Privacy Policy

Who we are

Revyufy is operated by XenonLabs Software Development Services ("Revyufy", "we", "us"), a business registered in the Philippines. Revyufy is a platform that review centers and other schools ("centers") use to run their own branded learning websites, together with the Revyufy mobile app.

This policy explains how we handle personal data under the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and issuances of the National Privacy Commission.

Two roles: ours and your center's

Because every center runs on Revyufy, two organizations are involved in your data.

Your center sees your name, contact details and profile so it can teach you. Where the center has published its own Privacy Notice, it applies alongside this policy. Requests about your studies at a center are best sent to that center first; we will help it answer them.

What we collect

• Account details — first, middle and last name, email address, mobile number, profile photo, and whether you appear under a display name. Your password is stored hashed by our sign-in provider; we never see it in plain text. If you sign in with a third-party account, we receive your name and email from it.
• Learner profile — details you add, such as school, course, year level, gender, city, province and a short bio.
• Learning activity — enrollments, lesson and video progress, time spent, daily activity, exam attempts and answers (including written answers) and scores, highlights and notes, calendar entries, and study materials you download.
• Community and messages — posts, comments, reactions, poll votes and reports; chat messages and attachments; which posts you have read and threads you have muted.
• Presence — whether you are online right now, shown to other members of your centers. It is not stored beyond a couple of minutes.
• AI assistant — the questions you ask, files you attach, the answers generated, and usage and cost records for AI credits.
• Payments — what you bought, amounts, installment schedules, and payment status and method. Card and e-wallet details are entered directly with our payment processor; we never see or store full card numbers.
• Mobile app — a push-notification token and app version for your device; when you use the app at each center; and, for lessons you save offline, an identifier for the app installation and which lessons were saved.
• Device and security data — IP address, sign-in and security events, rate-limiting data, and error reports.
• Consent records — which version of our terms, and of your center's policies, you accepted, when, from the web or the app, and the IP address at the time.
• Center owners and staff — business and contact details, team roles and permissions, payout bank or e-wallet account, billing and usage records.
• Other people — if you request a demo of Revyufy we keep what you submit (name, contact details, your center's name, your message) with your IP address and browser details. If a center invites you as staff or sends you a voucher, we keep your email address to deliver it.

If your center turns on watermarking for a lesson, the videos and PDFs you view or download show your name, email and the date.

We do not use advertising or analytics trackers, and we do not sell personal data.

Cookies

We use only the cookies needed to keep you signed in and to protect sign-up and sign-in from bots. A center's landing page may embed a video from a third-party video platform, which can set its own cookies when you play it.

Why we use it

• To create and secure your account and let you sign in to the centers you belong to (performance of a contract).
• To deliver the courses, exams, community and features your center offers (performance of a contract, on the center's instructions).
• To collect payments on behalf of centers, bill center owners, pay centers out, and keep financial records (contract and legal obligation, including tax record-keeping).
• To send service emails — sign-in codes, receipts, invoices and account notices — which are always sent, and in-app and push notifications. You can turn categories of push notifications off in the app.
• To prevent fraud, abuse and cheating, and to keep the platform secure (legitimate interest).
• To keep a record of what you agreed to (legal obligation and legitimate interest).
• To diagnose errors and improve the service (legitimate interest).

Who we share it with

We share personal data only with the center(s) you belong to, and with service providers that help us run Revyufy:

You can ask us for the current list of the service providers we use at the address below.

Some of these providers store or process data outside the Philippines. Where that happens we rely on contractual safeguards so your data stays protected to the standard the Data Privacy Act requires.

We may also disclose data when required by law, a court order, or a lawful request of a government authority.

How long we keep it

• Account data — for as long as your account exists. When you ask us to delete your account, it is scheduled for deletion 7 days later; signing in during that time cancels it. We then erase it, normally within one more day.
• What deletion erases — your profile details, learner profile, photo, notes, highlights, calendar entries, posts, comments, reactions, messages, AI chats and credit balance, and the notes a center's staff kept about you. Your name, email and phone number are removed from what remains.
• What is kept after deletion, without your name or contact details — enrollments, lesson progress and exam results (so your centers' records stay complete), payments and AI-credit purchases (for tax), and a record that the account existed. These stay linked to an internal identifier, so they are de-identified rather than anonymous.
• Security and consent records — sign-in and security events, and records of what you accepted (including the IP address), are kept after your account is deleted for as long as we need them to meet our legal obligations and resolve disputes. Some security records include your email address.
• Payment and billing records — kept for the period Philippine tax regulations require, including after a center or owner account is closed.
• When a center closes — if a center is deleted, or its owner's account is closed, the center's content, learning records and community data are deleted; payment, payout and billing records are kept as above.
• Other data — text read from documents you attach to the AI assistant is cached for up to 30 days after it was last used. Addresses that bounce or report our email as spam stay on a do-not-send list. Deleted data can remain in our backups until they expire.

Your rights

Under the Data Privacy Act you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, to damages, and to file a complaint with the National Privacy Commission.

• You can correct most of your details yourself in your profile.
• Learners can delete their account from their profile on the web or from More → Delete account in the mobile app. Center owners and staff can ask us to close their account at the address below.
• For a copy of your data, or anything else, email us at the address below. We reply within 15 days.

Security

We use encryption in transit, access controls and role-based permissions, hashed passwords, rate limiting, and logging of key actions. Center owners and staff can turn on two-step verification, which we then require for sensitive actions such as changing a password or payout details and requesting payouts. No system is perfectly secure; if a breach affects your data, we will notify you and the National Privacy Commission as the law requires.

Children

Revyufy is meant for learners aged 13 and older. We don't ask for your age; if you are under 18, your center is responsible for obtaining any consent your parent or guardian must give.

Contact and Data Protection Officer

Data Protection Officer, XenonLabs Software Development Services
Email: [email protected]

Changes to this policy

When we make a material change we will update the version and date above and ask you to review and accept it the next time you use Revyufy.