Privacy Policy
REVNET LTD · Company number 17054158 · Registered in England and Wales
Effective: 27 August 2026 · Version 1.0
In short
- We collect what we need to run RevNet: your account, your content, your vehicles, and your location.
- Two features use your location in the background: recording a drive, and sharing your position in a convoy. Both only run when you start them.
- Your registration plate, phone number and date of birth are private and are not shown to other members.
- We use one analytics provider, PostHog, to see which features get used.
- We do not sell your data, we do not share it for advertising, and we do not show you ads.
- You can delete your account, and everything in it, from Settings.
The rest is the detail.
1. Who we are
1.1 RevNet is operated by REVNET LTD, registered in England and Wales under company number 17054158, whose registered office is at Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Waterlooville, Hampshire, PO8 0BT.
1.2 We are the data controller for personal data processed through the RevNet app and revnet.club.
1.3 Contact us about privacy at legal@revnet.club, or write to us at the address above.
1.4 We are registered with the Information Commissioner's Office under registration number 00014762697.
2. Who this applies to
2.1 This policy covers everyone who uses RevNet, whether or not you have an account.
2.2 It also covers people who do not use RevNet but whose data may appear on it — most importantly, the registered keeper of a vehicle reported as stolen. Section 13 is written for you.
3. What we collect
3.1 Information you give us
| What | When | Why |
|---|---|---|
| Email address | Signup | To create and secure your account, and to contact you |
| Name or display name, username | Signup | To identify you to other members |
| Confirmation you are 16 or over | Signup | To apply our minimum age |
| Confirmation you are 18 or over | First Marketplace use | To apply the Marketplace age restriction |
| Profile photo, bio, location area | Optional | To build your profile |
| Phone number | Optional | Account recovery, and contact where you choose |
| Vehicle details — make, model, year, specification, modifications, photographs | When you add a vehicle | To build your garage |
| Vehicle registration | Optional | To save you typing, and for stolen-vehicle reports |
| Routes, posts, comments, reviews, club and event details | When you create them | To publish them as you have chosen |
| Marketplace listings and messages | When you list or message | To run the Marketplace |
| Stolen vehicle reports | When you report | To alert other members |
| Payment details | When you buy something | Processed by Stripe; we do not store card numbers |
3.2 Information we collect automatically
| What | Why |
|---|---|
| Device location — see section 5 | Nearby content, navigation, recording drives, convoy position |
| Device and app information — model, OS version, app version, language | To make the app work and diagnose faults |
| Usage events — which screens and features you use | Product analytics, section 12 |
| IP address | Security, abuse prevention, approximate location |
| Log data | Diagnosing faults and investigating abuse |
3.3 Information from others
| Source | What |
|---|---|
| Apple, Google | Where you sign in with them: your name and email, as you have permitted |
| Stripe | Payment status, payout status, subscription state — not card numbers |
| Vehicle data lookups | Publicly available vehicle specification for a registration you enter |
| Other members | Reports about you, reviews of your business, or content that mentions you |
3.4 What we do not collect
We do not collect your date of birth, home address, driving licence, insurance details, bank details (Stripe holds those), or any special category data — health, ethnicity, religion, political opinion, sexual orientation, biometric or genetic data. Do not put any of that in a profile, post or message.
4. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Create and run your account | Contract |
| Show you content, routes, events, listings | Contract |
| Show nearby content based on your location | Contract |
| Record a drive when you start one | Contract |
| Share your position in a convoy when you choose to | Contract |
| Send transactional email — verification, receipts, security | Contract |
| Process payments and payouts | Contract; legal obligation for records |
| Keep the Service secure, prevent fraud and abuse | Legitimate interests — protecting members and the Service |
| Moderate content, investigate reports, meet our duties under the Online Safety Act 2023 | Legitimate interests and legal obligation — member safety |
| Product analytics | Legitimate interests — improving the Service |
| Publish a stolen-vehicle report | Legitimate interests — preventing and detecting crime, and assisting victims of theft |
| Record that you confirmed your age and accepted these terms | Legal obligation and legitimate interests |
| Send you marketing email | Consent — withdrawable at any time |
| Comply with legal and tax obligations | Legal obligation |
| Defend or bring a legal claim | Legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. You can object — see section 14 — and we will stop unless we have compelling grounds not to. Ask for our assessment at legal@revnet.club.
