RevoDay
Privacy Policy
Last updated: October 1, 2026
This policy explains how RevoDay handles information when you browse, sign in, complete activities or connect a calendar.
Who is responsible
The service is operated by SIA MNtrade. Contact [email protected] for privacy questions, account requests or information about the service operator.
Information we handle
Your account stores your email address, display name, authentication sessions, selected interests, language, timezone and optional country. We store assigned activities, attempts, completions, Revo XP and progress history. Calendar settings include your selected delivery time, provider connection status and delivery results. Our infrastructure receives network information such as an IP address when responding to requests. We do not add that address to the visitor statistics database. Private sign-in and calendar links are not recorded in application access logs.
Why we use it
We use account, activity and calendar data to provide the service you request, including sign-in, personalised sessions, progress and optional calendar delivery. This processing is necessary to perform our agreement with you. We use limited operational information to prevent abuse, protect accounts and diagnose failures, based on our legitimate interests in running a secure service. Where processing is required by law, the legal obligation is our basis. We do not enrol you in marketing emails merely because you create an account.
Google and subscribed calendars
Connecting Google Calendar is optional and separate from signing in. We request permission to create a RevoDay calendar and manage calendars created by this app (calendar.app.created). We do not request access to read your other calendars. We store the app calendar identifier and encrypted OAuth tokens to keep the connection working, and send Google event titles, delivery times and private activity links. For an ICS subscription, anyone with your private feed URL can obtain its events. A private event link allows access to one Daily Session, not your whole account. Keep both kinds of link private. You can disconnect or revoke access in Calendar settings; you can also remove Google's permission in your Google Account. Information received through Google APIs is used only for the requested calendar feature, not advertising, sale, unrelated profiling or model training. Our use and transfer of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.
Aggregate traffic statistics
We count eligible full-page requests by UTC date, public page, broad source (for example Google or direct) and approximate connection country when Cloudflare supplies it. These counts are not unique visitors. Reloads may count and some navigation, bots and opted-out requests are excluded. We do not store a visitor identifier, individual browsing history, full referrer, query string, user agent or IP address in these counters. VPNs may show their exit country. Your account's optional country is a separate preference. You can exclude your browser from these counters on the Cookies & Privacy Choices page. We also honour Do Not Track and Global Privacy Control signals for this counting. We do not use advertising pixels or third-party behavioural analytics in this MVP.
Service providers and transfers
Our server hosting provider stores the application and PostgreSQL database. Cloudflare provides website delivery and network protection. Brevo delivers requested sign-in emails. Google processes calendar data only if you connect its service. These providers may process information outside the EEA; applicable provider agreements and lawful transfer safeguards, such as standard contractual clauses where required, govern those transfers. Contact us for details of the providers and safeguards applicable to your data. Authorised staff have access according to their role. We do not sell personal information.
How long we keep information
Account and progress data remain while needed to provide your account. You may request account deletion by email. We may retain limited information where required by law or needed for a specific dispute or security investigation. Sign-in links expire after 10 minutes; account sessions expire after 7 days. Expiry prevents use of the credential and does not itself erase every associated database record. Disconnecting a calendar stops new delivery and initiates removal of its active connection credentials; credentials needed to retry revocation can remain until that cleanup succeeds. Already delivered events may remain in your calendar until you remove them, and past progress remains part of your account history. Traffic counters cover at most the latest 90 UTC dates and older counters are pruned during collection and scheduled maintenance. Automatic daily backups are kept for approximately 30 days. Separate deployment recovery copies remain only while needed for rollback review. These private copies may contain earlier records; they are restricted and used for recovery, not routine access.
Your choices and rights
You can change preferences and disconnect calendars in your account. Under applicable data-protection law, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. If we rely on consent for a future optional purpose, you can withdraw it. Send requests to [email protected]; we may need to verify your identity. You can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local data-protection authority. We do not make legal or similarly significant decisions about you solely through automated processing.
Security and changes
We use HTTPS, restricted database roles, separate administrator access, encrypted calendar credentials and private backups. No online service can guarantee absolute security. Do not share private links or sign-in emails. Material changes to this policy will be described here and, where appropriate, communicated to account holders before a new purpose begins.
SIA MNtrade · 40203483994 · Metalurgu iela 21-2, Liepaja, LV-3401, Latvia · [email protected]