ReviZi logo ReviZi

ReviZi — Privacy Policy

Last Updated: 17 February 2026

Effective Date: 17 February 2026

ReviZi ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use the ReviZi application and related services (the "Service").

We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and applicable state and territory privacy legislation.

1. Who We Are

ReviZi is an AI-powered study platform operated in Australia. Our services are hosted in the australia-southeast1 (Sydney) region to ensure your data stays within Australia.

Privacy Contact:

Email: [[email protected]]

Website: [www.revizi.com.au]

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account. If you sign in via Google or Apple, we receive your name and email from those providers.
  • Profile Information: Year level, curriculum (e.g., HSC, VCE, QCE), and subject preferences you provide during onboarding.
  • Uploaded Content: Documents (PDF, DOCX, PPTX) and images you upload for flashcard generation.
  • Payment Information: If you subscribe to Pro, payment is processed by third-party providers (e.g., Apple App Store, Google Play, Stripe). We do not store your credit card details directly.
  • Communications: Messages you send to us via email or in-app support.

2.2 Information We Collect Automatically

  • Usage Data: Features used, flashcards studied, quiz scores, study streaks, session durations, and generation counts.
  • Device and Technical Data: Device type, operating system, browser type, screen resolution, app version, and general location (derived from IP address, at the city/state level only — not precise GPS).
  • Error and Performance Data: Crash reports, error logs, and performance metrics to help us improve the Service.

2.3 Information We Do NOT Collect

  • We do not collect precise geolocation (GPS) data.
  • We do not collect biometric data.
  • We do not collect data from your device's contacts, camera, or microphone (except when you voluntarily upload an image for processing).
  • We do not use tracking cookies for advertising purposes.

3. How We Use Your Information

We use your information for the following purposes:

  • Providing the Service: Processing your uploaded documents, generating flashcards and quizzes, tracking your study progress, and managing your account.
  • AI Processing: Your uploaded content is sent to third-party AI providers (currently OpenAI) solely for the purpose of generating study materials. See Section 6 for details.
  • Service Improvement: Analysing aggregated, de-identified usage patterns to improve features, fix bugs, and optimise performance. De-identified data does not identify you and cannot reasonably be re-identified.
  • Communications: Sending you service-related messages (account verification, password resets, subscription confirmations, important updates). We do not send marketing emails without your explicit consent.
  • Security and Fraud Prevention: Detecting and preventing abuse, unauthorised access, and violations of our Terms of Service.
  • Legal Compliance: Complying with applicable laws, regulations, legal processes, or enforceable government requests.

4. How We Store and Protect Your Information

4.1 Storage Location

Your data is stored on Google Cloud Platform (Firebase) servers located in the australia-southeast1 (Sydney) region. Your uploaded documents and generated flashcards are stored within Australia.

4.2 Security Measures

We implement reasonable technical and organisational measures to protect your information, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest.
  • Firebase Authentication for secure account management.
  • Firestore security rules restricting data access to authenticated account holders.
  • Server-side validation and rate limiting to prevent abuse.
  • Regular security reviews and dependency monitoring.

4.3 No Absolute Security

We take reasonable steps to protect your information. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

5. Retention and Deletion

5.1 Account Data

We retain your account information and study data for as long as your account is active. If you delete your account, we will delete or de-identify your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing our Terms).

5.2 Uploaded Documents

Uploaded documents are stored for the purpose of content generation and are associated with your account. You may delete individual uploads through the app. When you delete your account, all associated uploads are deleted within 30 days.

5.3 AI Processing

Content sent to third-party AI providers for processing is transmitted in real time and is not stored by us beyond the generation session. For the AI provider's data handling practices, see Section 6.

5.4 Temporary Files

Temporary files created during document processing (e.g., extracted text, OCR results) are automatically deleted within 7 days via automated lifecycle policies.

6. Third-Party AI Processing

6.1 How AI Processing Works

When you generate flashcards, quizzes, or summaries, extracted text from your uploaded documents is sent to third-party AI providers (currently OpenAI) via their API. The AI provider processes the text and returns generated study content.

6.2 What We Send

We send only the extracted text content from your documents, along with structured prompts. We do not intentionally send your name, email, account details, or other personal identifiers to the AI provider. However, uploaded documents may incidentally contain personal information (e.g., your name on an assignment, school letterhead). Only the text required for generating study materials is transmitted.

