Legal

Privacy Policy

Last updated: 28 October 2026

This policy explains how ReviseCue (“ReviseCue”, “we”, “us”) handles personal information when you use our website and the ReviseCue Android app. ReviseCue is one of the customer-facing brands of JBX LLC. JBX LLC is registered in the SHAMS free zone in the UAE.

1. Information we handle

On the website, we may receive basic technical information that browsers and hosting services normally provide, such as device type, browser type, approximate region, pages visited and error logs. Optional Google Analytics and PostHog load only after you accept analytics through the cookie banner.

The Android app is for learners aged 13 and over using ReviseCue in the UAE. Google sign-in is required. Google handles sign-in, and JBX LLC uses Supabase in Singapore for your account. Account information includes your identity, declared age group, UAE declaration and permission record. With the relevant permissions, we process your display name, language, selected subjects, curriculum and practice year, difficulty settings, answer records, study sessions and progress. We use recent checked answers to recommend practice difficulty. Account records also support access to Premium features and recovery of supported learning data. Device-only settings and files are separate from account recovery.

Your selected apps, app timers, app-usage activity and imported study files stay on your phone. Android provides usage events to time only the apps you select. ReviseCue does not read your messages, photos or the content displayed in other apps. Standalone Study does not need Usage Access or permission to display over other apps.

Study sends your selected answers with question identifiers for secure checking. Guided revision needs an internet connection to start. Flexible practice downloads available questions and can use saved questions offline while they remain available on your phone. Results and aggregate progress can be saved to your account. Offline questions and pending answers are kept privately on your phone while available; pending answers are checked and synced when you reconnect. Offline answers do not receive verified results or points before checking. Typed answers to app-timer questions are checked on your phone.

Optional AI practice is available to eligible Premium users aged 18 or over who use ReviseCue in the UAE and give separate AI consent. ReviseCue sends question requirements through Cloudflare AI Gateway to OpenAI to create and check questions. These requirements include the subject, topic, learning objective, reference school year, difficulty and language. The reference school year describes the question level, not your age. The quality check also processes the generated question, answer options, correct answer and explanation.

Your name, email address, account identifier, school name, date of birth, individual answers and raw answer history are not included in these AI requests. ReviseCue may use learning records within its own backend to select suitable question requirements. Your interests, selected apps, app-usage activity, screen content and imported study files are not sent for AI question generation. Interest-based AI personalisation and AI questions from imported files are currently unavailable.

Approved generated questions may be added to the shared question bank for reuse by other learners. They are not private messages or a personal conversation with an AI assistant.

If you contact support, submit feedback or answer an optional survey, we process the information you provide and relevant account or invitation records to respond and improve the service. Service-email records may include your email address and delivery status. Survey participation is optional and does not require analytics consent. Please do not include passwords, sign-in codes or sensitive study material in feedback.

2. How we use information

• To provide app timers, revision questions, feedback and points.
• To adapt questions to the learning settings you choose.
• To keep the website and app secure, reliable and easy to improve.
• To respond when you contact us.
• To understand website use only where you have accepted optional analytics.

3. Permissions and choices

App-timer breaks need Android Usage Access and permission to display over other apps. Notifications and a visible monitoring service support features you choose to enable. You can stop monitoring in the app or remove permissions in Android settings. You can use standalone Study without setting up app monitoring.

Account saving, Study answer checking, AI practice and optional analytics have separate notices and choices. Signing in does not enable advertising, analytics or AI question generation. You can manage account permission in Settings. Withdrawing account permission blocks future account access and signs you out; it does not delete existing account records. Use our account deletion request page to request deletion, including without the app.

AI consent is separate from sign-in, account saving and optional analytics. You can turn off AI sharing in Privacy & about. If you are offline, the app turns AI off on that device and completes withdrawal of cloud access when you reconnect. Withdrawal prevents new AI requests once confirmed by the service; it does not recall processing already started or automatically delete existing records. You can continue using available saved and question-bank content, which may include previously generated AI questions.

You can accept or decline optional website analytics. You can reopen Cookie preferences from the footer at any time. Declining analytics does not prevent you from using the website.

4. Service providers and sharing

Google provides sign-in, and Supabase provides account storage and answer checking. These services are separate from optional analytics. We use Google Analytics and PostHog for optional analytics after the applicable consent. PostHog uses its EU service. Analytics excludes answers, learner material, names, email addresses and the identities of your selected apps. Optional app usage sharing is off by default and is unavailable to under-18 accounts.

