Revive App Privacy Policy

Last updated: 25 September 2026

This policy explains how the Revive iOS app ("Revive", "the app") handles your personal information. Shop orders, emails and the website are covered by our main Privacy Policy. This page is about the app.

1. Who we are

Vitality Revival Limited ("we", "us", "our") is the controller of the personal information described here under the UK GDPR and the Data Protection Act 2018.

Vitality Revival Limited · Company no. 16800306
9 St Michaels Court, Victoria Street, West Bromwich B70 8ET, United Kingdom
Email: info@vitalityrevival.co.uk

2. The short version

  • Most of what you log in Revive (training, nutrition, bloods, supplements, progress photos, Health data) stays on your iPhone.
  • Cloud backup is optional. If you turn it on, your data is encrypted on your phone before it leaves, and our servers cannot decrypt it.
  • We do not sell your data, we do not use it for advertising, and the app contains no advertising or third-party analytics trackers.
  • The in-app coach, Sir Nerdalot, runs on your device. We do not send your data to a cloud AI service.

3. What we collect and why

3.1 Sign in

  • Sign in with Apple. If you use it, Apple gives the app an anonymous Apple user identifier and, if you choose to share them, your name and email. The app keeps these on your device to run your profile.
  • Vitality Revival (Shopify) customer account. If you sign in with your shop account, sign-in happens through Shopify's customer account service. Our Revive server receives your email address and Shopify customer ID, and checks with Shopify whether you have an active Revive subscription (HIM Revive, HER Revive or the Him & Her Revive Bundle) so we can unlock paid features.
  • On our server your email and Shopify customer ID are stored encrypted. For lookup we keep a keyed one-way hash of your email, plus a short 8-character hash used in our internal logs instead of your email.

3.2 Sessions

When you sign in, the server issues a session token. We store only a one-way hash of that token, never the token itself, along with when it was created, last used and when it expires. Sessions expire after 30 days, or after 14 days without use. You can sign out at any time.

3.3 Fort Knox encrypted vault (optional cloud backup and sync)

If you turn on sealed backup, you choose which categories to include (for example nutrition, training logs, blood panels, supplements/medication tracking, cycle notes and progress photos). - Each item is encrypted on your iPhone with AES-256-GCM before upload. The keys stay with you; your vault key is protected on your device (Face ID / passcode) and is only ever sent to us in wrapped (encrypted) form. - Our server rejects unencrypted content. On top of your own encryption it adds a second layer ("envelope encryption"): every stored item is encrypted again with its own key, which is itself wrapped by a server master key. - The server never decrypts your data. We can see technical details needed to run the service, such as item IDs, sizes, revision numbers, timestamps and how much storage you use, but not what you wrote or what your photos show. - There is a 5 GB storage limit per account.

3.4 Apple Health (HealthKit)

With your permission, Revive can read Health data such as steps, heart rate, resting heart rate, heart rate variability, sleep, workouts, active and resting energy, walking/running distance, exercise minutes, walking speed, VO2 max and body weight. You choose what to share and can change it at any time in the Health app. - Health data is used only to show your stats and guide your training inside the app. - It stays on your device. In this version Revive does not include Health data in cloud backup and does not write anything back to Apple Health. - Health data is never used for advertising or marketing, never sold, and never shared with data brokers.

3.5 Other permissions (all optional)

  • Camera: to identify gym machines, scan food barcodes and take progress photos.
  • Photos: to save and choose progress photos. Photos can be sealed into Fort Knox on your device.
  • Location (while using the app): only to record the route of an outdoor run or walk during an active GPS session.
  • Microphone and speech recognition: so you can talk to Sir Nerdalot. Speech is turned into text on your device. Listening pauses when the app is in the background.
  • Face ID: to unlock your account and vault. Face data never leaves Apple's secure hardware and we never receive it.

3.6 Food barcode lookups

When you scan a barcode the app doesn't already know, it sends only the barcode number to the Open Food Facts public database (world.openfoodfacts.org) to fetch nutrition information. No account details are sent with it.

