Privacy Policy
Last updated 27 July 2026
Revio is an app for rating restaurants and deciding where to eat with friends. This policy explains what we collect, why we collect it, who else sees it, and how to get rid of it. Revio is operated by the Revio team. You can reach us at hello@explorerevio.com.
What we collect
Account
When you sign up we store the identifier you signed up with: a phone number if you used SMS, or the account identifier and email address Apple or Google give us if you used one of those. We also store the handle and display name you choose.
Profile
Your bio, profile photo, chosen language, and whether your profile is public or private. If you pick a home city, we store that city and a fixed coordinate for the centre of it — the same value for everyone who picks the same city. It is a city marker, not your address.
What you create
- Ratings: the bucket you chose, the score derived from your comparisons, and any note, dishes or dining context you added.
- Photos and videos you attach to a rating.
- Lists and wishlist entries, including any notes on them.
- Reactions to other people's ratings.
- Reports you file, and any note you write on one.
Your social graph
Who you follow, who follows you, pending follow requests, and who you have blocked. Blocks are visible only to you — the person you block is not told.
Hangouts
Which hangouts you belong to, the cuisine and vibe cards you swiped, and how you voted. If you create a hangout we store your device's location at that moment, so the group gets recommendations near where you are. If you join someone's hangout through a web link without an account, we store the name you type and — only if your browser asks and you allow it — your location, so the meeting point accounts for you.
Browsing without an account
You can browse restaurants on our website without signing up, and nothing is stored while you only look. The first time you save a restaurant we create a random identifier, put it in a cookie on your device, and store the restaurants you save against it. That identifier is the whole record — no name, no email, no phone number, and nothing that connects it to an account. It is not used for advertising and we do not share it. Clearing your browser's cookies ends it: we have no other way to find that list, and neither do you.
To stop that being abused, the moment we create that identifier we also count how many have come from your network that day. We do not store your IP address to do it — we store a scrambled, one-way version of it that changes every day, so it cannot be turned back into an address or used to recognise you tomorrow. It is deleted after two days and is used for nothing except that count.
If a group you joined settles on a restaurant, we offer to email you a link that moves those saves into the app. That is the only time we ask for an address without an account, it is optional, and the save works whether or not you give one. If you do, two separate clocks start: the link works for 7 days, and your email address is deleted after 48 hours — sooner if you use the link, which erases it immediately. After those 48 hours the link still works perfectly well; we simply no longer hold the address it was sent to. We do not add you to any list and we do not email you again.
Location
Revio asks for your location only while you are using it, never in the background. It is used to rank nearby restaurants and to centre hangout recommendations. Two of these uses are stored rather than transient: the location recorded on a hangout you create, and the coordinates recorded with each Ask AI search you run, which we keep alongside the query so we can debug why a search returned the wrong neighbourhood. That second one accumulates into a history of where you were when you searched. You can decline the permission; Explore and Hangouts then fall back to asking you for a city instead.
Device and usage
If you enable notifications we store a push token and whether your device is iOS or Android. We record product analytics events (screens opened, ratings completed, hangouts created) and crash reports. We keep a count of certain actions per day to enforce rate limits.
What we derive
From your ratings we compute a "taste embedding" — a numeric representation of your preferences used to rank recommendations and to find people with similar taste. It is not readable by other users or by our client apps; only our servers use it, and only ever to produce a similarity score. We also keep the pairwise comparisons you made while rating, which is how your scores are calculated.
Why we collect it
| Purpose | Basis |
|---|---|
| Running your account and showing you the app | Performing our contract with you |
| Ranking restaurants, finding similar taste, hangout recommendations | Performing our contract with you |
| Push notifications you have enabled | Your consent, withdrawable in Settings |
| Location | Your consent, withdrawable in your device settings |
| Analytics, crash reports, rate limits, abuse handling | Our legitimate interest in a working, non-abusive product |
Who else sees it
We do not sell your data. We use these providers to run the service:
- Supabase — database, authentication, file storage and push delivery.
- Twilio — sends the SMS code if you sign in by phone.
- Resend — sends the one email described above, if you ask for a link to your guest saves. It is the only email we send that is not part of signing in.
- Apple and Google — if you use their sign-in, and Google Places for restaurant data. Restaurant searches and a coarse location are sent to Google Places to return results.
- OpenAI, and Anthropic, Google or DeepSeek as fallbacks — see below.
- PostHog — product analytics.
- Sentry — crash reporting.
- Expo — delivers push notifications to your device.
We may also disclose information where the law requires it, or where it is necessary to investigate abuse or protect someone's safety.
AI processing
Revio uses language models for a few specific things: turning your Ask AI question into search filters, writing the one-line reason under a recommendation, choosing cuisine and vibe cards for a hangout, and generating restaurant descriptions. What is sent is the text of your query, restaurant data, and the cuisines and vibes of the group — not your name, handle, email or phone number.
We separately compute embeddings from restaurant descriptions and from your ratings. These providers process this data on our instruction and do not use it to train their models.
Generated text can be wrong. Every AI-written line in the app has a report control; use it, and we review what gets flagged.
How long we keep it
- Account and content: until you delete them or delete your account.
- Hangouts: they expire automatically 24 hours after creation.
- Restaurants saved while browsing without an account: deleted 180 days after you last save something, or as soon as you clear the cookie, whichever comes first.
- An email address given to move those saves into the app: deleted after 48 hours, or immediately once the link is used. The link itself stops working after 7 days.
- Rate-limit counters: per day.
- Analytics and crash reports: per the retention settings of PostHog and Sentry.
- Reports you file, and reports about you: retained after resolution so a pattern of behaviour stays visible.
Your rights
You can delete your account from inside the app — Settings, then Delete account. It is immediate and it is not reversible. It removes your profile, ratings, photos, lists, wishlist, follows, blocks, reactions and notifications. Hangouts you hosted stay with the people you invited, with someone else as host, because they are not only yours.
You can edit your profile at any time, make your account private, turn individual notification categories off, and change or revoke location permission in your device settings.
Depending on where you live you may also have the right to a copy of your data, to correct it, to restrict or object to processing, and to complain to a data protection authority. Write to hello@explorerevio.com and we will respond.
Children
Revio is not for people under 13. We do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.
Where your data is processed
Our providers operate internationally, so your data may be processed outside the country you live in. Where that involves transferring data out of the EEA or the UK, it is done under the safeguards those laws require.
Changes
If we change this policy in a way that matters, we will say so in the app before the change takes effect. The date at the top always reflects the current version.