Privacy

Privacy Policy

Effective 9 October 2026

REVNET LTD · Company number 17054158 · Registered in England and Wales

Effective: 9 October 2026 · Version 1.7 (9 October 2026)

What changed in 1.7. SOS now works through a private chat with each helper: helpers see only roughly how far away you are and the town or area you are in, and your exact location and phone number reach a helper only if you send them in that chat (3.1, 5.4, 8.1, 11). You can save your breakdown cover (3.1, 3.4, 11). Stolen-vehicle reports record the country of the plate and an optional VIN that nobody else can see, show only a rough area of the theft, and we now email you about your report (3.1A, 4, 5.4, 11, 13).

---

In short

• We collect what we need to run RevNet: your account, your content, your vehicles, and your location.
• Two features can use your location in the background, and only when you start them: sharing your position in a convoy, and sharing it with someone you are helping through SOS.
• If you ask for help through SOS, members who could help see only roughly how far away you are and the town or area you are in — never a map or your exact spot. Your exact location and your phone number go only to a helper you choose, and only if you send them in your private chat with that helper.
• Your registration plate is private and is not shown to other members. So is your phone number, unless you add a contact number to a Marketplace listing, which signed-in members aged 18 or over can reveal on that listing, or send it to someone in a chat.
• We do not use third-party product analytics. Nothing about how you use RevNet is sent to an analytics provider.
• Our map provider, Mapbox, receives a count of map loads for licensing.
• We do not sell your data and we do not share it for advertising. We use no advertising networks and we do not track you to target ads. If we show a placement sponsored by a local business, it is clearly labelled and chosen by the area you are looking at, never by profiling you (12.5).
• You can delete your account, and everything in it, from Settings.

The rest is the detail.

---

1. Who we are

1.1 RevNet is operated by REVNET LTD, registered in England and Wales under company number 17054158, whose registered office is at Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Waterlooville, Hampshire, PO8 0BT.

1.2 We are the data controller for personal data processed through the RevNet app and revnet.club.

1.3 Contact us about privacy at legal@revnet.club, or write to us at the address above.

1.4 We are registered with the Information Commissioner's Office under registration number 00014762697.

1.5 Our representative in the European Union. RevNet Ltd is established in the United Kingdom. Under Article 27 of the EU General Data Protection Regulation we have appointed a representative in the European Union, who may be contacted by individuals in the EU and by supervisory authorities on any matter relating to our processing of personal data:

Susanne Lotta Blomberg

Huseberg 608

471 93 Kållekärr

Sweden

eurep@revnet.club

You may contact our representative instead of us, in any official language of the European Union. Contacting the representative does not limit any right you have to contact us directly at legal@revnet.club, or to complain to your own supervisory authority.

---

2. Who this applies to

2.1 This policy covers everyone who uses RevNet, whether or not you have an account.

2.2 It also covers people who do not use RevNet but whose data may appear on it — most importantly, the registered keeper of a vehicle reported as stolen (section 13 is written for you), and organisers, businesses and photographers whose events, listings or photographs we add from public sources (section 13A is written for you).

---

3. What we collect

3.1 Information you give us

3.1A Stolen-vehicle reports

A report asks for the registration and the country that issued the plate, the vehicle's type, make, model, year and colour, the date it was taken, roughly where it was taken, and a contact number. You can also give the time of day, a description, photographs, a police crime reference and the vehicle's VIN or frame number. If the vehicle is not one in your RevNet garage, we ask for a document showing it is yours.

What stays private. Your contact number, the VIN, the exact place the vehicle was taken and any document you send are never shown to other members, on the public page, or in any email. The VIN is kept with your report and included in your data export; nothing else in RevNet reads it. Section 5.4 explains what members see instead of the exact place.

Emails about your report. We email you, at your account's email address, a copy of your alert when it is published. If you have not added a police crime reference, we send up to two reminders, about 24 hours and 72 hours after you filed. They stop as soon as you add a reference, mark the vehicle recovered, or the alert is taken down. We keep a record of which of these emails we sent for each report and when, so none is sent twice.

