your secret, and your data
Privacy Policy
We built Reveally to keep one secret extremely well, so it would be strange to be careless with everything else. Here is exactly what we collect, why, and what we do with it.
Last updated
Who we are
Reveally ("we", "us", "our") operates the Reveally website and web app. This policy explains how we handle personal information, and it applies to everyone who touches the service: the couple with an account, the clinician who enters the result, and the friends and family who guess.
We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). By using Reveally you agree to this policy and to our Terms and Conditions.
Information we collect
We collect only what the product needs to work. In practice that is:
- Account information. The email address and password you sign up with. If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password.
- Profile information. The first names you choose to display, and your due date, if you enter one.
- The result. The baby's sex, as entered by your obstetrician or sonographer, and the time it was entered.
- Memories. Any photos or videos you upload to your reveal.
- Guesses. When someone opens your guessing link, we store the name they type, whether they picked Team Blue or Team Pink, any message they leave, and a random identifier saved in their own browser so they can change their pick later. That identifier is never shown on the board.
- Technical information. Standard server logs, and analytics about which pages are viewed. We do not send the clinician entry code to analytics.
Clinicians do not create an account and we do not collect their personal information. Opening the entry code shows them your first names and nothing else about you.
The result, and other sensitive information
Your due date and the baby's sex may be health information, which Australian privacy law treats as sensitive. We collect it only with your consent — you create the account, you hand over the code, and you decide when to look.
The result is stored the moment your clinician enters it, and the app will not display it to anyone, including you, until you deliberately start a reveal. It is not shown on your dashboard, it is not included in notifications, and it is never sent to the guessing page — the tally your friends see is opinions only.
We never use the result for anything other than showing it to you when you ask. We do not use it for analytics, advertising, research or product statistics.
How we use your information
We use personal information to:
- create and secure your account, and sign you in;
- store your result until you reveal it, and then show it to you;
- run the guessing link, including showing the live tally and letting you moderate it;
- store and display the memories you upload;
- respond to you when you contact us; and
- keep the service working, diagnose faults, and prevent abuse.
We do not sell personal information. We do not share it with advertisers, and we do not use your information to build a profile of you for marketing.
Who we share it with
We share personal information only with the service providers that run Reveally on our behalf, and only so far as they need it to do that job:
- Google (Firebase and Google Cloud). Hosting, sign-in, the database that holds your reveal, storage for your memories, and analytics.
- Google Sign-In. Only if you choose to use it, and only to authenticate you.
We may also disclose information where the law requires it, where it is necessary to prevent a serious threat to someone's life, health or safety, or as part of a sale or restructure of the business — in which case the buyer is bound by this policy.
Anyone you send your guessing link to can see the names, picks and messages on that board. That link is public to whoever holds it, so share it the way you would share a party invitation.
How we protect your information
Traffic to and from Reveally is encrypted in transit with TLS, and data is encrypted at rest by our infrastructure provider. Access to production systems is limited to the people who need it to operate the service.
Your account is the key to your reveal. Choose a password you do not use anywhere else, and do not share your login — a shared account means whoever has it can start the reveal.
The clinician entry code is a capability: anyone holding it can submit a result. Show it at the appointment rather than posting it somewhere public. Your guessing link is separate and deliberately safe to share; it can never write or read the real result.
No system is perfectly secure. If we ever become aware of a data breach that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Where your information is stored
Reveally runs on Google Cloud infrastructure. Your information — including your reveal and any memories you upload — may be stored and processed on servers outside Australia, including in Singapore and the United States, by Google and its affiliates.
By using Reveally you consent to this overseas disclosure. Google is contractually bound to protect the information it holds for us, but overseas recipients are not always subject to the Australian Privacy Principles, and Australian privacy law may not be enforceable against them.
Children
Reveally is for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email us and we will delete it.
How long we keep it
We keep your account and reveal for as long as your account exists, because a reveal is a keepsake and people come back to it. Guesses are kept with the reveal they belong to.
When you delete your account we delete your personal information, including your memories, within a reasonable period, except where we are required to keep it by law. Backups roll off on their own schedule.
Accessing and correcting your information
You can see and change your names and due date in the app at any time, and you can remove memories and guesses yourself.
For anything else — a copy of the personal information we hold about you, a correction, or deletion of your account — email privacy@reveally.app. We will respond within a reasonable time, and we may ask you to verify your identity first. If we refuse a request, we will tell you why.
Complaints
If you think we have mishandled your personal information, email privacy@reveally.app and we will investigate and reply to you.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.
Changes to this policy
We may update this policy as the product changes. The date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell you before it takes effect.
Contact us
Privacy questions, requests and complaints: privacy@reveally.app. For anything else: hello@reveally.app.