Privacy Policy

Revo OS is a working prototype operated by Ctrl Works (“we”, “us”). This policy explains what we collect when you use the prototype at revoos.app, why we collect it, and the choices you have. For any privacy question or request, contact hello@revoos.app.

Revo OS is a demo, not a finished product. It is intended for people aged 16 and over and is not directed at children.

• Your captured memories, notes, links, and edits are stored in your browser only (localStorage). They are not uploaded to us by default.
• When you use an AI feature, your question and the relevant memory snippets are sent to our AI provider (OpenAI) to generate an answer.
• We only receive your email if you join the waitlist, and your feedback (plus an optional email) if you submit the feedback form.
• We use privacy-friendly analytics. Cloudflare Web Analytics runs cookieless; PostHog (which uses cookies) runs only if you accept the cookie banner. We do not sell your data and we do not run advertising.

• Waitlist email. If you join the waitlist, we store the email address you provide so we can let you know when access opens. Stored in our database (Supabase).
• Feedback. If you send feedback, we store your message, an optional email address, and the page you were on, so we can improve the product. Stored in our database (Supabase).
• AI requests. When you ask a question, the text of your question and the memory snippets selected as relevant (titles, content, collection, date, source, and tags) are sent to OpenAI to produce the answer. We do not use this to train our own models, and OpenAI’s API terms do not permit using API data to train their models.
• Local data. Your captures, edits, collections, and preferences live in your browser’s localStorage and are not transmitted to us unless you use an AI feature or otherwise submit them.
• Usage analytics. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you across sites, and it reports aggregate page views and performance. If you accept the cookie banner, we also use PostHog, which sets cookies and a pseudonymous identifier to measure how the product is used (pages viewed, clicks, sessions). Rejecting analytics leaves PostHog disabled. We also record product events such as “waitlist joined” or “question asked” server-side; these never include the content of your questions, feedback, or emails.
• Technical and log data. Our hosting provider processes request data (such as IP address and user agent) to deliver the site, prevent abuse, and rate-limit requests. Error logs may be retained briefly for debugging.

• To operate, secure, and rate-limit the prototype.
• To reply to waitlist and feedback submissions.
• To generate AI answers you ask for.
• To understand aggregate usage and improve the product.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

Where GDPR applies, we process personal data on these bases: our legitimate interests in operating and securing the prototype and improving the product; your consent when you submit the waitlist or feedback forms, use AI features, or accept analytics cookies; and our legal obligations where they apply.

We share data with the following processors strictly to run the prototype:

• Cloudflare — hosting, CDN, security, rate limiting, and analytics.
• Supabase — database storage for waitlist and feedback data.
• OpenAI — processing AI requests you make.
• PostHog — product analytics, only after you consent to analytics cookies.

We share information when required by law or to protect rights and safety. We do not sell or rent personal information.

We do not set advertising or cross-site tracking cookies. Our hosting provider sets strictly necessary security cookies, such as __cf_bm, to distinguish humans from bots and protect the service. These are always on because the site cannot work safely without them.

Analytics cookies are used only with your consent. Cloudflare Web Analytics is cookieless and needs no consent. PostHog sets cookies and a pseudonymous identifier and is enabled only if you choose Accept on the cookie banner. If you Decline, PostHog is not loaded and no analytics cookies are set. You can change your choice at any time via Cookie settings in the footer, and you can clear local data from Settings.

• Waitlist emails: kept until launch communication is complete or you ask us to delete them.
• Feedback: kept while we improve the prototype, then deleted on request or when no longer needed.
• Logs: retained briefly by our providers for security and debugging.

Our providers (Cloudflare, Supabase, OpenAI) may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time.

You can exercise access and deletion for waitlist and feedback data yourself on the Your data page, or email hello@revoos.app. You can also clear everything Revo OS stores locally at any time from Settings or by clearing your browser storage. If you are in the UK/EU, you have the right to complain to your local data protection authority.

We use HTTPS, security headers, origin checks, and rate limiting to protect the prototype. No method of transmission or storage is completely secure, and the prototype is provided without warranty.

We may update this policy as the prototype evolves. Material changes will be reflected by a new “last updated” date on this page.

Ctrl Works — hello@revoos.app