Privacy Policy
This policy explains how Cody Morrison, a sole trader trading as Rhythm Revolt Records (“we”, “us”), collects, uses, shares and protects personal information when you use the RevTalk app and this website. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). Our contact details are at the end.
1. What we collect
Your account
Your email address, phone number, or an Apple or Google sign-in identifier (whichever you use to sign in), the name you choose to show, and the date you accepted our terms.
Your profile and garage
The cars you add: type, colour, a short description, optional scene tags, and an optional licence plate. You choose whether a plate is shown to your group only, or to nearby drivers. You can leave it blank.
Your location
While the app is open and you are live, we receive your position, heading and speed. This lets nearby drivers and your group see you, and lets voice connect. Who sees you depends on your visibility setting (everyone nearby, group only, or hidden). We keep live positions in memory only. We do not store a location history. Road reports you make store the place of the report, not your track.
Saved places and routes
Places you save (for example home, work and others) and saved routes are stored on your account so they follow you to a new phone. They are only ever sent back to you. A destination is shared with your group only when you, or your Lead Car, choose to send it, and the app asks before it shares a saved home or work address.
Voice
Voice goes directly from phone to phone and is encrypted in transit. We do not record or store voice. Because the connection is direct, the other person’s phone can see your network (IP) address while you are connected. To help phones find each other, the app asks public call-setup servers run by Google (STUN servers), which see your IP address.
Voice commands
If you use voice commands or the Talk button, your phone’s speech service (Apple’s or Google’s) may process what the microphone hears, under its own privacy terms. We do not receive the audio or the words you said. We only receive the action the app takes, such as sending a report.
Road reports
The type, place and time of a report, how many people confirmed it, and an internal number for each person who marked it “gone” (so no one can vote twice). Other users are not shown who made a report.
Safety information
Your block list. If someone reports you, or you report someone, we keep the report, the people involved, the reason, any note, and some context, so we can review it. Warnings, strikes and suspensions are kept on your account.
Technical information
Our hosting provider processes connection data such as IP addresses to deliver the service. Our servers keep short-lived error logs. We use no advertising identifiers, no analytics tools and no tracking cookies. Rate limits that protect the service are kept in memory.
On your device
The app stores your settings and your sign-in token on your phone.
Our website and waitlist
If you join the waitlist we collect your email address, the type of phone you use, and (if you choose) what you drive. The form is handled by Netlify, which hosts this website. The website uses no cookies and no analytics.
When you contact us
If you email us, we keep the email and your reply address so we can help you.
2. Why we collect it
We use personal information to run RevTalk: to sign you in, show you to the people you chose, connect voice, show maps and directions, share destinations with your group, keep reports and the community safe, answer your questions, and meet our legal duties. We use waitlist details to tell you when RevTalk is ready. We do not sell personal information, and we do not use it for advertising.
3. Who sees what
Depending on your visibility setting, other drivers can see your name, your car and what you drive, your scene tag, your position, and your group’s name if the group is listed. Your plate is shown only to the people you pick. Your destination is only shared with your group, and only when it is sent. Other users never see your email address or phone number.
4. Who we share information with
We share information only with the people and services we need to run RevTalk, and only what they need for that job:
- Fly.io: runs our app servers (in Sydney, Australia).
- Netlify: hosts this website and handles the waitlist form.
- Resend: sends sign-in emails. Twilio: sends sign-in text messages, if you sign in with your phone number.
- Apple and Google: if you use Sign in with Apple or Google, and for call setup (Google STUN servers).
- Map, search and directions providers: your phone loads map pictures directly from a map provider (currently OpenStreetMap or another provider named in the app), which sees your IP address and the area you are viewing. When you search for a place, get directions, or the app looks up your street name, we send the search words and positions through our server to an address and routing service. We keep search results in memory for up to 10 minutes.
- Cloudflare: provides our domain name and email forwarding services.
- Authorities: where the law requires, or where we reasonably believe it is needed to prevent a serious threat to a person’s life, health or safety.
5. Disclosure overseas
Some of these providers are based in or use servers in other countries, including the United States. When we disclose information to them we take reasonable steps to make sure they handle it in line with the Australian Privacy Principles. By using RevTalk you understand that those providers may hold some information outside Australia.
6. Keeping information safe
We use encrypted connections (HTTPS) to our servers. Sign-in codes and sign-in tokens are stored only as hashes. We limit how often someone can try codes and use the service, and we limit who can reach the data. No system is perfectly secure. If a data breach is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC) as the law requires.
7. How long we keep information
| Information | How long |
|---|---|
| Account, profile, garage, saved places and routes | Until you delete your account |
| Sign-in tokens (sessions) | Up to 90 days, or until you sign out |
| Sign-in codes | A few minutes |
| Live position | In memory while you are live. Not stored |
| Road reports | Until they fade out or 90 days, whichever is first |
| Block list | Until you or the other person deletes their account |
| Safety reports | Up to 12 months, then deleted |
| Waitlist details | Until RevTalk launches and we have told you, or until you ask us to delete them |
| Support emails | As long as needed to help you and meet legal duties |
Short-lived backups of our servers may hold deleted information for a little longer before they are overwritten.
8. Your choices and rights
- In Settings you can hide yourself, limit who sees you, switch voice off, choose who sees your plate, block people, and delete your account.
- Deleting your account removes your account, name, email or phone, sign-in links to Apple or Google, sessions, saved places, routes, garage and blocks, and removes you from any group and from live view. Safety reports are kept for up to 12 months as described above. Internal vote numbers on road reports disappear when those reports expire.
- You can ask to see the personal information we hold about you, or to correct it, by emailing us. We will answer within a reasonable time, normally 30 days.
- You can ask us to remove your waitlist details at any time.
9. Children
RevTalk is for people 18 and over. We do not knowingly collect information from anyone younger. If you think a child has an account, email us and we will delete it.
10. Complaints
If you have a concern about your privacy, email us first. We will look into it and reply. If you are not happy with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
11. Changes to this policy
We may update this policy. If a change matters, we will tell you in the app or by email. The date at the top shows when it was last updated.
12. Contact
Privacy contact: Cody Morrison, trading as Rhythm Revolt Records, Brisbane, Queensland, Australia. Email support@revtalk.app.