Revona — Privacy Policy

Last updated: 31 October 2026 · Applies to the Revona app

1. Who we are

Revona is published by BrotherAI. For any question about this policy, write to brotheraicompany@gmail.com.

2. What we collect

Revona collects the kinds of data below, over an encrypted connection, for the reasons given. They are described by kind, as the app stores ask, rather than field by field: a new detail within one of these kinds does not change this page, a new kind of data does (section 12).

Google (Firebase) and the app stores process parts of this data for us. None of them is an advertiser or a data broker. We do not sell, rent or share your data, and we do not use it for advertising.

3. What the server stores

Filed under the random identifier from section 2, and nothing else:

• The places you pin — the name you chose, the coordinate, and the time zone. This is location data, and it is the most sensitive thing here. It is a place you typed or picked from a search, not a continuous record of where you go: Revona does not track your movements and does not read your device's location in the background.
• Your alert settings for each place — the threshold, the quiet-hours window, and whether alerts are on.
• Your device's language and UTC offset, so that any text we generate is in your language and any quiet hours are judged at the right local time.
• Your subscription status — whether it is active and when it expires, plus which store it came from. See section 6.
• A notification token, if and when you enable notifications, so that a message can reach your device.
• A log of notifications sent to you — when, for which place, and whether delivery succeeded. It exists so that a missed or duplicated alert can be diagnosed.

A place you only look at, without pinning it, is different: its coordinate and time zone reach our server so it can work out the forecast, and none of it is filed under your identifier. The server's request log notes only that a forecast was asked for. What remains is the cached weather for that spot, rounded to about a kilometre and gone within 24 hours (section 8).

There is no field for your name, your email, your phone number, your contacts, your photos, or your browsing. Messages from Contact support are the one exception: they can carry pictures you attach, and are kept apart (section 11).

4. What stays only on your phone

Your sighting log, including every photo you attach to it. It is written to your phone's own storage, and nothing in the app uploads it. A picture leaves the phone only if you attach it yourself to a message you send us (section 11).

Also local only: which pinned place you are currently viewing, your language override if you set one, and the last forecast, cached so the app still works when you have no signal.

When you attach a photo, Revona copies it into the app's own storage rather than keeping a reference to your gallery. That copy is deleted when you delete the log entry, and all of it goes when you uninstall the app.

5. Data we send to other services

To produce a forecast, our server fetches public data from two sources on your behalf:

• NOAA Space Weather Prediction Center — geomagnetic activity. This is a single global figure; nothing about you is sent.
• Open-Meteo — hourly cloud cover, which is inherently specific to a location. Our server asks it for cloud cover at a coordinate rounded to roughly one kilometre. Open-Meteo receives that rounded coordinate; it does not receive your device identifier, and it has no way to associate the request with you.

The rounding is not only a privacy measure — it also lets neighbouring users share one cached answer — but it does mean the coordinate we disclose is deliberately coarser than the one you pinned.

Beyond those two, the stores in section 6 and Google Analytics (below), we send your data to no one. We do not sell it, rent it, or share it for advertising. There is no advertising in Revona. A message you send from Contact support is the one exception: a copy goes to Discord (below).

Google Analytics for Firebase (Google LLC) receives anonymous usage events straight from the app, not from our server: a place pinned (never which one — no coordinates, no name, no time zone), a place looked at without pinning it (never which one either), a forecast shown (fresh, cached or unavailable), an alert saved (on or off), an alert tapped, the answer to the notification prompt, a sighting logged (nothing about it), a Pro sheet or screen opened and from where, a purchase tried, its result and its delivery (the product only), the screens you open, and three coarse facts: whether this device has ever had Pro, that there is no sign-in, and how many places are pinned. With these, Google Analytics automatically records a random app-instance identifier, app opens and sessions, the app's version, the device model, operating system and language, an approximate location (city, region and country) worked out from the IP address, which Google Analytics does not store, and in-app purchases made through the store (the product, its price and currency — never your payment details). They show how Revona is used across everyone — whether people come back to a forecast, whether alerts bring them back — without knowing who anyone is. Advertising identifiers and ad personalisation are switched off. Kept by Google Analytics for 2 months, then deleted. Stopped by the switch in Settings → Send anonymous statistics.

