Privacy Policy
Last updated
This policy explains what data REVUPI handles, why, who we share it with and how you can exercise your rights. It covers the app (web, iPhone and Android) and this website.
It was written on the basis of Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
Who is responsible
The controller of your data is Metaquantics Technologies, which operates REVUPI.
For any privacy matter, write to hello@revupi.com.
Data we handle
We handle only what the app needs to work:
- Sign-up: name, email and password (stored only in encrypted form, as a hash). Optional: WhatsApp number, gender, age and photo.
- Vehicles and usage: make, model, plate, year, mileage, vehicle photos, fill-ups, maintenance, alerts, taxes, appointments, expenses and documents that you add.
- Photos of receipts and quotes that you choose to send for automatic reading.
- Preferences: country, language, currency, units of measure and notices.
- Invitations: the email of the person you invite to a vehicle.
- Minimal technical data, such as the IP address, used for security and to limit abuse.
Sign in with Google (optional)
If you choose to sign in with Google, we receive from Google only your name, your email (already verified by Google) and a Google account identifier. We do not receive your Google password and we do not access other data in your account, such as emails, contacts or files.
We use this information only to create and identify your REVUPI account. We do not sell it or use it for advertising. Our use of information received from Google follows the Google API Services User Data Policy, including the Limited Use requirements. Google, in turn, knows that you use REVUPI, as set out in its own policy. When you delete your account, the link to your Google account is deleted too.
What we use the data for
- Providing the app: keeping your history and calculating consumption, costs, estimates and alerts.
- Sending service emails, such as password resets, and the notices you turned on.
- Keeping things secure, preventing fraud and limiting abuse.
- Fixing errors and improving the app.
- Meeting legal obligations.
The legal bases are performance of the contract (using the app), your consent where needed (such as location and photos), legitimate interest (security) and legal obligations.
Third-party services we use
To run REVUPI we use providers that handle data on our behalf, and public services that the app queries:
- Fly.io: hosts the REVUPI API (São Paulo region).
- Supabase: database (São Paulo region).
- Vercel: hosts the web app and this website.
- Cloudflare: DNS service, which points the revupi.com address to our servers.
- Resend: sends service emails, such as password resets (receives your name and email).
- Google: sign-in with Google, if you choose it.
- Anthropic: reading receipts and quotes from photos and diagnosis by symptoms, when those features are on (see the section on artificial intelligence).
- FIPE: vehicle price lookups by make, model and year; we send no personal data.
- OpenStreetMap (Overpass service): searching for gas stations and repair shops near you (see the section on location).
- jsDelivr: content delivery network (CDN) used to load brand logos; the service sees your browser's IP address.
Location
The app asks for your location only when you use a feature that depends on it, and only with your permission.
- Nearby gas stations and repair shops: the device's position is sent to the Overpass service of OpenStreetMap to list nearby places. REVUPI does not store that position.
- Records with a place: when you log a fill-up or a maintenance job, the app can attach the coordinates of the place to the record and store them with the rest of the data.
You can deny or withdraw the permission in your device settings.
Artificial intelligence
Some features use an artificial intelligence model from Anthropic, when they are turned on on the server:
- Reading a receipt or quote from a photo: the image you choose to send is processed to extract the data.
- Diagnosis by symptoms: the text you write and the vehicle details you entered (make, model and year) are processed to generate the answer.
We do not send your name, email or password. The content sent is not written to our technical logs. Answers may contain mistakes: check them before saving or deciding.
International transfers
Our API and database are in São Paulo. Some providers, such as Anthropic, Resend, Google, Vercel and jsDelivr, may handle data outside Brazil. This may involve international data transfers, which the LGPD allows with the safeguards provided by law.
How long we keep data
We keep your data for as long as your account exists. When you delete the account, we erase your vehicles, records and photos, except what the law requires us to keep. Database backups may hold the data for a limited period until they are replaced.
Your rights
Under the LGPD you may:
- confirm that we handle your data and access it;
- correct incomplete, inaccurate or outdated data;
- ask for anonymization, blocking or deletion of unnecessary data or data handled in breach of the law;
- ask for portability of your data;
- find out who we share your data with;
- withdraw a consent you have given;
- lodge a complaint with the Brazilian National Data Protection Authority (ANPD).
How to exercise them: correct your data in the app, under Profile. To delete your account, go to the app, Profile, Privacy and Terms, Delete account (the app asks for your password). If you signed in only with Google, or prefer, write to hello@revupi.com from your account email; we reply within the legal deadline.
Security
We use encrypted connections (HTTPS), passwords stored as hashes, restricted access to data and limits against abuse. No system is completely immune; if you notice misuse of your account, tell us at hello@revupi.com.
Changes to this policy
We may update this policy. When a change is significant, we will tell you in the app. The date at the top shows the last update.
Contact
Metaquantics Technologies. Privacy and requests about your data: hello@revupi.com.