3.2 Information we collect automatically

#### 3.2A What you search for in the Marketplace

We store Marketplace search terms and the filters applied, together with your

account, to see what members are looking for and to improve results and alerts.

We do not sell this, and we do not share individual searches with sellers. A

seller is never told who searched for their item or what anyone typed. It is

deleted with your account.

#### 3.2B Using RevNet as a guest

If you open RevNet without signing in, we create a guest session for you: an anonymous account record on our servers, so the app can load events, routes and listings. It holds no name, email address, phone number or profile — only a random identifier, when the session was created and last used, and the technical details any session carries (your device's IP address and app version). A guest cannot post, message or buy anything.

If you later sign up on the same device, the guest record becomes your account. If you do not, we delete it after 30 days without use.

3.3 Information from others

3.4 What we do not collect

We do not collect your date of birth, home address, driving licence, insurance details (other than breakdown cover details you choose to save — 3.1), bank details (Stripe holds those), or any special category data — health, ethnicity, religion, political opinion, sexual orientation, biometric or genetic data. Do not put any of that in a profile, post or message.

---

4. Why we use it, and our lawful basis

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. You can object — see section 14 — and we will stop unless we have compelling grounds not to. Ask for our assessment at legal@revnet.club.

---

5. Location — in detail

5.1 While you are using the app

When RevNet is open we use your location to show nearby routes, events, clubs, services, destinations and members; to centre the map; to sort by distance; and to provide turn-by-turn navigation.

Live location use stops when you close the app, except for background sharing you start yourself (5.2). The weekly round-up in 5.1A, if you turn it on, uses the location already saved to your account rather than collecting a new one.

5.1A A weekly round-up, if you want it

It is off unless you turn it on, under Weekly round-up in notification settings.

Once a week we use the last location saved to your account — the one described in 5.4, saved when you last used RevNet with location turned on — to work out what is on near you, and send you a single notification about it. We do not collect a new location to do this, and nothing runs on your device.

No other member can see your location or that we did this. You can turn it off at any time under Weekly round-up in notification settings, without affecting anything else.

5.2 In the background — two features, started by you

Convoy location sharing. When you start or join a convoy and turn sharing on, the other members of that convoy can see where you are. This continues while your screen is locked, because a drive does not stop when your phone goes in your pocket. It ends when you leave the convoy or turn sharing off.

Helping someone through SOS. If you offer help and choose to share your position with the person who asked, it is shared only with them, and ends when you stop sharing or the request closes. If you have already given RevNet "Always" permission, this continues while your screen is locked.

It does not start on its own. You have to start or join a convoy deliberately, and we explain what sharing does and ask you to agree before it begins. It displays a visible indicator while running, and stops when you stop it.

5.3 Permission

Your device asks for "Always" location permission when you first start or join a convoy — never during signup.

You can decline. RevNet still works. If you allow location only while using the app, your device may still let sharing continue for a short time after you lock the screen, and shows a location indicator while it does. When your position is not reaching the group, we tell you while the convoy is running.

Change or revoke permission at any time in your device settings.

5.4 What we store, and who can see it

If you have turned on Available to help, we also use your saved recent location to work out whether you are within your chosen distance of someone who has asked for help through SOS, so we can alert you. The person asking does not see it.

A note on published routes. If you draw or upload a route that starts at your home, the start point is your home. Trim the start and end before you publish. We show you the route beforehand so you can.

5.5 Your controls

Revoke location permission in your device settings · turn off live location sharing in RevNet's privacy settings, which also ends any convoy you are in · leave any convoy · trim or delete any published route.

5.6 What we do not do

We do not sell location data. We do not share it with advertisers or data brokers. We do not track you when you are not using a feature that needs it. We do not build a profile of where you go for any purpose beyond the features you have asked for.