3.7 Security logs

To protect the service we keep a limited audit and security log: the type of event (for example sign-in, vault wipe or account deletion), your account ID and the 8-character email hash. These logs never contain your content. Rate limiting uses your IP address temporarily in memory to block abuse.

4. AI coach (Sir Nerdalot)

Sir Nerdalot and the app's training and nutrition recommendations run on your device, using what you log on your phone. Revive does not send your logs, Health data, photos or voice to any cloud AI or large language model provider.

5. Advertising, tracking and selling

  • No advertising in the app, and no advertising or tracking SDKs.
  • No third-party analytics SDKs. We do not track you across other companies' apps or websites.
  • We do not sell or rent your personal information to anyone.

6. Who processes data for us

  • Railway (Railway Corporation): hosts the Revive server, database and encrypted storage. Our Revive service currently runs in Railway's US West region, so this data is stored in the United States. Vault content stored there is encrypted twice and cannot be read by Railway or by us.
  • Shopify: provides customer account sign-in and our shop, orders and subscriptions (Shopify Privacy Policy).
  • Apple: Sign in with Apple, Face ID, HealthKit, on-device speech recognition and app distribution (App Store / TestFlight), under Apple's own privacy terms.
  • Open Food Facts: receives barcode numbers only, as described above.

Where personal information is transferred outside the UK (for example to Railway in the US), we rely on safeguards recognised under UK data protection law.

7. Legal bases (UK GDPR)

  • Contract: to create and run your account, check your Revive subscription, and provide backup and sync when you turn it on.
  • Explicit consent: for health-related information (Apple Health data, blood panels, cycle notes and similar). You give this through the in-app choices and iOS permissions, and you can withdraw it at any time by turning the feature or permission off.
  • Legitimate interests: to keep the service secure, prevent abuse and fraud, and keep minimal security logs.
  • Legal obligation: where the law requires us to keep or disclose information.

8. How long we keep it

  • On your device: until you delete it in the app or delete the app.
  • Encrypted vault: until you wipe it or delete your account. When you wipe, we delete the stored objects and records.
  • Sessions: up to 30 days (14 days without use), or until you sign out.
  • Account record: while you have an account. When it is deleted we remove your account, sessions, vault and sync data. Only the 8-character email hash stays in our security log as a record that the deletion took place.
  • Shop orders and subscriptions are kept as described in our main Privacy Policy.

9. Your rights and controls

Under UK GDPR you can ask to access, correct, delete, restrict or port your personal information, object to certain processing, and withdraw consent.

In the app (Account > Privacy): - Export my data gives you a copy of what Revive holds on your device. - Delete my local data erases Revive data on your iPhone. - Wipe Fort Knox cloud copies deletes your encrypted cloud backup.

To have your Revive account record removed from our servers, or for any other request, email info@vitalityrevival.co.uk. We may need to check it's you. You can also complain to the Information Commissioner's Office at ico.org.uk.

If you lose your device keys, we cannot recover encrypted vault content for you, because we never hold a readable copy.

10. Children

Revive is for adults. The app requires you to be 18 or over, and we do not knowingly collect information from anyone under 18. If you think a child has used Revive, contact us and we will delete their data.

11. Security

  • Encryption on your device (AES-256-GCM) before anything is backed up, plus server-side envelope encryption at rest.
  • HTTPS for all connections, with certificate pinning to our account servers where possible.
  • Hashed session tokens, rate limiting, and automatic blocking of unencrypted uploads.
  • Face ID / passcode protection for your vault on the device.

No system is perfectly secure, but we built Revive so that even a stolen copy of our storage would contain only sealed data.

12. Changes

We may update this policy as Revive develops (for example if we add a new feature or provider). We'll change the "Last updated" date above and, where the change is significant, tell you in the app.

13. Contact

Vitality Revival Limited · Company no. 16800306
9 St Michaels Court, Victoria Street, West Bromwich B70 8ET, United Kingdom
info@vitalityrevival.co.uk

Yan and Jade, founders of Vitality Revival