Revvlow Tech Pvt. Ltd. | Privacy Policy
Version: 1.0.0
Effective Date: 2026-03-03
Last Updated: 2026-05-26
1. Overview & Contact
Revvlow Tech Pvt. Ltd. ("Company", "we", "us") is the Data Controller for personal data collected through the Revvlow platform, including the Consumer and Vendor Apps. We operate primarily within Nepal.
Privacy Contact: privacy@revvlow.com
General Enquiries: support@revvlow.com
Response Time: Within 30 days of a verified request.
Policy URL: www.revvlow.com/privacy-policy
2. Data Collection
We collect data necessary to provide our services. The type of data depends on your account type:
A. Consumer Data
Category
Examples
Primary Purpose
Identity & Contact
Name, email, phone number
Account creation & support
Transaction
Order history, Surprise Bag records
Order processing & receipts
Location
IP-based approximate location (collected automatically when you use the listings screen); precise GPS location (collected only when you explicitly grant permission through your device’s Settings > Privacy & Security > Location Services)
Displaying Surprise Bag listings from food Vendors near you. For example, when you open the listings screen, your location is used to sort and show available bags closest to you so you can find a convenient pickup. Precise GPS is used only if you grant permission and only for this same purpose. You can revoke location access at any time via your device Settings > Privacy & Security > Location Services > Revvlow.
Usage & Technical
OS version, IP, crash logs, interactions
Diagnostics & platform improvement
Preferences
Dietary preferences, favorite Vendors
Improving listing relevance
B. Vendor Data
Category
Examples
Primary Purpose
Identity & Contact
Rep name, email, phone number
Account setup & operations
Store Profile
Business description, hours, category
Public-facing store profile
Operational
Listing creation, pricing, windows
Order management
Financial
Revenue summaries, payout records
Settlements & tax reporting
3. Legal Basis for Processing
We process data under the following legal frameworks, including the Individual Privacy Act, 2075 (Nepal) and, where applicable, the GDPR.
Performance of a Contract: To deliver the services you requested (e.g., fulfilling an order).
Legitimate Interests: For fraud prevention, security, and app analytics.
Consent: For precise GPS access or marketing communications.
Legal Obligation: To comply with tax laws or regulatory requests.
4. Data Sharing & Transfers
We do not sell your personal data. We only share it with:
Vendors: Consumers' first names and order details are shared to fulfill pickups.
Consumers: Public Vendor profiles are visible to all users.
Service Providers: Cloud hosting and anonymized analytics tools.
Legal Authorities: When required by law or to protect user safety.
International Transfers: Data is primarily stored in Nepal. If transferred abroad (e.g., to global cloud providers), we use contractual protections to ensure your data remains secure.
5. Retention & Deletion
We keep your data only as long as necessary:
Active Accounts: For the duration of the relationship.
Financial Records: 7 years (for tax and audit purposes).
Support Queries: 2 years.
Account Deletion: Data is anonymized or deleted within 30 days of a verified request (Settings > Account > Delete Account).
6. Your Rights
You have the right to:
Access & Rectify: Request a copy of or correct your data.
Erasure: Request data deletion (where legal obligations allow).
Data Portability: Receive your data in a machine-readable format.
Withdraw Consent: Revoke GPS location access at any time via your device Settings > Privacy & Security > Location Services > Revvlow. To withdraw marketting consent or any other consent based processing, contact privacy@revvlow.com.
7. Security & Governance
We utilize industry-standard measures to protect your information:
Encryption: Data is encrypted in transit (TLS/HTTPS) and at rest.
Access Control: Strict role-based limits on who can view personal data.
Governance: We adhere to principles of data minimization, accuracy, and accountability.
Children’s Privacy: Our services are not directed at children under 16. We do not knowingly collect data from this age group.
Policy Changes: Material changes will be notified via the app at least 14 days before taking effect.
8. App Permissions
The Revvlow app requests the following device permission. The purpose string displayed to you on your device when the permission is requested reads as follows:
Location (When in Use) : Revvlow uses your location to show Surprise Bag listings from food vendors near you. For example, when browsing listings, your location helps us display and sort vendors by proximity so you can find available bags nearby.
The app requests location only while in use (“When In Use”). It does not request background location access. Location is not used for advertising, profiling, or any purpose other than displaying nearby listings as described above.
9. App Tracking Transparency & Data Linked to You
No Cross-App Tracking: Revvlow does not track you across third-party apps or websites for advertising purposes. We do not share data with data brokers or use advertising networks that profile you.
For Apple App Store purposes, the following summarizes how data collected by this app is classified:
Data Linked to You (associated with your account) : Contact Info (name, email, phone); Location; Transaction History; Usage Data; Identifiers (device ID, session token).
Data Not Linked to You (anonymized or not tied to identity) : Crash logs; Aggregate analytics; Performance diagnostics.
Data Used to Track You : None. Revvlow does not use any data to track users across other companies' apps or websites.
These disclosures are provided in alignment with Apple App Store Guideline 5.1.2 and the App Store privacy nutrition label requirements.