your Apple ID itself; it is put through a one-way function with a secret key before it is saved, so the stored value cannot be turned back into your Apple ID.
An identifier for the app installation, and your sign-in tokens, stored only in hashed form. Tokens are deleted within 30 days of expiring or being replaced, and the installation link 30 days after it was last used.
The AI’s answer to a request, encrypted, for up to 24 hours. This lets a request interrupted by a lost connection recover without being run, and charged, again.
A record of each AI request: when it ran, what it was allowed, what it cost, and how many cards were accepted. It contains no content and is kept for up to 30 days.
A coded request identifier and its deadline, for up to 90 days, so the same request can never run twice. It contains no content or credentials.
Your one-time AI trial balance, and how much of its funding has been spent, while your account exists. This is what stops the trial being used twice.
Your monthly allowance and spending totals, until the month ends (at most 31 days). They contain no content.
If you subscribe, an identifier that links your App Store purchase to your Revu account, kept while your account exists, and Apple’s evidence of the subscription, kept until 30 days after it ends or is refunded.

Your acceptance of the cloud AI disclosure is recorded on your device, not on our server.

5. How We Use Your Data

We use your data only to:

schedule your reviews and save your progress
show you insights and statistics
run the AI features you have chosen
check how much of your allowance you have used, and prevent abuse of it
enable subscription features
send the reminders you asked for

We do not sell, rent, or trade your data, and we do not use it for advertising.

6. AI Processing

Revu can grade answers and make cards for you. There are three separate routes, and you choose which one is used.

6.1 Apple Intelligence

Runs entirely on your device. Nothing leaves it.

6.2 Revu’s included cloud AI

This is the default for card generation. It requires Sign in with Apple and a separate, explicit acceptance of a disclosure inside the app. Two companies are involved:

Cloudflare hosts our server, which checks your allowance, guards against abuse, and forwards the request. It never stores what you send, and keeps the AI’s answer encrypted for up to 24 hours (see 4.3).
OpenAI performs the AI work, using the gpt-5-mini model.

What OpenAI receives depends on the feature:

Feature	Sent	Returned
Making cards	the PDF pages, text, photo text or transcript you selected, and your generation settings	the draft cards
Checking an answer	the card’s question, the expected answer, your answer, and your strictness setting	the feedback
Insights (only if separately enabled)	the selected cards and recent review outcomes, timing and history	the summary

OpenAI receives no Apple sign-in proof, Revu account identifier, device identifier, subscription state, session token, or allowance identifier. Those stay between the app and our server.

OpenAI does not use this data to train its models. Under its standard API terms it may keep requests and responses for up to 30 days to detect abuse, and then deletes them, unless the law requires longer.

You can withdraw this consent at any time in Settings. Withdrawing stops all future transmissions immediately and deletes none of your cards or history. Manual card creation, Apple Intelligence, and offline grading continue to work.

Until 25 August 2026 this feature used Google Gemini. It now uses OpenAI. Because the company doing the processing changed, the app asks you to accept the disclosure again rather than carrying over a decision you made about a different provider.

6.3 Your own provider key

If you supply your own API key for Google Gemini, OpenAI, or Anthropic, the app sends requests directly from your device to that provider, billed to your own account with them. Our server is not involved and sees nothing. Your key is stored in the device keychain.

7. Other Services

Apple iCloud — syncing, if you enable it
Apple App Store / StoreKit — purchases and subscriptions
Apple crash reporting — optional
Cloudflare — hosts our server, as described in 4.3
OpenAI — the included cloud AI, as described in 6.2

8. Your Rights

8.1 Export

You can export all of your data from the app’s Settings.

8.2 Delete your local data

You can delete your cards, topics, and history at any time from Settings, and by removing the app.

8.3 Delete your Revu account

If you signed in with Apple to use the included AI, you can delete your Revu account in the app: Settings → Account → Delete Revu Account. The button appears while you are signed in. If you have signed out, sign in again with the same Apple ID first. Apple asks you to confirm.

When you confirm:

you are signed out on every device at once, and any stored AI answers become unreadable;
the rest of what 4.3 describes, apart from the records listed below, is erased once requests already in progress have stopped. This usually takes a few hours and never more than 30 days; the app shows the date. Until then, signing in with the same Apple ID will not work;
any unused trial allowance is forfeited.

A few records stay for a limited time. None of them contains your content, your answers or any credential:

a coded marker that stops the same Apple ID getting a second free trial, kept while that trial offer exists;
coded request identifiers and their deadlines, until those deadlines pass (at most 90 days), so a request cannot be run again;
your monthly totals, until the month ends.

Deleting your Revu account does not touch the cards and history on your device or in iCloud. It does not cancel an App Store subscription either; cancel that in your Apple ID’s Subscriptions settings.

If you no longer have the app, reinstall it and sign in with the same Apple ID to delete the account. We cannot find your account from an email, because we never store your Apple ID or your email address. For any problem, write to support@erin-consulting.com.

Settings → Included AI Privacy → Withdraw Cloud AI Consent stops all future cloud AI requests without losing anything you have made. It does not delete your Revu account; see 8.3 for that.

8.5 Permissions

All permissions can be changed or revoked in the iOS Settings app.

9. Children’s Privacy

Revu is not intended for children under 13, and we do not knowingly collect information from them.

10. Security

Your local data relies on Apple’s device encryption and secure storage, and your synced data on Apple’s iCloud protections.

Requests to our server are authenticated and signed, and are carried over encrypted connections. As described in 4.3, your Apple ID is never stored, what you send for AI processing is never stored, and the AI’s answers are kept only in encrypted form, for at most 24 hours.

11. Changes to This Policy

We will update this policy as the app changes, and post the new version here. Where a change affects who processes your content, the app will ask you to accept the new disclosure before sending anything further.

12. Contact

For any question about this policy or your Revu account:

Erin Consulting LLC Email: support@erin-consulting.com

Privacy Policy — REVU