LEGAL

Privacy Policy

Last updated: May 2026

Your data, clearly explained: MXRevv collects location data only during active group sessions. We never sell your data. Location sharing stops the moment your session ends.

1. Overview

MXRevv ("we", "us", "our") operates the website at www.mxrevv.com and the MXRevv mobile application (collectively, the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your data.

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, you must stop using the Service immediately.

2. Data We Collect

We collect the following categories of personal data:

(a) Account Data — when you sign up for early access or create an account: your name, email address, vehicle type, and any profile information you voluntarily provide.

(b) Location Data — when you use the Service during an active session: your real-time GPS coordinates, speed, heading, and movement history. Location data is only collected while a session is active and you have granted location permission on your device.

(c) Device & Usage Data — automatically collected when you use the Service: device type, operating system, IP address, browser type, pages visited, session duration, and crash/error logs. This data is collected for performance monitoring and service improvement.

(d) Communications — if you contact us via email, social media, or our website contact form, we retain the content of those communications to respond to you and improve support.

3. How We Use Your Data

We use your personal data for the following purposes:

(a) To provide and operate the Service — including creating and managing your account, enabling live group sessions, and displaying your position to other session participants.

(b) To improve the Service — analysing anonymised, aggregated usage patterns, diagnosing technical issues, and developing new features.

(c) To communicate with you — sending early access updates, product announcements, and responding to your enquiries. You may opt out of marketing communications at any time.

(d) To ensure safety and legal compliance — detecting and preventing misuse, fraud, or violations of our Terms and Conditions, and complying with applicable laws and regulations.

(e) To display city-level heatmaps — anonymised, aggregated location data may be used to show regional adoption trends within the Service. This data cannot identify you individually.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Location Data — Specific Practices

Location data is the most sensitive category of data we process. We apply the following specific practices:

(a) Location is only collected while you have an active session running in the MXRevv app. It is not collected in the background when the app is closed or when no session is active.

(b) Your live location during a session is shared exclusively with other participants in the same session — users who have joined using the same session code. It is not publicly accessible.

(c) When a session ends or you leave a session, live location sharing ceases immediately.

(d) We do not sell, rent, or license your individual location data to third parties, advertisers, or data brokers under any circumstances.

(e) Historical location data from sessions may be retained in anonymised, aggregated form for service analytics. Raw, identifiable session location data is deleted within 30 days of session completion unless required by law to be retained longer.

(f) You may withdraw location permission at any time through your device settings. Doing so will prevent core features of the Service from functioning.

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only in the following limited circumstances:

(a) Other session participants — your display name, vehicle type, real-time location, and speed are visible to users in the same active session.

(b) Service providers — we use trusted third-party providers to operate the Service, including cloud hosting, analytics, and crash reporting. These providers process data on our behalf under contractual obligations consistent with this Policy. Current categories include: cloud infrastructure providers, mobile analytics platforms, and error monitoring services.

(c) Legal requirements — we may disclose your data where required by law, court order, or government authority, or where we believe disclosure is necessary to protect the safety of any person.

(d) Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

6. Data Retention

We retain personal data for as long as necessary to provide the Service and fulfil the purposes described in this Policy, or as required by applicable law.

Account data is retained for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for analytical purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

(a) Right of access — request a copy of the personal data we hold about you.

(b) Right to rectification — request correction of inaccurate or incomplete data.

(c) Right to erasure — request deletion of your personal data, subject to legal obligations to retain certain records.

(d) Right to restrict processing — request that we limit how we use your data in certain circumstances.

(e) Right to data portability — receive your data in a structured, machine-readable format.

(f) Right to object — object to our processing of your data for specific purposes including marketing.

(g) Right to withdraw consent — where processing is based on consent (such as location collection), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us via the channels listed on our Contact page at www.mxrevv.com/contact. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us immediately and we will delete it promptly.

9. Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

MXRevv operates globally. Your data may be processed and stored in countries other than your own, including countries whose data protection laws may differ from those in your jurisdiction. Where we transfer data internationally, we apply appropriate safeguards in accordance with applicable law.

11. Cookies & Analytics

Our website uses cookies and similar tracking technologies to analyse traffic and improve user experience. We use Google Analytics to understand how visitors interact with www.mxrevv.com. Google Analytics collects anonymised usage data including pages visited, time on site, and device information.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, via the Service or email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact & Data Controller

MXRevv is the data controller for personal data processed under this Policy.

For privacy-related enquiries, requests to exercise your rights, or concerns about how we handle your data, contact us via:

Website: www.mxrevv.com/contact Twitter / X: @mxrevvapp Instagram: @mxrevvapp