Privacy Policy

1. Introduction

This Privacy Policy describes how Appfide Private Limited ("Company," "we," "us," or "our") collects, uses, and protects your information when you use the ReVersion application and related services (collectively, the "Service"), including the website at reversion.me.

ReVersion is built on a Privacy-First, Local-First architecture. This is not a marketing statement — it is a core engineering principle. Your personal health data is processed and stored exclusively on your devices using Apple's HealthKit framework. We have deliberately designed our systems so that we cannot access your personal health information, even if compelled to do so.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use the Service.

2. Our Privacy Principles

ReVersion is engineered around four non-negotiable privacy principles:

3. Information We Collect

3.1 Information You Provide Directly

• Waitlist Email Address: When you join our waitlist via the website, we collect your email address solely for the purpose of notifying you about product availability, beta access invitations, and important product updates.
• Support Communications: If you contact us for support, we may collect your email address, name, and the content of your communications to provide assistance.

3.2 Information Processed Locally (Never Transmitted to Us)

The following data is processed exclusively on your device and is never transmitted to, collected by, or accessible to Appfide Private Limited:

• Fasting schedules, durations, and metabolic state data
• Caloric intake and nutritional information
• Sleep data including Deep, REM, and Core sleep stages
• Body weight, body fat percentage, and other body metrics
• Workout and physical activity data from HealthKit
• Mood and emotional state logs (via HKStateOfMind API)
• Hydration tracking data
• Any data written to or read from Apple HealthKit

3.3 Automatically Collected Technical Data (Website Only)

When you visit our website at reversion.me, standard web server logs may record:

• IP address (anonymized where technically feasible)
• Browser type and version
• Referring page URL
• Pages visited and time spent
• Device type and screen resolution

This data is used exclusively for website analytics, performance monitoring, and security purposes. It is not linked to any health data or app usage.

3.4 Information We Do NOT Collect

For absolute clarity, we explicitly confirm that we do not collect:

• Health data of any kind from the ReVersion application
• Location data or GPS coordinates
• Contact lists, photos, or media files
• Biometric data (fingerprint, face geometry, etc.)
• Financial or payment information (all purchases are processed by Apple)
• Advertising identifiers or cross-app tracking data
• Data from third-party apps or services on your device

4. How We Use Information

The limited information we do collect is used for the following purposes:

5. Apple HealthKit Integration

ReVersion integrates deeply with Apple HealthKit to provide its core functionality. In full compliance with Apple's HealthKit guidelines and App Store Review Guidelines:

• Explicit Permission: ReVersion requests granular read/write access to specific HealthKit data types. You can grant or revoke access to each data type individually at any time via iOS Settings → Health → Data Access.
• Minimal Access: We request access only to HealthKit data types directly relevant to ReVersion's features (fasting, nutrition, sleep, mood, activity, body metrics, hydration).
• No Third-Party Sharing: HealthKit data is never shared with third parties, advertising networks, data brokers, or any entity outside of your device. This is technically enforced by our architecture, not merely a policy promise.
• No Cloud Upload: HealthKit data is never uploaded to any server operated by Appfide Private Limited. Sync between your Apple devices occurs exclusively via your personal iCloud account under Apple's encryption.
• No Monetization: HealthKit data is never used for advertising, user profiling, data sales, market research, or any form of monetization.

6. AI and Data Processing

ReVersion's AI health secretary provides personalized health insights. Here is exactly how data flows through the AI system:

1. On-Device Preprocessing: Your health data is processed on-device. Many insights are generated entirely on-device without any network transmission.
2. PII Stripping: When cloud AI processing is needed for complex queries, all personally identifiable information is stripped from the data before transmission. The AI receives anonymized, context-only health metrics.
3. Stateless Processing: Each AI request is independent. There is no session memory, conversation history, or user profile maintained on any server. The AI has no knowledge of who you are.
4. Immediate Disposal: After generating a response, all transmitted data is immediately discarded. No logs, caches, or copies are retained.
5. No Training: Your data is never used to train, fine-tune, or improve AI models. This prohibition is absolute at an infrastructure level.

7. Data Sharing and Disclosure

We do not sell, rent, license, or trade your personal information with any third party. We may share limited information only in the following circumstances:

• Service Providers: We may use trusted third-party service providers (e.g., email delivery, website hosting) who process data on our behalf under strict contractual obligations of confidentiality and data protection.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request. However, because we do not possess your health data, we are technically unable to disclose what we do not have.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, any personal information we hold (limited to email addresses) would be transferred under the same privacy protections described herein.

8. Data Retention

• Waitlist Email Addresses: Retained until you request removal, or until 12 months after the product launches publicly, whichever comes first. You may request removal at any time by emailing [email protected].
• Support Communications: Retained for up to 24 months following resolution of a support request, then permanently deleted.
• Website Logs: Automatically purged after 90 days.
• Health Data: Not applicable — we do not store your health data. All health data is stored on your device and managed by Apple HealthKit. You control its retention through iOS Settings.

9. Data Security

We implement industry-standard security measures to protect the limited information we process:

• All data in transit is encrypted using TLS 1.3
• Database access is restricted and encrypted at rest
• Multi-factor authentication is required for all administrative access
• Regular security audits and vulnerability assessments
• Principle of least privilege applied across all systems
• DDoS protection and rate limiting on all endpoints

The strongest security measure, however, is architectural: because we do not store your health data, it cannot be breached, leaked, or stolen from our systems. Your most sensitive information exists only within Apple's encrypted HealthKit sandbox on your device.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right of Access: Request a copy of any personal information we hold about you (limited to email address and associated metadata).
• Right to Rectification: Request correction of inaccurate personal information.
• Right to Erasure: Request permanent deletion of all personal information we hold about you.
• Right to Restrict Processing: Request that we limit how we process your personal information.
• Right to Data Portability: Receive your personal information in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing of your personal information for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent to data processing at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Children's Privacy

ReVersion is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take immediate steps to delete such information. If you believe a child has provided us with personal information, please contact us at [email protected].

12. International Data Transfers

Appfide Private Limited is incorporated in India. If you access the Service from outside India, please be aware that your information (limited to email address if you join the waitlist) may be transferred to, stored, and processed in India or other jurisdictions where our service providers operate. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

For health data: no international transfer occurs, as all health data remains on your local device within Apple's HealthKit framework.

13. Cookies and Tracking Technologies

Our website at reversion.me uses minimal, essential cookies for basic functionality. We do not use:

• Third-party advertising cookies
• Cross-site tracking pixels or beacons
• Fingerprinting technologies
• Social media tracking widgets
• Retargeting or remarketing technologies

The ReVersion iOS application does not use cookies, tracking pixels, advertising identifiers, or any form of cross-app tracking. We fully comply with Apple's App Tracking Transparency (ATT) framework.

14. Third-Party Links and Services

The Service may contain links to third-party websites or services (e.g., Apple App Store, our company website at appfide.com). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify waitlist subscribers via email for significant changes
• Provide in-app notification for material changes (once the app is launched)

We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

16. GDPR Compliance (European Users)

If you are a resident of the European Economic Area (EEA), the United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and equivalent legislation. In addition to the rights listed in Section 10:

• Data Controller: Appfide Private Limited is the data controller for any personal information processed via the website and waitlist.
• Lawful Basis: We process your email address based on your explicit consent (given when joining the waitlist). Website technical data is processed under our legitimate interest in maintaining website security and performance.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority.

17. CCPA Compliance (California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected.
• Right to Delete: You can request deletion of personal information we have collected from you.
• Right to Opt-Out of Sale: We do not sell your personal information. No opt-out is necessary.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

18. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: