Revel Privacy Policy

Effective date: July 31, 2026

This Privacy Policy explains how Andy Liang, an individual residing in Virginia (“REVEL,” “we,” “us”) collects, uses, shares, and protects your personal information when you use the REVEL app, website, and related services (the “Service”). It is part of your agreement with us under the [Terms of Service].

We wrote this to be readable. If anything is unclear, contact us at cookedevents123@gmail.com.

1. The Short Version

REVEL is built around real-world events, so location is central to the product. Precise location is collected only with your permission, and you control when it’s on and what others see.
When you check in to an event, other people at that event (and the host) can see that you’re there. That’s the point of the feature — but it’s your choice to check in.
Your Flash and 33h posts are designed to disappear, and we delete them on schedule — but we can’t stop other people from screenshotting them first.
We do not sell your personal information, and we do not currently use it for cross-context behavioral advertising.
Hosts get limited attendee information to run their events, under contractual restrictions — they can’t market to you without your separate opt-in.
You can access, correct, download, or delete your data, and you must be 18 or older to use REVEL.

The rest of this policy is the detail behind those sentences.

2. Information We Collect

a. Information you give us

Account and profile: username, phone number, password, and your 8 profile photos and bio details you choose to add. We do not collect an email address for your account.
Content: photos and posts (including Flash and 33h posts), captions, comments, ratings and reviews of events and hosts, and messages you send to matches.
Event activity you initiate: events you RSVP to, events you check in to, Waves you send, and events you create or cohost.
Communications with us: support requests, reports you file, survey responses.

b. Information collected automatically

Location information: with your permission, precise (GPS-level) location from your device. We use it for the features in Section 4. If you deny permission, we may still infer approximate location (city-level) from your IP address to show nearby events. Precise location is sensitive data and is collected only with your consent, which you can withdraw at any time in your device or app settings.
Usage information: how you use the app — screens viewed, features used, events viewed, Waves sent and received, check-in times, content interactions.
Device and log information: device model, operating system, app version, language, IP address, device identifiers, crash logs, and diagnostic data.
Approximate proximity signals: to power Spontaneous Events, we process the locations of users who have location enabled to detect when several users are gathered in the same area (see Section 4(c)).

c. Information from others

Other users: content that depicts or mentions you (e.g., a photo taken at an event you attended), Waves sent to you, and invitations.
Hosts: if a host adds you to a guest list or checks you in.
Service providers and partners: delivery status from communication providers, and fraud or security signals.

We do not ask for or collect your contacts book unless you explicitly use a contact-based friend-finding feature, in which case we will ask for permission at that time and explain what we do with it.

3. How We Use Information

We use personal information to:

Provide the Service: create your account, display your profile, show nearby and recommended events, process RSVPs and check-ins, deliver Waves, create matches, enable messaging between matches, and display your posts to the audiences you choose.
Personalize discovery: rank and recommend events based on your activity, interests, ratings, connections, and (with permission) your location.
Power Spontaneous Events: detect clusters of users in the same area and prompt those users about creating or joining a spontaneous gathering.
Keep the platform safe: detect and prevent fraud, spam, fake events, abusive behavior, and violations of our Terms and Community Guidelines, including through automated analysis of content and activity; enforce age requirements; and protect users’ rights and safety.
Communicate with you: service messages, security alerts, check-in confirmations, event reminders and updates from events you joined, and — only with your opt-in — marketing messages, which you can stop at any time. Because we do not collect an email address, we reach you through in-app messages, push notifications, and text messages to the phone number on your account. Standard message and data rates may apply; reply STOP to any text to stop marketing texts.
Improve and develop the Service: debugging, analytics, research on how features are used, and developing new features. Where possible we use aggregated or de-identified data for this.
Comply with law: meet legal, tax, and regulatory obligations, respond to lawful requests, and establish or defend legal claims.

We do not use your personal information for automated decisions that produce legal or similarly significant effects about you without human involvement.

