Privacy Policy
Last updated: April 28, 2026
Reva ("we", "our", "the app") is an AI-powered personal finance companion. Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights.
What We Collect
- Google account info (name, email, profile photo) — for authentication only
- Bank SMS notifications — parsed locally on your device to extract transaction data. We use Android's Notification Listener Service, not READ_SMS.
- Savings goals — synced to our secure database (Supabase) so they persist across devices
- Profile answers (name, salary, bank, savings target) — stored locally on your device
- Learning progress (XP, completed lessons) — stored locally on your device
What We Don't Collect
- We do not upload your SMS or transaction data to any server
- We do not read your full SMS inbox — only bank notification alerts
- We do not share your data with third parties
- We do not sell your data
- We do not use your data for advertising
AI Processing
When you chat with Reva, your questions and relevant financial context are sent to AI providers (Cerebras, Groq, Google) to generate responses. No raw SMS or full transaction history is sent — only aggregated summaries needed to answer your specific question.
Data Storage
- Transaction data: device only (AsyncStorage)
- Goals: encrypted in Supabase (row-level security per user)
- Chat history: device only
- Authentication: Supabase Auth (Google OAuth)
Notification Listener Access
Reva uses Android's Notification Listener Service to read bank SMS notifications as they arrive. This is used solely to parse and categorize your financial transactions. You can revoke this access at any time via Android Settings > Notification Access.
Your Rights
You can revoke notification access, sign out, or delete your account at any time. Uninstalling the app removes all local data. For server-side data deletion, contact us.
Contact
Questions or data deletion requests? Email us at revaappofficial@gmail.com