Discord: the chat service our team works in. A copy of a message you send from Contact support is posted to the team's private channel there (section 11).

6. Purchases

Revona Pro is sold through Apple's App Store or Google Play. We never see your payment details. Card numbers, billing addresses and the like are handled entirely by Apple or Google and are never sent to us or stored by us.

When you buy, your device passes us the store's own proof of purchase. Our server checks that proof directly with Apple or Google and records only the outcome: that your subscription is active, and when it expires. If a purchase is refunded or a subscription lapses, that is reflected the next time we check.

Apple's and Google's own privacy policies govern what they collect when you make a purchase.

7. Permissions the app asks for

• Notifications (Android 13 and later, and iOS) — only if you turn alerts on. Decline and the rest of the app works normally; you simply open it to check instead of being told.
• Photo library — only at the moment you attach a photo to a sighting. Decline and you can still record sightings with a note. Revona reads only the single image you pick, and never browses your library.
• Internet — to fetch forecasts. Revona keeps the last one so the app is still useful with no signal.

Revona does not request background location, precise continuous location, contacts, microphone, camera capture, calendar, or access to other apps.

• Keep awake (android.permission.WAKE_LOCK): declared by Google Analytics so a batch of events already queued can finish sending. It never keeps the screen on.
• Install referrer (com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE): declared by Google Analytics to read from Google Play which campaign, if any, led to the installation.

A picture you attach to a message is chosen in the system's own photo picker, which hands the app only that picture and needs no permission (section 11).

8. How long we keep it, and how to erase it

Cached forecast data expires automatically within 24 hours; it is public weather data and is not tied to you.

Everything else in section 3 is kept while you use the app. Removing a pinned place deletes it and its alert settings immediately and completely, including any alert rule attached to it.

To erase everything: remove your pinned places, then uninstall the app. Uninstalling removes your device identifier, so nothing that remains can be connected to you or to any future install, except a message you sent from Contact support: that stays until you ask us to delete it (section 11). If you would rather we deleted your data directly, email us with nothing more than a request — but note that without your device identifier we cannot tell which rows are yours, so it is faster and more certain to remove your places from inside the app first. For a support message, tell us when you sent it and what it said, so we can find it without the identifier.

Anonymous usage events are kept by Google Analytics for 2 months and then deleted. They carry no name or account, so they cannot be looked up by person. The switch in Settings → Send anonymous statistics stops them at the source.

Messages you send from Contact support are kept to answer them and to improve the app, and deleted when you ask; write to the address in this policy.

9. Children

Revona is not directed at children and we do not knowingly collect data from anyone under 13 (or the equivalent age in your country). It is a tool for planning night-time outdoor trips, and it assumes an adult is making that decision.

10. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to its processing. Because Revona holds so little — a random identifier, the places you pinned, and their settings — most of those rights are exercised most quickly inside the app itself, as described in section 8. Messages you send from Contact support, with their pictures, are held too, and deleted when you ask.

For anything the app cannot do for you, write to brotheraicompany@gmail.com.

11. Messages you send us

In Settings → Contact support you can write to us from inside the app and attach up to three pictures. Nothing is sent until you tap Send. Then this goes over an encrypted connection to our server:

• What you wrote, the kind you picked (bug, idea or other) and the pictures you attached. Pictures are chosen in the system's own photo picker, which hands the app only the ones you pick; they are made smaller and stripped of their metadata (location included) before they are sent.
• The app's version, whether the device runs Android or iOS, the language the app is showing, the app's random install identifier.

Our server keeps the message with that identifier. A copy goes to the team's private channel on Discord, the chat service the team works in, where reports from the team's other apps arrive too. That copy carries the message, its pictures, the app's version, Android or iOS, the language. The app has no accounts, so nothing names you unless you do in the message. Your network address is used to limit how many messages can be sent in a short time, and is not kept with the message. We keep messages to answer them and to improve the app, and delete yours when you ask, its Discord copy included (section 13).

12. Changes to this policy

We update this page before releasing a version of Revona that collects a new kind of data, or uses data for a new purpose. A change within the kinds in section 2, such as one more figure in the statistics, does not change it. The "Last updated" date above always reflects the current text.

13. Contact

BrotherAI · brotheraicompany@gmail.com