4. Location: How It Actually Works

Because location is the heart of REVEL, the following describes how our location features currently work:

(a) Discovery. With location permission on, we use your location to show events near you, at the radius you configure. This use is visible only to you.
(b) Check-in and the event map. When you check in to an event, your attendance becomes visible to other checked-in attendees and to the host, and you may appear on that event’s attendee map. Friends may see which event you are at, according to your settings. Checking in is always an action you take — we never check you in automatically.
(c) Spontaneous Events. If you have location enabled, our systems may detect that you and other users are gathered in the same area and prompt you about starting or joining a Spontaneous Event. Until you accept, other users are not shown your identity or location — they may only see aggregate signals (e.g., that activity exists in an area).
(d) What we don’t do. We do not broadcast your continuous real-time location to other users outside of the event contexts you opt into, and we do not sell location data.
(e) Controls. You can turn precise location off at the device level at any time; you can leave (un-check-in from) an event; and you can control friend visibility in settings. Turning location off limits location-based features but does not affect the rest of the app.
(f) Retention. Your last precise location point is retained until you turn off location tracking or on account deletion; check-in records (that you attended an event) are kept as part of your profile history until you delete them or your account.

5. How Information Is Shared

(a) With other users. Your profile (username, photos, bio), your public posts, your ratings, your attendance at events you check in to, and your messages — with the other people in that conversation, whether it is a one-to-one chat from a match, a group chat, or an event chat. Your “Events Attended” history appears on your profile per your settings.
(b) With hosts and cohosts. When you RSVP or check in, the event’s host and cohosts can see your name/username, profile photo, RSVP status, and check-in status, so they can run the event. Under our Host & Organizer Agreement, hosts may use this only to operate the event, may not sell it, and may not market to you without your separate opt-in consent. Hosts are independent parties, and their own handling of information is also subject to applicable law and, where they have one, their own privacy policy.
(c) Service providers. Companies that work for us under contract: cloud hosting, content delivery, analytics, customer support, communications (push/SMS/email), safety and moderation tools, and AI infrastructure providers. They may use your information only to provide services to us.
(d) Legal, safety, and rights. We may disclose information when we believe in good faith it is required by law or legal process; or reasonably necessary to prevent fraud or abuse, protect the safety of any person, enforce our Terms, or protect our rights and property. Where the law allows and it would not create risk, we try to notify you of legal demands for your data.
(e) Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy’s commitments.
(f) Aggregated or de-identified data. We may share statistics that do not identify you (e.g., “1,200 people attended events in Blacksburg this weekend”).
(g) With your consent. Any other sharing happens only if you direct or agree to it.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. If that ever changes, we will update this policy first and provide the opt-outs required by law.

6. Ephemeral Content: What “Disappearing” Means

Flash posts are removed from other users’ feeds after they are viewed and do not appear on your profile. We delete them from our production systems within 1 day of expiry.
33h posts are visible for 33 hours and then removed from the app and deleted from our production systems.
Backups. Deleted content may persist in encrypted backups for up to 90 days before being purged.
Safety and legal holds. We may retain specific content beyond these windows where necessary to investigate violations, protect safety, or comply with a legal preservation obligation — in which case it is kept only as long as needed for that purpose and is not restored to the app.
Other people. We cannot control screenshots or recordings made by people who saw your content while it was live. Treat every post accordingly.

7. How Long We Keep Information

Account and profile data: for as long as your account exists.
Messages: until you or your recipient deletes them, or your account is deleted. Deleting your account removes the messages you sent — and the photos you sent in them — from the conversations they were in, including for the people you sent them to. A one-to-one conversation with you then disappears from the other person’s message list, including the messages they sent you in it; group and event chats stay, without your messages in them.
Event history (RSVPs, check-ins): until you delete individual records or your account.
Events you hosted: an event you created stays on the Service for the people who attended it after your account is deleted, with your name detached from it.
Precise location points: Until you turn off location tracking or your account is deleted (Section 4(f)).
Ephemeral content: per Section 6.
Logs and diagnostics: typically 12 months.