---

6. Your vehicle registration

6.1 Your registration is private data. It is not shown to other members, not included in public pages, not included in shared route links, and not included in analytics. It is protected at database level so it cannot be read by another member's app.

6.2 The exception is a stolen-vehicle report you submit yourself, where the registration is published deliberately — that is the point of the report. Section 13 covers this.

6.3 Photographs. A photograph you upload may show your plate. We do not remove it automatically. Consider whether you want it visible.

---

7. Children and young people

7.1 RevNet is for people aged 16 and over. Buying and selling in the Marketplace is restricted to those aged 18 and over.

7.2 How we check. When you create an account you confirm that you are 16 or over. The first time you use the Marketplace you confirm separately that you are 18 or over. We rely on those confirmations and do not use age-estimation or age-verification technology.

7.3 If we learn an account belongs to someone under 16, we close it and delete the data.

7.4 If you are a parent or guardian and believe your child has an account, contact legal@revnet.club and we will deal with it promptly.

7.5 We have carried out a children's access assessment and a children's risk assessment under the Online Safety Act 2023, and keep them under review.

---

8. Who can see what

8.1 Other members

8.2 Visibility settings

You control whether your profile is public; whether your garage is shown; whether each vehicle is public, friends-only or private; whether each route is public or private; whether you share live location at all; and who can message you.

8.3 Publicly accessible without an account

These are readable by anyone on the internet with no RevNet account:

• Stolen vehicle report pages — see section 13
• Shared route links you have chosen to share
• Public profiles. Where your profile visibility is set to public, your username, display name, profile photo, bio, area and public content can be read without an account, including your helper rating and count — see 8.5. Set your profile to private in Settings if you do not want this.
• Public event, club and listing pages that have been shared as a link

Everything else requires an account.

8.4 Content can leave RevNet

Anything you publish can be seen, copied, screenshotted, cached or stored by others, including search engines. Deleting it here does not remove copies others already hold.

8.5 Your helper rating is public, and ratings are not anonymous

If members you helped have rated you, your average score and the number of people you have helped are shown on your profile to anyone who can see it — including signed-out visitors where your profile is public.

Other members see only the average and the count. No one else sees an individual rating, who gave it, or what they wrote.

What the member you rate sees depends on the rating you gave. At 4 or 5 stars they see your comment and your name. At 3 they see the comment without your name. At 1 or 2 they see the score alone — your comment and your identity go to our moderators instead, because a low rating with something written on it is closer to a report than a review.

⚠ A comment can identify you even where your name is withheld. We cannot redact a description of yourself out of your own sentence. If you need to raise something you would not want traced back to you, report it to us rather than writing it in a rating.

Our moderators can see every rating in full, always — the score, the comment, who wrote it and who it was about — which is what makes a retaliatory or fabricated rating something we can act on.

This is personal data about both of you and your rights in section 14 apply: you can ask for a copy, ask us to correct it, and it is deleted with your account. You cannot opt out of being rated while using SOS — a reputation nobody can see is not a reputation. The way to stop being rated is to stop offering help.

---

8.6 If a message is reported

Your messages are private to the people in the conversation, and we do not read them. The exception is a report. If someone in a conversation reports a message, our moderators can read that message — as it was when it was reported, even if it is later unsent — and up to five messages before it in the same conversation, so they can judge it in context. They cannot read anything else in that conversation. A copy of the reported message is kept with the report, under "Reports, moderation records" in section 11. Every time a moderator opens a reported message, we record who opened it and when.

9. Who we share data with

We do not sell your personal data. We share it only as set out here.

9.1 Service providers

Each processes data only on our instructions, under a written agreement.

A note on push notifications. To deliver a notification to your phone we pass it to Apple or Google, who operate the only route to your device. The notification carries the title and a short preview, which for a message includes the sender's name and the opening words of what they wrote. Turn off message previews in your device settings, or notifications altogether, if you would rather that did not happen.

9.2 Other members

As set out in section 8, and as you have chosen.

