Privacy Notice
Last updated: 16 September 2026
Revizl is a service operated by Kit Harvey, a sole trader in England and Wales, who is the data controller for the personal data described in this notice. This means we decide what personal data is collected through the service and how it is used. You can contact us about anything in this notice at contact@revizl.com, or in writing to our trading address, published at the top of our Terms & Conditions.
What we collect and why
- Account data — email address, password (stored only as a secure hash), display name and optional profile picture. Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
- Study data — your subjects, exam and deadline dates, availability, preferences, generated plan and session progress. Used to build and maintain your revision plan. Legal basis: performance of our contract with you.
- Technical and usage data — IP address, device and browser information, and error or usage logs. Used for security, fraud prevention, and to keep the service working and improve it. Legal basis: our legitimate interests in running a secure, reliable service.
- Support messages — anything you send us when you ask for help. Used to respond to you. Legal basis: legitimate interests and contract performance.
- Marketing emails — only if you opt in, and you can withdraw consent at any time. Legal basis: consent.
We may also process data where we have a legal obligation to do so, for example to keep business records.
Who we share data with
- Service providers / subprocessors — hosting, database, authentication and email providers who process data on our instructions.
- Stripe — our payment processor, for Revizl Pro purchases, payment management, tax calculation and receipts. Stripe collects your payment details directly; we never see or store your card number.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where required by law or to protect our legal rights.
We do not sell your personal data.
International transfers
Some of our providers process data outside the UK and EEA. Where that happens we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
We keep your account and study data for as long as your account is open. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep limited records (for example transaction records) to meet legal obligations. This includes a hashed (scrambled, non-reversible) copy of your email address, kept only as part of our transaction records for legal and tax purposes.
Your rights
Under UK and EU data protection law you have the right to access your data, correct it, have it erased, restrict or object to processing, request portability, and withdraw consent where processing is based on consent. Contact us at contact@revizl.com and we will respond within one month. You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls, and database row-level security so that each account can only reach its own data.
Cookies and local storage
Revizl uses essential cookies and browser storage to keep you signed in and to remember your session and preferences. You can clear or block storage in your browser settings, but signing in will not work without it. Here is what we use:
| What | Purpose | How long |
|---|---|---|
| Sign-in session (browser storage) | Essential — keeps you signed in to your account | Until you sign out |
| Your plan and app preferences (browser storage) | Essential — remembers your settings on this device | Until you clear your browser |
revizl_consent_v1 / revizl_advertising_consent | Essential — remembers your cookie choice | 12 months |
| Stripe checkout cookies | Essential — runs and secures payment, prevents fraud | Set by Stripe, up to 1 year |
Meta _fbp and _fbc | Optional — advertising measurement, only with your consent | Up to 90 days |
If you withdraw consent, we delete the Meta cookies from your browser and stop the pixel immediately.
Advertising measurement
With your consent, we use the Meta pixel (Meta Platforms Ireland Limited) to measure how our advertising performs. When it is active, it shares with Meta the pages you view on Revizl and key actions — creating an account, generating a plan, starting checkout and completing a purchase, including the purchase amount.
To help Meta match these events to the right account, we also send a hashed (scrambled, non-reversible) copy of your email address and, if you have set one, your display name split into first and last name. We do not send Meta your study data, phone number, address, date of birth or gender.
If you are in the UK, EEA or Switzerland, this only runs after you accept our cookie banner. You can change or withdraw your choice at any time using the “Cookie settings” link in the footer, and the change takes effect immediately.
Children
Revizl is designed for students, and you must be at least 13 years old to create an account. If you are under 18, we recommend a parent or guardian helps you set up and manage the account. If we learn that an account belongs to a child under 13, we will delete it.