Privacy
Last updated 8 October 2026
This is a draft. It describes what the software actually does, which is the part worth getting right first, but it has not been reviewed by a lawyer and the operating entity is not yet named. Both need settling before this is relied on, particularly for people in the EU and the UK.
What this is
Reveki is a tool for recording revenue by hand and, if you choose, sharing it. This page describes what it stores, why, and how to get rid of it.
What is stored
- The figures you type. Business names, stream names, currencies and monthly amounts. Nothing is imported from anywhere; everything here is something you entered or a file you dropped in.
- An email address, only once you add one. You can use the product without it.
- A session cookie, so the browser stays signed in. It is strictly necessary, and the app sets no advertising or analytics cookie.
- Sign-in links, stored only as a one-way digest, deleted once used or expired.
- Failed sign-in counts against an IP address, to stop guessing. Cleared on success.
What is not
No advertising, no profiling, and nothing is sold or shared with anyone for marketing. Files you drop in are read in your browser to work out the columns; the figures are what gets saved, not the file.
The marketing pages, meaning this one and the front page, can load Google Analytics so we can see how many people arrive and from where. They ask first, and nothing is requested from Google unless you say yes, so declining means your browser never contacts them at all. The answer is kept in your own browser's storage, not in a cookie, and you can change it whenever you like. Saying no changes nothing about how the site works.
Analytics is never loaded in the app and never on a shared dashboard, so no figure, business name or stream name is sent to Google under any circumstances. If your browser sends a Global Privacy Control signal we take that as a no and do not ask.
Who can see your figures
Only you, unless you publish a link. A dashboard is private until you choose otherwise, and sharing is one dashboard at a time. A shared link can be open to the web, or behind a code, or set to show percentages with no amounts at all. Turning a link off stops it working immediately.
If you give someone an editor code for a business, they can see and change that business's figures and nothing else.
Where it lives
On Cloudflare's network, in their D1 database, as a processor acting on our instructions. Backups are held in the same account. Cloudflare operates globally, so data may be processed outside your country.
How long it is kept
- With an email on it: until you delete it.
- Without one: a ledger nobody has put an email on is deleted after thirty days of no changes. If you want to keep what you have typed, add an email.
- Sign-in links: fifteen minutes, or until used.
Getting rid of it
In the app, open the business menu and choose Account, then Delete my account. That removes every business, stream and figure, and turns off every link you have shared. It is immediate and there is no copy kept afterwards. Export CSV takes a copy first if you want one.
Your rights
If you are in the EU or the UK you have the right to see what is held about you, correct it, take it elsewhere, and have it erased. Export CSV covers access and portability, and account deletion covers erasure, both without asking anyone. For anything else, get in touch.
Changes
If this page changes in a way that matters, the date above changes with it.