9.3 Law enforcement and legal

We may disclose data where required by law, in response to a valid legal request, where necessary to investigate a crime — including vehicle theft or fraud on the Marketplace — or where necessary to protect someone's safety.

9.4 Business transfer

If RevNet is sold or reorganised, data may transfer to the acquirer. We will tell you, and this policy continues to apply until you are given a new one.

---

9.5 Stripe Connect — business and organiser accounts

If you take payments through RevNet — event tickets, or a business listing — you open a Stripe Connect account, and Stripe becomes an independent controller of what you give it: your identity documents, bank details and tax information. Stripe's own privacy policy governs those.

We never see or store any of it. What we hold about your Connect account is: its Stripe account identifier, its country, whether it can accept charges, whether it can receive payouts, whether onboarding has been completed, and when it was created. Nothing else from Stripe reaches our database.

10. International transfers

10.1 Your core data is held in the European Union, in Germany.

10.2 Some providers process data in the United States. Those transfers are made under the UK International Data Transfer Addendum or Standard Contractual Clauses, with a transfer risk assessment where required.

10.3 Ask us for details of the safeguards at legal@revnet.club.

---

11. How long we keep things

When you delete your account we remove your profile, vehicles, routes, listings, messages, saved items and uploaded images, and revoke any linked Sign in with Apple. If you signed in with Google, we hold no Google access to revoke; you can also remove RevNet from the third-party connections in your Google Account. Deletion cascades through our database, so records that reference your account go with it. Some records remain where the law requires it — principally payment and tax records.

---

12. Analytics

12.1 We do not use third-party product analytics. RevNet does not send events about which screens you open or which features you use to any analytics provider. There is nothing to turn on and nothing to turn off.

12.2 We learn how RevNet is used from our own database — the content, accounts and activity that running the Service already involves, described in section 3. We do not currently use a crash-reporting service; if we start, we will name it in section 9.1 first, and its reports will carry no account identifier, no IP address and no message content.

12.3 Map usage data. Our map provider, Mapbox, receives its own record each time a map loads — a map-load count and a randomly generated identifier it stores on your device. This is how Mapbox meters and bills our use of its maps. It is not product analytics and we receive no report about you from it.

12.5 Sponsored placements. Where we show a placement sponsored by a local business, it is clearly labelled "Sponsored" and chosen by the area and the content you are looking at — never by a profile of you, your history or your interests. We use no advertising network or advertising identifier, and nothing about you is shared with the sponsor. We count how many times a placement is shown and tapped, in total, so we can report it to the sponsor; those counts carry no account identifier.

12.4 Before 16 September 2026. Versions of the iOS app released between 17 August and 15 September 2026 (builds 27 to 34) sent usage events, linked to your account, to PostHog, an analytics provider in the United States. We have removed it from the app and the website, and we have deleted that data.

---

13. If your vehicle appears on RevNet and you are not a member

This section is for people who do not use RevNet.

13.1 What has happened. RevNet lets members report a vehicle as stolen. A report publishes the vehicle's registration and the country that issued it, its make, model and colour, the town or area and date of the reported theft, and any photographs the reporter provided. That page is publicly accessible on the internet. The exact place the vehicle was taken is never published: members see an area about 1 km across.

13.2 Why this involves you. A registration identifies a specific vehicle, and through it the registered keeper. If your vehicle has been reported — correctly or not — data about you is being processed, even though you have never used RevNet.

13.3 Our lawful basis is legitimate interests: helping victims of vehicle theft, and assisting in the prevention and detection of crime. We have weighed that against the rights of the person the vehicle belongs to, which is why 13.5 exists and why we act on it quickly.

13.4 We do not verify reports. A report on RevNet is an allegation by a member. It is not a police record, not a record of a vehicle licensing authority such as the DVLA, and not a finding by us or anyone else.

13.5 If your vehicle has been listed in error.

Contact legal@revnet.club.

• You do not need a RevNet account.
• We will not ask you to create one.
• We will suspend the listing while we look into it.
• We aim to respond within 24 hours.