5. Location — in detail
5.1 While you are using the app
When RevNet is open we use your location to show nearby routes, events, clubs, services, destinations and members; to centre the map; to sort by distance; and to provide turn-by-turn navigation. This stops when you close the app.
5.2 In the background — two features, both started by you
Recording a drive. When you start a route recording we record your position as you travel, so the road you actually drove can become a route. This continues while your screen is locked, because a drive does not stop when your phone goes in your pocket. It ends when you stop the recording.
Convoy location sharing. When you join a convoy and turn sharing on, the other members of that convoy can see where you are. This continues while your screen is locked. It ends when you leave the convoy or turn sharing off.
Neither starts on its own. Both require you to start them deliberately. Both display a visible indicator while running. Both stop when you stop them.
5.3 Permission
Your device asks for "Always" location permission the first time you use a feature that needs it — never during signup.
You can decline. RevNet still works: route recording runs only while the app is open and your screen is on, and we tell you that clearly before you start.
Change or revoke permission at any time in iOS Settings.
5.4 What we store, and who can see it
| Data | Stored | Who can see it |
|---|---|---|
| Recorded drives | Against your account, until you delete them | Only you, unless you publish one as a route |
| Convoy positions | While the convoy is live | Only members of that convoy, while sharing is on |
| Live position shared with friends | While sharing is on and the position is recent | Only friends you have specifically shared with, who accepted |
| Recent approximate location | Refreshed while you use the app | Not shown to other members |
| Route start and end points | With a published route | Anyone who can see the route |
A note on published routes. If you record a drive that starts at your home and publish it as a route, the start point is your home. Trim the start and end before you publish. We show you the route beforehand so you can.
5.5 Your controls
Revoke location permission in iOS Settings · turn off live location sharing in RevNet's privacy settings · leave any convoy · stop any recording · delete any recorded drive · trim or delete any published route.
5.6 What we do not do
We do not sell location data. We do not share it with advertisers or data brokers. We do not track you when you are not using a feature that needs it. We do not build a profile of where you go for any purpose beyond the features you have asked for.
6. Your vehicle registration
6.1 Your registration is private data. It is not shown to other members, not included in public pages, not included in shared route links, and not included in analytics. It is protected at database level so it cannot be read by another member's app.
6.2 The exception is a stolen-vehicle report you submit yourself, where the registration is published deliberately — that is the point of the report. Section 13 covers this.
6.3 Photographs. A photograph you upload may show your plate. We do not remove it automatically. Consider whether you want it visible.
7. Children and young people
7.1 RevNet is for people aged 16 and over. Buying and selling in the Marketplace is restricted to those aged 18 and over.
7.2 How we check. When you create an account you confirm that you are 16 or over. The first time you use the Marketplace you confirm separately that you are 18 or over. We rely on those confirmations and do not use age-estimation or age-verification technology.
7.3 If we learn an account belongs to someone under 16, we close it and delete the data.
7.4 If you are a parent or guardian and believe your child has an account, contact legal@revnet.club and we will deal with it promptly.
7.5 We have carried out a children's access assessment and a children's risk assessment under the Online Safety Act 2023, and keep them under review.
8. Who can see what
8.1 Other members
| Always visible | Visible if you choose | Never visible |
|---|---|---|
| Username, display name | Profile photo, bio | Email address |
| Content you publish publicly | Your vehicles, if your garage is public | Phone number |
| Reviews you write | Your live location, in a convoy or to friends | Vehicle registration |
| Public club and event membership | Your approximate area | Private routes and recordings |
| Payment details |
8.2 Visibility settings
You control whether your profile is public; whether your garage is shown; whether each vehicle is public, friends-only or private; whether each route is public or private; whether you share live location at all; and who can message you.
