Privacy notice

Who is responsible

The controller is Revion Tech OÜ, an Estonian private limited company, registry code 17543845, registered office Sepapaja tn 6, 15551 Tallinn, Estonia. Contact: dev@reviontech.net.

What the sample studio does — and does not — collect

• The studio, the comparison view and the Fit Lab run in your browser using pre-produced sample images and fictional measurements.
• This website does not ask for, upload or store photos of you, and it never requests camera access.
• Values you type into Fit Lab stay on the page. They are not sent to our servers, not written to the address bar and not stored in your browser.
• A shared studio link contains only the sample model, look and view you selected.

Early-access email list

If you choose to join the list, we process:

• your email address;
• an optional reason for your interest (personal, retail or e-commerce, research or collaboration, or something else);
• a record that you gave consent, the version of the consent wording and the time;
• the status of your request (waiting for confirmation, confirmed or unsubscribed) and related timestamps.

We use double opt-in: we send one confirmation email, and you are only added to the list after you press the confirmation button on our site. The legal basis is your consent. You can withdraw it at any time with the unsubscribe link in every email, or by writing to us. Joining the list does not create an account and does not grant access to a product.

We do not ask for your name, phone number, payment details, body measurements or photos.

Confirmation and unsubscribe links

Links in our emails contain a random single-purpose code. We store only a keyed hash of that code, never the code itself. Confirmation links expire after 24 hours. Opening a link does nothing on its own; the change only happens when you press the button on the page.

Security and logs

To limit automated abuse, the signup service caps how many requests it accepts in short periods and how often a confirmation email can be resent to the same address. Your network address is not stored for this. The legal basis is our legitimate interest in preventing abuse.

The website application writes short technical logs (time, page or endpoint, result code, duration and a request identifier). These logs do not contain email addresses, the codes in email links, request contents or your network address.

The website is hosted on Google Cloud (Cloud Run, region europe-west1, Belgium). Like any web host, Google Cloud records standard request logs: your network address, browser type, time and the page requested. We use them only to operate and secure the website; the legal basis is our legitimate interest in keeping the site running and secure (GDPR Article 6(1)(f)). These logs are stored in the EU (Belgium) and kept for up to 30 days.

Cookies, analytics and tracking

This website does not set advertising or analytics cookies, does not use session replay and does not load third-party trackers. If you choose a motion preference in the footer, it is saved in your browser's local storage on your device only; choose “System” or clear this site's data in your browser to remove it. Fonts and media are served from our own servers; nothing is loaded from third parties.

Our email provider, Brevo, adds an open-tracking pixel to every email and routes links through its own redirect address; this cannot be switched off for emails like ours. We have set it to anonymised tracking, so opens and clicks are not linked to your address or network address, and we do not use these statistics. The confirmation and unsubscribe links still lead to our site, and nothing changes until you press the button there.

Who receives data

These service providers process data on our instructions:

• Google Cloud (Google Cloud EMEA Ltd, Ireland) hosts the website and runs the background tasks that send our emails, in Belgium.
• Neon (Neon, Inc., USA) hosts the signup database in Frankfurt, Germany.
• Brevo (Sendinblue SAS, France) delivers our emails and keeps a delivery log (recipient, time, delivery status) for one month.
• If you reply to an email, your message is routed by Cloudflare (email routing) and stored in our Zoho Mail mailbox.

We do not sell personal data or share it for advertising.

Where data is processed

The website runs in the EU (Belgium) and its request logs are stored there. The signup database is in Germany and Brevo is an EU company. Google, Neon, Cloudflare and Zoho are headquartered outside the EU, and some of their support, security or email-routing functions may process data outside the EU/EEA. Where that happens we rely on the European Commission's EU–US Data Privacy Framework decision for certified providers (Google and Cloudflare are certified) and otherwise on the Standard Contractual Clauses in the providers' data processing terms. You can ask us for a copy of these safeguards at dev@reviontech.net.

How long we keep data

• Requests that are never confirmed are deleted 30 days after the last request.
• Confirmed addresses are kept until you unsubscribe, and the list is reviewed at least once a year for relevance.
• After you unsubscribe we keep your email address, status and dates as a minimal suppression record so that we do not email you again by mistake. You can ask us to delete this record.
• Abuse-protection counters are kept for minutes and removed at least daily.
• Brevo's delivery log: one month. Brevo does not keep a copy of the email content.
• Deleted data can be restored from our database provider's point-in-time history for up to 6 hours; after that it is gone.
• Hosting request logs: up to 30 days.

Your rights

You may ask for access to, correction or deletion of your personal data, restriction of or objection to processing, and a copy of data you provided. You can withdraw consent at any time without affecting earlier processing. To make a request, email dev@reviontech.net. You also have the right to lodge a complaint with a supervisory authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority where you live. We do not use automated decision-making or profiling.

Right to object. Where we rely on our legitimate interests (answering your messages, hosting logs, abuse protection), you can object at any time for reasons relating to your particular situation by emailing dev@reviontech.net. We will then stop unless we have compelling legitimate grounds to continue.

Children

The email list is for people aged 16 or over. Please do not sign up if you are younger; we delete any request we learn comes from a child.

Changes

When Fitality's product features change, this notice will be updated before new kinds of data are collected. Future photo-based features are not part of this website. See also our website terms.