8. Your Rights and Choices

Everyone, regardless of location

Access and portability: view your information in the app and request a copy of your data in a portable format.
Correction: edit your profile and account details at any time; ask us to correct anything else.
Deletion: delete individual content, event history entries, or your entire account in settings, or by contacting us.
Location controls: Section 4(e).
Marketing: opt out of marketing texts by replying STOP, or turn them off in settings; service messages (security alerts, event reminders) will still be sent.
Push notifications: control in your device settings.

To exercise rights you can’t complete in-app, email cookedevents123@gmail.com. Because your account has no email address on file, we will verify your identity with a one-time code sent to the phone number on your account, and we may ask you to confirm the request from inside the app. We respond within the time required by your local law (generally within 45 days, extendable once where permitted). We will not discriminate against you for exercising your rights.

Virginia residents (VCDPA)

You have the rights to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling for significant decisions. We do not sell personal data or process it for targeted advertising or such profiling. Because precise geolocation is sensitive data, we process it only with your consent. If we decline a request, you may appeal by replying to our decision or emailing cookedevents123@gmail.com with the subject “Privacy Appeal”; we will respond within 60 days, and if we deny your appeal you may contact the Virginia Attorney General at [https://www.oag.state.va.us/contact-us/contact-info].

California residents (CCPA/CPRA)

You have the rights to know, access, correct, delete, and obtain a portable copy; the right to opt out of “sale” or “sharing” of personal information (we do none, and we honor the Global Privacy Control signal as an opt-out where applicable); the right to limit use of sensitive personal information (we use precise geolocation only to provide the features you request, with consent); and the right to non-discrimination. You may use an authorized agent with proof of authorization. In the last 12 months we collected the categories of information described in Section 2, for the purposes in Section 3, and disclosed them to the recipients in Section 5; we did not sell or share personal information as those terms are defined by the CCPA.

EEA/UK users

If we offer the Service to you in the EEA or UK, we process your data on the legal bases of contract performance (providing the Service), consent (precise location, marketing, sensitive data), legitimate interests (safety, security, service improvement — balanced against your rights), and legal obligation. You additionally have the rights to object, to restrict processing, to withdraw consent at any time, and to complain to your local data protection authority.

9. Security and Security Incidents

We use reasonable administrative, technical, and physical safeguards designed to protect personal information based on the nature and sensitivity of the information we process. These safeguards may include encryption in transit, encryption at rest for sensitive information such as precise location, access controls, authentication measures, monitoring, logging, testing, and incident-response procedures.

However, no application, network, storage system, transmission method, or security measure is completely secure or free from errors. Software defects, configuration errors, malicious attacks, unauthorized access, service-provider failures, and other events may result in the accidental loss, alteration, exposure, or unauthorized access to information despite our reasonable safeguards. We therefore cannot guarantee absolute security or that the Service will always be free from vulnerabilities.

If we become aware of a security incident involving personal information, we will investigate it, take reasonable steps to contain and remediate it, and notify affected individuals and government authorities when required by applicable law.

You are responsible for maintaining the confidentiality of your login credentials, using a strong and unique password, and notifying us promptly at cookedevents123@gmail.com if you suspect unauthorized access to your account.

Nothing in this section limits any rights, remedies, responsibilities, or obligations that cannot legally be limited or waived under applicable law.

10. Age Requirement

REVEL is for people 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete the account and its data. If you believe a user is under 18, report it in-app or email cookedevents123@gmail.com.

11. Where Your Information Is Processed

We are based in the United States, and your information is stored and processed in the United States (and in other countries where our service providers operate), which may have different data protection laws than your country. Where required, we use appropriate safeguards for international transfers.

12. Third-Party Services

The Service may contain links to, or integrations with, third-party services (map providers, social platforms you share to). Their privacy practices are governed by their own policies, and this policy does not apply to them.

13. Changes to This Policy

We may update this policy as the Service and the law evolve. For material changes we will give you at least 30 days’ advance notice in the app, and by text message to the phone number on your account, before the changes take effect. The “Effective Date” at the top always tells you when the current version took effect. Prior versions are available on request.

14. Contact Us

Privacy questions and requests: cookedevents123@gmail.com
Security reports: cookedevents123@gmail.com