8.3 Publicly accessible without an account
Two things are readable by anyone on the internet with no RevNet account:
- Stolen vehicle report pages — see section 13
- Shared route links you have chosen to share
Everything else requires an account.
8.4 Content can leave RevNet
Anything you publish can be seen, copied, screenshotted, cached or stored by others, including search engines. Deleting it here does not remove copies others already hold.
9. Who we share data with
We do not sell your personal data. We share it only as set out here.
9.1 Service providers
| Provider | What they process | Where | Safeguard |
|---|---|---|---|
| Supabase | Account, content, messages, app data, images | Germany (EU) | Adequacy |
| Stripe | Payment and payout details | EU / US | SCCs / IDTA |
| Mapbox | Map tiles, geocoding, route matching | US | SCCs / IDTA |
| Resend | Transactional email delivery | EU / US | SCCs / IDTA |
| Apple | Sign in with Apple, push notifications | US | SCCs / IDTA |
| Sign in with Google | US | SCCs / IDTA | |
| PostHog | Product analytics | US | SCCs / IDTA |
Each processes data only on our instructions, under a written agreement.
9.2 Other members
As set out in section 8, and as you have chosen.
9.3 Law enforcement and legal
We may disclose data where required by law, in response to a valid legal request, where necessary to investigate a crime — including vehicle theft or fraud on the Marketplace — or where necessary to protect someone's safety.
9.4 Business transfer
If RevNet is sold or reorganised, data may transfer to the acquirer. We will tell you, and this policy continues to apply until you are given a new one.
10. International transfers
10.1 Your core data is held in the European Union, in Germany.
10.2 Some providers process data in the United States. Those transfers are made under the UK International Data Transfer Addendum or Standard Contractual Clauses, with a transfer risk assessment where required.
10.3 Ask us for details of the safeguards at legal@revnet.club.
11. How long we keep things
| Data | Retention |
|---|---|
| Account and profile | Until you delete your account |
| Vehicles, routes, listings, posts, reviews | Until you delete them, or your account |
| Recorded drives | Until you delete them, or your account |
| Messages | Until you delete your account; the other party keeps their copy |
| Convoy positions | Removed when the convoy ends |
| Live location sessions | Removed when sharing stops |
| Stolen vehicle reports | Until closed by you, resolved, or removed by us |
| Reports, moderation records and our Online Safety Act records | Two years after resolution |
| Analytics events | Per PostHog's retention schedule |
| Payment and tax records | Six years, as UK law requires |
| Server logs | 30 days |
| Backups | Overwritten on our ordinary cycle, normally within 30 days |
When you delete your account we remove your profile, vehicles, routes, listings, recordings, messages, saved items and uploaded images, and revoke any linked Apple or Google sign-in. Some records remain where the law requires it — principally payment and tax records.
12. Analytics
12.1 We use PostHog to understand which parts of RevNet get used, so we can improve them and find what is not working.
12.2 Analytics events are linked to your account identifier and record things like which screens you open and which features you use.
12.3 They do not include your email address, phone number, vehicle registration, precise coordinates, message contents, or payment details.
12.4 We do not use analytics for advertising, and we do not share analytics data with advertisers.
12.5 PostHog processes this data in the United States, under the safeguards in section 10.
12.6 You can object to analytics — see section 14.
13. If your vehicle appears on RevNet and you are not a member
This section is for people who do not use RevNet.
13.1 What has happened. RevNet lets members report a vehicle as stolen. A report publishes the vehicle's registration, the area and date of the reported theft, and any photographs the reporter provided. That page is publicly accessible on the internet.
13.2 Why this involves you. A registration identifies a specific vehicle, and through it the registered keeper. If your vehicle has been reported — correctly or not — data about you is being processed, even though you have never used RevNet.
