Privacy Policy

APPLICABLE PRINCIPLES

Personal data processing shall be based on the principles of fairness, lawfulness, transparency and protection of privacy. We collect in anonymous and aggregated form the parameters of searches performed by registered users. This data is never associated with the user's identity and is used exclusively for service improvement. Anonymous data may be shared with commercial partners in aggregated and non-identifiable form.

USER TYPES

Free Users may access some services anonymously; others (saving searches and transactions, analysis features) require registration. Paid Users, upon subscribing to a plan or purchasing credits, have a higher number of analyses or access to reserved features; historical transaction data is the same for all Users.

PURPOSES AND LEGAL BASIS

• A. Service Provision for Registered Users: required data is First name, Last name and Email address. Registration may also take place through Sign in with Apple or Sign in with Google: in that case the Owner receives from the provider only the account identifier and the email address (for Apple, possibly an anonymous relay address). Face ID login works through the device Keychain: biometric data is handled by iOS and is never transmitted to the Owner. To limit the account to two devices, the App records a technical identifier of each connected device. Content saved by the User (searches, transactions, estimates, analyses and reports) is stored in the account to allow synchronisation. The User may provide further optional data in the Profile and, with the Professional plan, in the professional profile (agency name, agent, contacts, licence number, logo), used solely to personalise the generated reports.
• B. Geolocation: if the User activates location detection, the App may collect location data solely to facilitate nearby searches. Can be disabled in device settings.
• C. Property data from public sources: the App uses sale, valuation and rental data published by the official property registers and statistical bodies of Italy, France, the United Kingdom and the United Arab Emirates, including, in the United Kingdom, the public registers of corporate owners. This data concerns properties and legal entities, is public and contains no personal information about Users.
• D. Service Improvement: the Owner may collect aggregated anonymous data on App usage to improve features.

Legal basis: performance of the contract for purpose A; the User's consent, revocable at any time, for purpose B; the Owner's legitimate interest for purpose D. Purpose C involves no processing of Users' personal data.

DATA PROCESSING AND STORAGE

Data is processed using IT systems in compliance with the Regulation. Unless a deletion request is received, data will be retained for a maximum of 10 years from the last access. To request deletion, contact us at revalia@revalia-app.it.

DATA RECIPIENTS

Data may be processed by:

• Firebase / Google LLC – authentication (email, Sign in with Google) and storage (EU servers - europe-west3)
• Apple Inc. – payments via App Store and authentication via Sign in with Apple; Face ID is handled locally by the device and involves no data transfer to the Owner
• RevenueCat Inc. – subscription and in-app purchase management

Data will not be disclosed to third parties except where required by law.

TECHNICAL DATA

The App collects anonymous technical data (device type, OS version, aggregated usage) solely to improve service operation.

USER RIGHTS

The User has the right to obtain:

• Access, rectification or erasure of their data
• Restriction of or objection to processing
• Data portability
• Withdrawal of consent
• The right to lodge a complaint with the competent supervisory authority (ICO in the United Kingdom, Garante in Italy, CNIL in France)

DATA CONTROLLER

Revalia Group Ltd · London, United Kingdom · Company number: 17239070
revalia@revalia-app.it

EUROPEAN UNION REPRESENTATIVE

Pursuant to Article 27 GDPR, Revalia Group Ltd has appointed DataRep as its Data Protection Representative in the EU/EEA. EU/EEA data subjects may contact DataRep by email at datarequest@datarep.com, quoting 'Revalia Group Ltd' in the subject line, or by post to DataRep, 77 Camden Street Lower, Dublin, D02 XE80, Ireland, marking the letter for 'DataRep'.

CHANGES

The Owner reserves the right to modify this policy, communicating material changes via in-app notification or email.