Privacy Policy
Last updated 14 October 2026
Revaster is a revision app for GCSE students, available on iOS. This policy explains what we collect when you use the app or this website, why we collect it, and the choices and rights you have over it. It applies whether or not you've subscribed to Premium.
Who we are
Revaster is run by its two founders in the United Kingdom, and we are the data controller for the personal information this policy covers. For anything to do with your data or this policy, email us at hello@revaster.com — that goes straight to us, not to a call centre.
Information we collect
What we collect depends on how you use Revaster. Taken together, here is everything the app and this website hold about you:
- Account details — the email address and password you sign up with, via Supabase, our backend provider. Your password is hashed by Supabase's authentication system; we never see it in plain text.
- Your study setup — the subject(s) you're revising, the exam board (AQA, Edexcel or OCR) and the specification option or tier you select (for example Foundation or Higher), and anything you tell us about topics you find difficult during setup.
- A short diagnostic quiz, where your subject has one — your answers are used once, to pick your starting topics, and are never scored or shown to anyone else.
- A display name or username, chosen during setup and shown to your friends, and to other students if you take part in Battles or appear together on a leaderboard.
- A profile picture, if you choose to add one — either a photo you pick from your camera roll, which we store in our file storage, or a cartoon avatar you build yourself using the in-app Mascot Lab, which involves no photo at all.
- Study activity and progress — which topics you've studied, your mastery and accuracy per topic, streaks, quiz results, any mock papers you generate and the marks you score on them, and your remaining daily energy.
- Social activity — friend connections you make or accept, your leaderboard standing, and any Battles you send, accept or complete, together with the result.
- A push-notification token, if you allow notifications — Apple gives us a device token so we can send things like streak reminders and "you've been challenged" alerts. We can't read any of your other notifications, and this gives us no other access to your device.
- Subscription status — whether you're on the free plan or Premium, which billing period, and your renewal date, all told to us by Apple. We never see your card number, billing address, or any other payment detail — Apple handles the entire purchase.
- Anything you send us — support emails, in-app feedback and bug reports, together with the basic account details that are attached automatically so we can help you.
- Basic technical data — standard request information our hosting provider needs to run the site and app securely, such as an IP-derived country and a timestamp.
What we don't collect
We don't collect your payment card details — Apple handles the entire purchase and never shares them with us. We don't read anything from your photo library beyond the one picture you actively choose to upload. We don't access your contacts, your precise location, or any other app on your device. And right now, Revaster's discussion/community board is switched off, so we're not collecting anything through it — if we turn it on in future, we'll update this policy first and let you know in the app.
How we use your information
- To run the app's core features — your subjects, progress, mock papers and energy system all depend on this data.
- To show you to the friends you've added, and to run Battles and leaderboards.
- To send you reminders and challenge notifications, if you've allowed them.
- To process your subscription through Apple, and to know whether you should have Premium access.
- To reply to your support emails and feedback.
- To keep the service secure, diagnose problems, and stop abuse.
- To meet our legal obligations.
Who we share it with
We don't sell your personal information, and we don't share it with advertisers or data brokers. We do share it with a short list of processors who help us run Revaster, each acting on our instructions:
- Supabase — our database, authentication and file-storage provider. Almost everything described above is stored with Supabase.
- Apple — distributes the app, processes every Premium payment through the App Store and StoreKit, and delivers push notifications through Apple's APNs service. Apple's own privacy policy covers what it does with your payment details, which we never see.
- Superwall — shows our subscription screen inside the app and tells us, in aggregate, how different versions of it perform. Superwall does not process payments and does not receive your payment details.
- Cloudflare — hosts this website and the app's backend, and helps protect both from automated abuse.
- Google Fonts — serves the typefaces used on this website. Loading a font means Google's servers see the requesting device's IP address, which is standard for most websites.
Where your data is stored
Our processors may store and process data outside the UK, including in the EU and the US. Where that happens, we only use processors that provide appropriate safeguards for the transfer, such as the UK's International Data Transfer Addendum or the EU's Standard Contractual Clauses.
How long we keep it
We keep your information for as long as your account is active. You can delete your account at any time from inside the app (Profile → Delete account) — this is immediate and permanent, and removes your profile, progress, friend connections, uploaded avatar and battle history. It cannot be undone, so we can't recover it afterwards even if you change your mind. Apple keeps its own transaction records under its own policies and legal obligations, even after you delete your Revaster account — that's outside our control. We may keep a limited record of support correspondence for a reasonable period, where we need to for legal or quality reasons.
Children's privacy
Revaster is built for GCSE students, who are typically 14 to 16 years old, but younger students sometimes use it too. If you are under 13, consistent with the age requirements of the app stores Revaster is distributed through, you must not create an account without a parent or legal guardian's involvement, and we'd encourage them to read this policy. If you're a parent or guardian and believe your child under 13 has given us personal information without your consent, email hello@revaster.com and we'll delete it.
Your rights
Under UK data protection law, you can ask us to show you what we hold about you, correct it, delete it, restrict how we use it, object to our use of it, or receive a copy of it in a portable format. You can delete your own account and data at any time from inside the app; for anything else, email hello@revaster.com and we'll deal with it, normally well within the 30 days the law allows.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Connections to Revaster are encrypted in transit (HTTPS/TLS). Our database uses row-level security, so your data is only ever reachable through your own account. Passwords are hashed by Supabase's authentication system and are never visible to us in plain text. Only our two founders have any administrative access to the backend.
Cookies and tracking on this website
revaster.com itself sets no cookies and runs no analytics or advertising trackers. The only third party involved in loading this site is Google Fonts, described above.
Changes to this policy
We may update this policy as the app changes or the law requires. Where we make a material change, we'll flag it in the app before it takes effect. The date at the top of this page always shows when it was last updated.
Contact us
Questions about this policy, or about your data? Email hello@revaster.com. You can also read our Terms & Conditions.