6.3 AI Provider Policies

As of the date of this policy, OpenAI's API usage policy states that data submitted via the API is not used to train their models. However, we do not control third-party provider policies, and they may change. We encourage you to review OpenAI's privacy and usage policies directly.

6.4 No AI Training on Your Content

ReviZi does not use your uploaded content or generated materials to train any AI models, and we do not permit third-party providers to do so on our behalf through our API usage.

7. Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

  • Service Providers: With trusted third-party providers who assist us in operating the Service (e.g., Google/Firebase for hosting and authentication, OpenAI for AI processing, payment processors for billing). These providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.
  • Legal Requirements: Where required by law, regulation, legal process, or enforceable government request.
  • Safety and Rights Protection: Where we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
  • With Your Consent: In any other circumstance where you have given explicit consent.

We do not share your data with advertisers or ad networks.

8. Children and Young People

8.1 Our Approach

ReviZi is designed for ATAR students, who are typically aged 15 to 18. We recognise that many of our users are minors and take additional care with their data.

8.2 Consent

In accordance with guidance from the Office of the Australian Information Commissioner (OAIC), we generally assume that individuals aged 15 and over have the capacity to consent to the collection and use of their personal information for the purposes described in this policy. For users under 15, we require that a parent or guardian provides consent on their behalf.

8.3 Protections for Minors

  • We collect only the minimum information necessary to provide the Service.
  • We do not serve targeted advertising to any users, including minors.
  • We do not sell or share minor users' data with third parties for marketing purposes.
  • We do not use manipulative design patterns to encourage data sharing.
  • Parents or guardians may contact us at [[email protected]] to review, correct, or request deletion of their child's personal information.

8.4 Evolving Regulations

Australia's Children's Online Privacy Code is currently being developed by the OAIC. We are committed to complying with the Code when it comes into effect and will update this policy accordingly.

9. Cookies and Local Storage

9.1 What We Use

ReviZi is a Progressive Web App (PWA) and uses the following browser technologies:

  • Session Storage: For temporary data during your active session (e.g., navigation state, generation progress). Cleared when you close the browser tab.
  • Firebase Authentication Tokens: Stored securely by Firebase to maintain your login session.
  • Service Worker Cache: For offline functionality and faster loading of the app.

9.2 What We Don't Use

  • We do not use third-party advertising cookies.
  • We do not use cross-site tracking technologies.
  • We do not participate in ad networks or retargeting platforms.

10. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of inaccurate, incomplete, or out-of-date personal information.
  • Deletion: Request deletion of your personal information (subject to legal retention requirements).
  • Complaint: Lodge a complaint with us if you believe we have mishandled your personal information.
  • Opt-Out: Opt out of non-essential communications at any time.

How to Exercise Your Rights

Contact us at [[email protected]]. We will respond to your request within 30 days. We may request documentation to verify your identity before processing your request. If we are unable to reasonably verify your identity, we may refuse the request to protect your account security.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

11. International Data Transfers

11.1 AI Processing

While your primary data is stored in Australia, extracted text content is transmitted to OpenAI's API servers (which may be located in the United States) for the sole purpose of AI processing. This data is transmitted securely (TLS encrypted) and is processed in real time without long-term storage by the AI provider.

11.2 Other Services

Some infrastructure services (e.g., email delivery, error monitoring) may involve limited processing of data outside Australia. Where this occurs, we take reasonable steps to ensure your information receives a level of protection comparable to that required under Australian law.

11.3 Your Consent to Overseas Disclosure

By using the Service, you consent to the disclosure of personal information to overseas recipients as described in this policy. You acknowledge that overseas recipients may be subject to privacy laws that differ from Australian law, and that Australian Privacy Principle 8.1 may not apply to the extent permitted by your consent.

12. Data Breach Notification

If we experience an eligible data breach under Part IIIC of the Privacy Act 1988 (Cth) that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with our legal obligations under the Notifiable Data Breaches (NDB) scheme.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. If we make material changes, we will notify you via email or in-app notification at least 14 days before the changes take effect.

We encourage you to review this policy periodically. Your continued use of the Service after changes are notified constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact us:

Email: [[email protected]]

Website: [www.revizi.com.au]

Complaints to the OAIC:

Office of the Australian Information Commissioner

Website: www.oaic.gov.au

Phone: 1300 363 992

*This Privacy Policy was last reviewed on 17 February 2026.*

Questions about this document? Email [email protected]. See also our Terms of Service.