RevoDay
Privacy Policy
Last updated: October 21, 2026
This policy explains how RevoDay handles information when you browse, sign in, complete activities or connect a calendar.
Who is responsible
The service is operated by SIA MNtrade. Contact [email protected] for privacy questions, account requests or information about the service operator.
Information we handle
Your account stores your email address, display name, authentication sessions, selected interests, language, timezone and country. When you first choose a country, we may preselect one from your connection's approximate location as reported by Cloudflare; we store only the country you confirm, not your IP address. Questions show the share of correct answers only once at least 10 people have answered. We store assigned activities, attempts, completions, Revo XP and progress history. Optional activity ratings and problem reports are stored with the account and completed activity so we can review content quality. Content editors see aggregate ratings and report counts for each activity version, not reviewer identities. Calendar settings include your selected delivery time, provider connection status and delivery results. If you use friends, we store your invite link, your friend connections, who invited you and the question links you share. Friends see your display name, total Revo XP, current streak and whether you finished today, never your email, answers or private links. If friends cheer you with a preset emoji, we store who sent it and for which day. People who open a question you share see your display name; their guest answers are checked but not stored. If you play the daily game, we store each run: your points, answer time and whether each round was right, wrong or timed out. Friends see your result. Country and world boards show your points, time and, unless you hide them, your nickname and country; until you choose a nickname, or while it is hidden, you appear as a numbered player. Your display name never appears there. People who play from a game link you share see your display name and today's points; their run is stored without a name, email or account and never appears on a board. If you create a friend challenge, we store its text and answer options with your account; anyone with its link sees your display name with it, and you see which friends answered and whether they were right. A player's answer to a challenge is stored with their account; a guest's answer is not stored. Players can report a challenge; three reports hide it, and staff then either hide it for good or keep it, and that decision is recorded. Our infrastructure receives network information such as an IP address when responding to requests. We do not add that address to the visitor statistics database. Private sign-in and calendar links are not recorded in application access logs.
Nickname, birthday, birth year and gender
Unless you hide it, your nickname is shown to everyone on the country and world boards; it must not be offensive or pose as someone else. Other players can report a nickname; staff then either keep it or clear it, and that decision is recorded. All other profile fields are optional and you can change or clear them in My profile at any time. Your birthday (day and month) is used to congratulate you and give a birthday Revo XP bonus; if you allow it, friends see that it is your birthday on the day itself, never the year. Your birth year is never shown to anyone. Your gender is not shown either for now; when we open separate women's and men's boards, other players will see which of them you are on. We also use your birth year and gender to count players by age band and gender, for example to describe our audience to advertisers or partners. Such counts include only adults, show no group of fewer than 50 players and never contain names, email addresses or other details that identify you. We do not sell these fields, give them to advertisers individually or use them to show you personalised advertising. We use the birth year to check that you are at least 13, the minimum age for RevoDay. We process these optional fields on the basis of your choice to provide them, and the aggregate counts on the basis of our legitimate interest in understanding and funding the service; clearing a field stops its use from then on. The one-time Revo XP for a complete profile does not depend on the answers you choose, and “Prefer not to say” counts as an answer.
Why we use it
We use account, activity and calendar data to provide the service you request, including sign-in, personalised sessions, progress and optional calendar delivery. This processing is necessary to perform our agreement with you. We process optional ratings and problem reports on the basis of our legitimate interest in maintaining useful, accurate content. They help us identify activity versions that need review; submitting them is voluntary and they do not affect XP or account standing. We use limited operational information to prevent abuse, protect accounts and diagnose failures, based on our legitimate interests in running a secure service. Where processing is required by law, the legal obligation is our basis. We do not enrol you in marketing emails merely because you create an account.
Google and subscribed calendars
Connecting Google Calendar is optional and separate from signing in. We request permission to create a RevoDay calendar and manage calendars created by this app (calendar.app.created). We do not request access to read your other calendars. We store the app calendar identifier and encrypted OAuth tokens to keep the connection working, and send Google event titles, delivery times and private activity links. For an ICS subscription, anyone with your private feed URL can obtain its events. A private event link allows access to one Daily Session, not your whole account. Keep both kinds of link private. You can disconnect or revoke access in Calendar settings; you can also remove Google's permission in your Google Account. Information received through Google APIs is used only for the requested calendar feature, not advertising, sale, unrelated profiling or model training. Our use and transfer of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.
Aggregate traffic statistics
We count eligible full-page requests by UTC date, public page, broad source (for example Google or direct) and approximate connection country when Cloudflare supplies it. These counts are not unique visitors. Reloads may count and some navigation, bots and opted-out requests are excluded. We do not store a visitor identifier, individual browsing history, full referrer, query string, user agent or IP address in these counters. VPNs may show their exit country. Your account's optional country is a separate preference. You can exclude your browser from these counters on the Cookies & Privacy Choices page. We also honour Do Not Track and Global Privacy Control signals for this counting. We do not use advertising pixels or third-party behavioural analytics in this MVP.
Service providers and transfers
Our server hosting provider stores the application and PostgreSQL database. Cloudflare provides website delivery and network protection. Brevo delivers requested sign-in emails. If you choose Continue with Google, Google confirms your sign-in and shares your name and email address with us. Google processes calendar data only if you connect its service. These providers may process information outside the EEA; applicable provider agreements and lawful transfer safeguards, such as standard contractual clauses where required, govern those transfers. Contact us for details of the providers and safeguards applicable to your data. Authorised staff have access according to their role. We do not sell personal information.
How long we keep information
Account and progress data remain while needed to provide your account. You can delete your account yourself at any time in Settings → Delete account (also at revoday.com/account/delete) or request deletion by email. Deletion takes effect immediately: your email address, sign-in, profile details, friends, friend challenges you created, saved facts, notices and calendar connections are removed. Answers, Revo XP and game results remain only as anonymous statistics that are no longer linked to you. We may retain limited information where required by law or needed for a specific dispute or security investigation. Sign-in links expire after 10 minutes; account sessions expire after 7 days. Expiry prevents use of the credential and does not itself erase every associated database record. Disconnecting a calendar stops new delivery and initiates removal of its active connection credentials; credentials needed to retry revocation can remain until that cleanup succeeds. Already delivered events may remain in your calendar until you remove them, and past progress remains part of your account history. Traffic counters cover at most the latest 90 UTC dates and older counters are pruned during collection and scheduled maintenance. Automatic daily backups are kept for approximately 30 days. Separate deployment recovery copies remain only while needed for rollback review. These private copies may contain earlier records; they are restricted and used for recovery, not routine access.
Your choices and rights
You can change preferences and disconnect calendars in your account. Under applicable data-protection law, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. If we rely on consent for a future optional purpose, you can withdraw it. Send requests to [email protected]; we may need to verify your identity. You can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local data-protection authority. We do not make legal or similarly significant decisions about you solely through automated processing.
Security and changes
We use HTTPS, restricted database roles, separate administrator access, encrypted calendar credentials and private backups. No online service can guarantee absolute security. Do not share private links or sign-in emails. Material changes to this policy will be described here and, where appropriate, communicated to account holders before a new purpose begins.
SIA MNtrade · 40203483994 · Metalurgu iela 21-2, Liepaja, LV-3401, Latvia · [email protected]