We do not sell personal information. Providers process information for the services they provide to us and are subject to their own security and privacy obligations. Hosting and security providers may process information needed to deliver and protect the service. We may also disclose information where required by law or to protect users and our services.

For optional AI practice, Cloudflare routes the requests to OpenAI using our OpenAI API account. We have disabled sharing API inputs and outputs with OpenAI for model improvement. Cloudflare AI Gateway request logging and caching are disabled for this route. These controls do not mean that all providers retain no data.

Cloudflare also provides website hosting and security. Resend delivers service emails, and Zoho hosts our support mailbox. These providers receive the information needed for their role.

5. Young users

ReviseCue is intended only for users aged 13 and over. Children under 13 must not use the website or app, and we do not knowingly collect personal information from them.

If we learn that we have received personal information from a child under 13, we will take reasonable steps to delete it.

Cloud AI practice and optional app analytics are unavailable to users under 18. Users aged 13 to 17 should use ReviseCue only with permission from a parent or guardian where required by applicable law. A parent or guardian may contact us at michael@revisecue.com about a young user’s information.

6. Retention and security

We keep account information while needed to provide the service, subject to your deletion rights. We aim to complete verified account-deletion requests within a few days and commit to completion within 30 days after ownership verification. If a legal requirement or technical exception affects completion, we explain what remains, why and the expected next date.

• Support cases and deletion-case receipts: our retention policy is 12 months after closure, longer only for a documented dispute or legal requirement. Support-mail handling includes manual review.
• Backups and deletion protection: our current Supabase database backup history covers seven days. This does not mean every provider copy disappears after seven days. We retain a minimum deletion marker until relevant restorable backups have expired or been removed and checked, so deleted accounts cannot return to normal service through a restore.
• Analytics: Google Analytics user-level and event-level retention is set to two months, without restarting that period on new activity. Aggregate reports are separate. We remove analytics reliably linked to an account where possible, without collecting extra identifiers solely to locate analytics records. Device and browser identifiers are not a guarantee of anonymity.
• Email delivery: Resend’s standard email and log retention is 30 days, with seven-day backups. Messages delivered to a recipient’s mailbox are separate. See Resend’s retention information.

Provider logs, restricted backups and legally required records may remain after active-account deletion. We explain applicable exceptions when handling your request. Locally stored app data remains until removed through app controls, Android storage settings or uninstallation. We use access controls and reasonable security safeguards, but no system is completely secure.

Our AI requests ask OpenAI not to save responses as retrievable API records. OpenAI may still retain information under its standard abuse-monitoring and other applicable service policies, including temporary processing caches. We do not currently use Zero Data Retention. ReviseCue separately stores generation and review records, approved questions, and account-linked consent and request records in its backend. Turning off AI sharing does not itself erase these records. Account deletion and any justified retention exceptions are handled through our deletion process. OpenAI’s standard abuse-monitoring retention can include prompts and responses for up to 30 days, with longer legal or safety exceptions. See its data controls policy.

7. Your rights and account deletion

You can request deletion of your ReviseCue account and associated personal data from our dedicated deletion page or use Settings, Privacy & about, Delete account in app versions where it is enabled. If that action is unavailable, use the email request route on the deletion page. We verify ownership before acting. Signing out and withdrawing permission do not delete an account. The deletion page explains account-linked data, local phone data, providers, backups and retention exceptions. You do not need to reinstall the app or accept analytics to make a request.

Depending on where you live, you may have rights to ask for access, correction, deletion, restriction or a copy of personal information, or to object to certain processing. You may also withdraw consent where consent is the basis for processing. Contact us to make a request. We may need to verify the request before acting.

8. International processing

JBX LLC uses Supabase in Singapore for ReviseCue account and synced learning records. Optional PostHog analytics uses its EU service. Optional AI requests pass through Cloudflare to an OpenAI project configured for Global processing with Standard retention. These services are not restricted to processing and storing information in the UAE. Other providers, including sign-in, email, hosting and security services, may also process information outside the UAE. Resend stores email data in the United States. You can contact us about international processing and the safeguards applicable to your information.

9. Changes and contact

We may update this policy as ReviseCue develops. The date above shows the latest version. For privacy questions or requests, email michael@revisecue.com.