🛡️ REVKIN Privacy & Safety

Your Ride.
Your Data.
Your Control.

REVKIN is built for riders — not advertisers. Your location, emergency safety features, and ride data exist solely to power navigation, group riding, and crash response. We never sell your data. Ever.

Effective Date 25 May 2026
Last Updated 5 July 2026
Operated By Shivam

1. Data We Collect and Why

📍 Precise Location (always-on / background)

Your GPS coordinates, speed, heading, and accuracy are collected continuously while a ride is active — including when the app is in the background or the screen is off. This is required for:

  • Broadcasting your live position to your group on the ride map
  • Continuing turn-by-turn navigation when the screen is off
  • Calculating crash impact speed for crash detection
  • Including your coordinates in emergency SOS alerts

Your GPS trail is saved to your personal ride history in Firebase Firestore (encrypted in transit and at rest). It is never shared with users outside your active ride session.

Location collection stops immediately when you end a ride.

🚨 Emergency Contact (name + phone number)

One contact name and phone number you enter voluntarily in the Safety section of your profile. Used exclusively to send an emergency SMS when you trigger SOS, tap BREAK, or when crash detection auto-fires after a 60-second countdown with no response.

Never shared with any third party. Never used for marketing.

📱 SMS — Outbound Only

REVKIN sends a single outbound SMS to your emergency contact during safety events (SOS trigger, crash detection auto-fire, BREAK stop). The SMS contains your name and a Google Maps link to your last GPS location.

REVKIN never reads your messages, contacts list, or call log.

👤 Account Information

Google Sign-In provides your display name, email address, and profile photo URL. Phone OTP sign-in provides your phone number. Used only to create and identify your rider profile.

Your email and phone number are never visible to other users.

🏍️ Rider Profile Data

Bike name/model, rider handle, blood group, and profile photo you optionally upload. Your handle and bike name are visible to other riders in your active session on the group map.

📊 Ride History & Analytics

For each completed ride: start/end time, distance, duration, max speed, GPS trail, and mood selection. Used for your personal ride history, stats, heatmap, and personal record tracking. This data belongs to you and is not shared with other users.

🐛 Crash Reports

Anonymous crash reports (stack trace, device model, Android version, app version) sent to Firebase Crashlytics and Sentry for bug fixing. No personally identifiable information is included. Disabled in debug builds.

📲 Device Information

Device manufacturer and model — used in memory only to show OEM-specific battery optimisation instructions (e.g. Xiaomi vs Samsung). Not stored on any server.

🛣️ Anonymized Road Data — Opt-In Only

If — and only if — you turn on "Improve Indian road data" in Profile → Notifications, REVKIN derives anonymized summaries from your saved rides: approximate route cells (geohash areas roughly 1 km across), grouped speed ranges within those cells, the calendar date (never the time), the ride type, and which fuel stations are selected during rides. This builds road-quality, hazard, and fuel-stop intelligence for Indian roads that improves routing, route guides, and warnings for every rider.

These records are stored in a separate collection under a random ID and contain no user ID, no account reference, no ride ID, no precise coordinates, and no timestamps — attribution to you is structurally impossible, not merely hidden.

Consent is OFF by default. You are asked once after a ride and can change your choice anytime in Profile. On revoke we stop deriving new records immediately; already-written records cannot be deleted per-user because they are not attributable to any user.

👨‍👩‍👧 Live Ride Share Pages

When you share a live ride (feature rolling out; currently in testing), REVKIN creates a temporary web page at an unguessable link showing your first name/handle, latest position, and ride status — so family can follow your ride without installing the app. The page's data exists only while active and is automatically deleted after the ride (12-hour maximum). Only people you give the link to can view it; the link cannot be listed or searched.

2. What We Never Collect

REVKIN is privacy-first by design. Here is what we explicitly do not do.

3. How We Share Your Data

Recipient What Is Shared Why
Other riders in your active session Live GPS position (dot on map), rider handle, bike name Core group ride functionality
Your emergency contact (SMS) Your name + GPS coordinates Safety events only
Google Firebase All stored data (Auth, Firestore, Storage, Crashlytics) Infrastructure — Firebase Privacy
Sentry Anonymous crash stack traces Error monitoring
Mapbox Route start/end coordinates Navigation & map rendering — Mapbox Privacy

We do not share your data with any other party.

4. Data Retention

Data Type Retention Period
Ride history & GPS trails Until you delete your account
Rider profile Until you delete your account
Live ride telemetry (RTDB) Auto-deleted within 24 hours of ride end
Live ride share pages Auto-deleted after ride end (12-hour maximum)
Anonymized road data (opt-in) Retained indefinitely — contains nothing attributable to you
Crash reports 90 days (Crashlytics default)
Emergency contact Until you remove it or delete your account

5. Account Deletion

You can permanently delete your account at any time:

Profile → Menu (⋮) → Delete Account

This performs a full wipe: all Firestore documents under your user ID (profile, rides, planned rides, alerts), your profile photo from Firebase Storage, all local SharedPreferences, and your Firebase Authentication account.

Deletion is permanent and irreversible.

6. Your Rights

For anything not covered by in-app controls, email kumarshivam1993@gmail.com and we will respond within 7 days.

7. Security

All data in transit between the app and Firebase is encrypted using TLS. Firebase Firestore data is encrypted at rest. Firestore security rules enforce that each user can only read and write their own data — no user can access another user's rides, profile, or alerts.

API keys (Mapbox, OpenWeatherMap) are injected at build time via a gitignored configuration file and are never stored in the app binary, source code, or public repositories.

8. Children's Privacy

REVKIN is not directed at children under 13 years of age. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, contact us at kumarshivam1993@gmail.com and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the app after a change is posted constitutes your acceptance of the updated policy.

10. Contact