Revely
Privacy Policy
Last updated 26 August 2026
The short version. Revely reads product labels and tells you whether what is in them matters for you. To do that it needs to know what you are avoiding — allergies, dietary rules, medical conditions. That is health information, and we treat it as such.
We do not sell it. We do not use it for advertising. There are no advertising or tracking SDKs in the app. Label photos are not kept after they are read. You can delete everything from inside the app, and deletion means deletion.
Who we are
Revely is provided by Dozy Labs LLC. For anything in this policy, including requests to see or delete your data, write to hello@dozylabs.net.
What we collect, and why
Health information you enter
Profiles are the heart of the app. A profile can record allergens and how severe each one is (including anaphylaxis), dietary rules, and health conditions — which may include pregnancy, breastfeeding, an infant under twelve months, kidney disease, high blood pressure, diabetes, coeliac disease, and similar. You may create profiles for other people, such as your children.
We use this for one purpose: deciding what to tell you about a label you scanned. It is never used for advertising, never sold, and never shared with anyone outside the processors listed below.
Before you create an account, profiles are stored only on your device and sent with a scan to produce that scan's answer. They are not saved on our servers until you sign in and choose to keep them.
Label photos
When you scan a product, the photo is sent to OpenAI, which reads the ingredient list out of it and returns text. We do not store the photo. Neither our servers nor your scan history keep the image after the label has been read.
We do keep a one-way cryptographic hash of the image — a fixed-length fingerprint that the original cannot be reconstructed from — so that re-scanning the same label does not have to be paid for and processed twice.
Your scans
If you are signed in, we save the product name, the ingredients we read, the result we produced, the risk level, and when it happened, so that your history is there when you come back. Signed-out scans are not attached to any account.
Your account
You sign in with Apple or Google. We receive and store your email address and, if the provider supplies them, your name and profile picture. We never receive your Apple or Google password. If you use Apple's Hide My Email, we only ever see the relay address, which is the point of it.
A device identifier
So that you can try the app before creating an account, your device generates a random identifier the first time it runs and stores it in the iOS keychain. It counts free scans. It is not your advertising identifier, it contains nothing about you or your hardware, and it is not shared with anyone. When you sign in, it is linked to your account once, so that the free scans you already used are not granted a second time.
Subscription status
If you subscribe, Apple handles the payment. We never see your card, your billing address, or your Apple ID. Apple tells RevenueCat, our subscription processor, that a subscription exists, and RevenueCat tells our server whether your account is currently entitled and when the period ends. That is all we store about billing.
Diagnostics
When the app crashes it sends us the error message, the technical stack trace, the name of the screen you were on, and the app and operating system versions. The report is scrubbed on your device first, and it carries the screen's name only — never what was on it, so a crash never carries scan or profile contents. We also count a small number of product events, such as the paywall being shown, to understand whether the app works.
What we never do
- We never sell or rent your personal information to anyone.
- We never use your health information for advertising or marketing.
- We do not include advertising SDKs, and we do not track you across other apps or websites. The app asks for no tracking permission because it does no tracking.
- We do not build profiles of you for anyone else, and we share nothing with data brokers.
Who processes your data for us
These are the only companies that touch your data, and each does so only to run part of the service.
| Who | What they receive | Why |
|---|---|---|
| OpenAI | Label photos and ingredient text | Reading labels and analysing ingredients. Sent through the business API, which does not use the data to train models. |
| Apple / Google | Your sign-in token | Verifying that you are who you signed in as. Verification only. |
| Apple | Your payment | All subscription billing. We receive none of it. |
| RevenueCat | Subscription status and an account identifier | Keeping entitlement correct across your devices. |
| Neon | The database contents | Hosting the database. |
| Fly.io | Traffic to the service | Running the servers. |
| Resend | Your email address, if you write to us | Delivering that message. |
These providers process data in the United States. If you are writing to us from elsewhere, your information is transferred there to run the service.
How long we keep things
- Label photos: not kept. They exist only for the seconds it takes to read them.
- Profiles and scan history: until you delete them, or until you delete your account.
- Crash reports and product events: kept for troubleshooting and then discarded. Crash reports lose their link to your account when the account is deleted; product events do the same.
- Backups: deletions reach our backups as those backups age out on their normal schedule.
Deleting your account
You can delete your account from inside the app, on the Account screen. It removes your account, your profiles, and your scan history. This is not a request queue and not a deactivation — the records are deleted.
Deleting your account does not cancel a subscription. Your subscription lives with Apple, not with us, and only you can cancel it — in your Apple ID settings. Please cancel first, then delete, or you will keep being charged for an account that no longer exists.
One thing survives, deliberately, and it is not about you: when the app meets an ingredient it cannot classify, it records the ingredient name so we know what to add next. Those rows have never had an account attached to them and so contain nothing to delete.
Your rights
Wherever you live, you may ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to hello@dozylabs.net and we will respond within 30 days.
If you are in the European Economic Area or the United Kingdom, our lawful basis for handling ordinary account data is performing our contract with you. For health information, it is your explicit consent, given when you enter it — and you may withdraw that consent at any time by deleting the profile, which stops the processing.
If you are in California, we do not sell or share personal information as the CCPA defines those terms, and we will never discriminate against you for exercising any right described here.
Children
Revely is not directed at children, and you must be at least 13 to hold an account. A parent may of course create a profile describing a child, including an infant — that information belongs to the parent's account and is deleted with it.
Security
Traffic is encrypted in transit. The database is encrypted at rest. Sign-in tokens are held in the iOS keychain rather than in ordinary app storage. Access to production data is limited to those who need it to operate the service.
No service can promise perfect security, and we will not pretend otherwise. If we ever discover a breach affecting your information, we will tell you and the relevant regulators as the law requires.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect. Continuing to use Revely afterwards means the new version applies.
Contact
Dozy Labs LLC — hello@dozylabs.net