Tell us the registration and, if you can, something showing the vehicle is yours and not stolen — a registration document (in the UK, a V5C), an insurance document, or a police confirmation. We will not publish anything you send us.

13.6 Your rights. You have the same rights as anyone else under UK GDPR, set out in section 14 — including the right to object to our processing, to have inaccurate data corrected, and to complain to the Information Commissioner's Office.

13.7 Sightings. Members may report sighting a listed vehicle. We do not publish the identity of anyone seen driving a vehicle, and we tell members not to approach a vehicle or attempt any recovery.

---

13A. If your event, business or photograph is on RevNet and you did not add it

This section is for organisers, businesses, venues and photographers who may not use RevNet.

13A.1 What we do. To help people find motoring events, places and services in one place, we add listings from information that organisers, businesses and venues have published themselves — on their own websites, social media and public event listings. A listing can include an organiser's or business's name, its website, and the contact details it publishes for the public. Where the organiser or business is a sole trader or an individual, that is personal data about you. We also show photographs published under open licences, credited to their authors as the licence requires, which means showing the author's name or username.

13A.2 What we do not do. We do not add private contact details, we do not contact you for marketing because you are listed, and we do not sell or share the information.

13A.3 Our lawful basis is legitimate interests: helping members find events, places and services, and — for photographs — meeting the attribution the licence requires. We have weighed that against your rights, which is why 13A.4 exists.

13A.4 What you can do. Email legal@revnet.club to have a listing about you corrected or removed, or to have a photograph or credit corrected or removed. You can also claim the listing in the app to manage it. We act on genuine requests promptly. You have the same rights as anyone else under section 14, including the right to object and to complain to the Information Commissioner's Office.

---

14. Your rights

14.1 How to exercise them. Most are available directly in the app: Settings has account deletion and a data export. For anything else, email legal@revnet.club.

14.2 Our response. Within one month. Complex requests may take up to three, and we will tell you if so. No charge unless a request is manifestly unfounded or excessive.

14.3 Identity. We may need to verify who you are before acting, usually by emailing the address on the account.

14.4 Complaining to the ICO. ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would rather you came to us first, but you do not have to.

---

15. Security

15.1 We protect your data with:

• encryption in transit (TLS) and at rest;
• database access controls that restrict what any account can read, enforced by the database itself rather than only by the app;
• column-level restrictions on the most sensitive fields — vehicle registration, phone number, and the VIN given with a stolen-vehicle report — so they cannot be read by another member's app;
• passwordless sign-in, so there is no password to be stolen or reused;
• private storage for sensitive uploads, such as documents attached to a stolen-vehicle report;
• redaction of personal data from diagnostic reports before they leave your device.

15.2 No system is perfectly secure. If we become aware of a breach likely to result in a risk to your rights, we will notify the ICO within 72 hours and tell you where the risk is high.

15.3 Keep your email account secure — it is how RevNet sign-in works.

---

16. Cookies and on-device storage

16.1 The app stores data on your device to keep you signed in, remember preferences, and cache content. This is necessary for the app to work.

16.2 The website uses storage that is strictly necessary for it to function. It carries no product analytics — section 12.

16.3 We do not use advertising or tracking cookies, and we do not participate in cross-site advertising networks.

---

17. Marketing

17.1 We send transactional messages — verification, receipts, security notices, and notifications you have enabled — as part of providing the Service.

17.2 We send marketing email only where you have consented. Every marketing email has an unsubscribe link, and you can change notification settings in the app at any time.

17.3 Unsubscribing from marketing does not stop transactional messages, which are necessary to run your account.

---

18. Changes to this policy

18.1 We may update this policy as RevNet changes. The current version is always available in the app and at revnet.club, with the date it took effect.

18.2 Where a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.

18.3 We keep previous versions and will provide one on request.

---

19. Contact

---

REVNET LTD · Company number 17054158 · ICO registration 00014762697

Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Waterlooville, Hampshire, PO8 0BT

revnet.club