13.3 Our lawful basis is legitimate interests: helping victims of vehicle theft, and assisting in the prevention and detection of crime. We have weighed that against the rights of the person the vehicle belongs to, which is why 13.5 exists and why we act on it quickly.
13.4 We do not verify reports. A report on RevNet is an allegation by a member. It is not a police record, not a DVLA record, and not a finding by us or anyone else.
13.5 If your vehicle has been listed in error.
Contact legal@revnet.club.
- You do not need a RevNet account.
- We will not ask you to create one.
- We will suspend the listing while we look into it.
- We aim to respond within 24 hours.
Tell us the registration and, if you can, something showing the vehicle is yours and not stolen — a V5C, an insurance document, or a police confirmation. We will not publish anything you send us.
13.6 Your rights. You have the same rights as anyone else under UK GDPR, set out in section 14 — including the right to object to our processing, to have inaccurate data corrected, and to complain to the Information Commissioner's Office.
13.7 Sightings. Members may report sighting a listed vehicle. We do not publish the identity of anyone seen driving a vehicle, and we tell members not to approach a vehicle or attempt any recovery.
14. Your rights
| Right | What it means |
|---|---|
| Access | Get a copy of the personal data we hold about you |
| Rectification | Have inaccurate data corrected |
| Erasure | Have your data deleted, in most circumstances |
| Restriction | Have us stop using your data while a dispute is resolved |
| Portability | Get your data in machine-readable form, or have it sent elsewhere |
| Object | Object to processing based on legitimate interests, including analytics |
| Withdraw consent | Where we rely on consent, withdraw it at any time |
| Complain | Complain to the ICO |
14.1 How to exercise them. Most are available directly in the app: Settings has account deletion and a data export. For anything else, email legal@revnet.club.
14.2 Our response. Within one month. Complex requests may take up to three, and we will tell you if so. No charge unless a request is manifestly unfounded or excessive.
14.3 Identity. We may need to verify who you are before acting, usually by emailing the address on the account.
14.4 Complaining to the ICO. ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would rather you came to us first, but you do not have to.
15. Security
15.1 We protect your data with:
- encryption in transit (TLS) and at rest;
- database access controls that restrict what any account can read, enforced by the database itself rather than only by the app;
- column-level restrictions on the most sensitive fields — vehicle registration and phone number — so they cannot be read by another member's app;
- passwordless sign-in, so there is no password to be stolen or reused;
- private storage for sensitive uploads, such as documents attached to a stolen-vehicle report;
- redaction of personal data from diagnostic reports before they leave your device.
15.2 No system is perfectly secure. If we become aware of a breach likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you where the risk is high.
15.3 Keep your email account secure — it is how RevNet sign-in works.
16. Cookies and on-device storage
16.1 The app stores data on your device to keep you signed in, remember preferences, and cache content. This is necessary for the app to work.
16.2 The website uses cookies that are strictly necessary for it to function, and analytics cookies where you have consented. See our Cookies Policy.
16.3 We do not use advertising or tracking cookies, and we do not participate in cross-site advertising networks.
17. Marketing
17.1 We send transactional messages — verification, receipts, security notices, and notifications you have enabled — as part of providing the Service.
17.2 We send marketing email only where you have consented. Every marketing email has an unsubscribe link, and you can change notification settings in the app at any time.
17.3 Unsubscribing from marketing does not stop transactional messages, which are necessary to run your account.
18. Changes to this policy
18.1 We may update this policy as RevNet changes. The current version is always available in the app and at revnet.club, with the date it took effect.
18.2 Where a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
18.3 We keep previous versions and will provide one on request.
19. Contact
| For | Contact |
|---|---|
| Privacy questions, or exercising your rights | legal@revnet.club |
| A vehicle listed in error | legal@revnet.club |
| Reporting content | legal@revnet.club |
| Anything else | hello@revnet.club |
| By post | REVNET LTD, Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Waterlooville, Hampshire, PO8 0BT |
REVNET LTD · Company number 17054158 · ICO registration 00014762697
Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Waterlooville, Hampshire, PO8 0BT
revnet.club