Privacy & Your Data¶
Revoir is built on a simple principle: your data belongs to you.
Our Privacy Promise¶
- ✅ Your dating data stays on your device
- ✅ No cloud sync, no account, no profile of you
- ✅ No analytics that track you
- ✅ No selling data to advertisers
- ✅ You can delete everything instantly
What We Don't Collect¶
From the app, we collect nothing about you or how you use it:
- No dates or people you log
- No mood check-ins
- No photos or moments
- No usage patterns
- No device identifiers
There is no analytics product in the app. We do not track which features you open, how often you log, which screens you spend time on, or whether you tapped a particular button. We have no dashboard showing what users do inside Revoir, because we do not collect the data one would need to build it.
What We Do Collect¶
Since version 1.2.0, Revoir may occasionally show you a short survey asking how the app is working for you. That involves two things leaving your device, and we would rather describe both than round it down to one.
Survey triggers¶
To know when a survey is worth showing at all, the app sends a short signal when a milestone is reached:
| Signal | Sent when |
|---|---|
product_uses |
You have logged your third date |
nps-eligible |
30 days after your first logged date |
churn-signal |
You have not opened the app for 7 days |
weekly-active |
At most once a week, while you are still using the app |
first-export-completed |
The first time an export completes successfully |
Each signal is only that name. No dates, people, moods, notes, or photos are attached, and neither is any account or device identifier. The app talks to Canviq anonymously, and the only other thing sent is your device's language setting, so a survey can be shown in the right language.
These are sent whether or not you answer a survey, because their only job is deciding whether to ask you. Dismissing a survey does not unsend the signal that caused it to appear.
Their purpose is limited by policy, not just by intent. A trigger is allowed to exist only while a published survey is listening for it. One that fires into nothing is treated as a bug and removed.
Survey answers, if you answer¶
- Answering is optional. Dismiss the survey and no answer is sent
- Your dating data is never attached. Your answers do not carry the people you log, your dates, your moods, your notes, or your photos
- It is feedback, not measurement. Survey responses tell us what to build. They are not combined with usage data, because there is none to combine them with
Surveys are handled by Canviq, which is also built by Revoir Software.
What never leaves your device¶
Everything you actually put into Revoir. The people you log, your dates, your mood check-ins, your notes, your photos, and your insights all stay on your phone, in every version, whether or not you ever see a survey.
Website only¶
If you visit our website:
- Analytics run only if you accept the cookie banner. Decline, and no analytics scripts load at all
- Email address, if you choose to give us one
This is completely separate from the app.
Where Your Data Lives¶
On Your Device¶
All app data is stored locally using iOS's secure storage:
- SwiftData database — Your dates, people, moods
- Local file system — Photos and exports
- iOS Data Protection — Encrypted when device is locked
Not in the Cloud¶
- No iCloud sync
- No backup to our servers
- No way for us to access your data
Device Loss
Because data is local-only, if you lose your device without a backup, your data is lost. Use the Export feature to create backups.
Your Controls¶
App Lock (Face ID / Touch ID)¶
Protect your dating journal with biometric authentication:
- Go to Settings → Security
- Enable App Lock
- Choose a lock delay:
| Delay | When It Locks |
|---|---|
| Immediately | As soon as you leave the app |
| After 15 seconds | Brief switches won't trigger lock |
| After 1 minute | Moderate protection |
| After 5 minutes | Convenient for frequent use |
When locked, Revoir requires Face ID, Touch ID, or your device passcode to open.
What if biometrics fail?
If Face ID or Touch ID isn't working, Revoir falls back to your device passcode automatically.
App Lock is preserved
If you use "Delete All Data," your App Lock settings are kept for security.
Export Your Data¶
Download all your data anytime:
- Settings → Data Management → Export All Data
- Save the JSON file to Files, iCloud, or email
Delete Everything¶
Permanently erase all data:
- Settings → Data Management → Delete All Data
- Confirm twice (this is irreversible)
- App resets to onboarding
Privacy in Exports¶
When sharing cards or PDFs:
- Privacy Mode ON (default): Names become "Person A", "Person B"
- Privacy Mode OFF: Real names shown (opt-in)
Technical Details¶
For the security-minded:
| Aspect | Implementation |
|---|---|
| Storage | SwiftData (local SQLite) |
| Encryption | iOS Data Protection (AES-256) |
| Network | Zero network calls for user data |
| Analytics | None in app |
| Third-party SDKs | None with data access |
Questions?¶
See our FAQ or contact us at [email protected].