Privacy Policy

We collect the minimum needed to run the Service:

• Account information: when you sign in with Google, we receive your name, email address, and profile picture. Sign-in is handled by our authentication provider, Supabase.
• Session information: essential cookies that keep you signed in during a session.
• Payment information: if you subscribe, our payment processor Polar collects your payment details. We never see or store your full card number; Polar is our merchant of record.
• Technical data: standard server logs such as IP address and browser type, used to keep the Service secure and working.
• Analysis results: the text of each guess we return (city, region, country, confidence) together with the time it took. This is the guess only — never the photo it came from. See section 2.
• Usage counts: which pages are viewed and when an App Store link is tapped, together with the IP address, approximate country/city and browser the request came from. We use no cookie for this; visitors are grouped for daily unique counts using a salted hash that changes every day.
• Last-seen location: if you have an account, we keep the most recent IP address and approximate country/city we saw it used from, so we can support the account and spot abuse. Only the latest value is kept — it is overwritten each time, so it is not a location history.

The most important part of our privacy promise: we do not store your photos. Here is exactly what happens when you upload an image:

1. 1.Your photo is sent to our server and held only in temporary memory (RAM).
2. 2.It is passed directly to the Google Gemini vision API for analysis.
3. 3.As soon as the guess is returned, the image is permanently discarded from memory.

Your photo is never written to a disk, saved to a storage bucket, or kept in a database. It exists only for the few seconds it takes to process your request. This matches exactly how our analysis endpoint is built.

We do keep the guess itself — the city, region, country and confidence score we showed you — so we can see how well the Service is working. That record contains no image, no thumbnail, and nothing derived from the image beyond the words in the result.

• To provide the Service — create and manage your account, process photo-analysis requests, and handle subscriptions.
• To communicate with you — send account notices, updates, and receipts.
• To keep the Service secure — detect and prevent fraud or abuse.

We rely on a few trusted providers to operate Raven:

• Google — the Gemini API performs the AI analysis on the photos you upload. Images are handled under Google’s API data-use policies.
• Google Analytics — if you accept analytics cookies, Google Analytics helps us understand aggregate site usage (pages visited, approximate location, device type). It never sees your uploaded photos.
• Supabase — secure user authentication (signing you in with Google), and the database where the records described above are stored.
• ipgeolocation.io — occasionally used to look up the network operator and approximate area behind an IP address already in our logs. This is a manual, batch check we run for site analytics; it is not part of serving any page, and no request you make is sent there while you wait.
• Polar — processes all payments and subscriptions as our merchant of record.

We use essential cookies to keep you signed in and to run secure checkout — these are never optional, since the Service can’t function without them. If you accept our cookie banner, we also set Google Analytics cookies to understand aggregate site usage. See our Cookie Policy for details and how to withdraw consent.

With your consent, Raven uses Google Analytics to understand how visitors use the site (pages viewed, approximate region, device type) — never your uploaded photos. Raven does not include any advertising trackers or pixels (for example, a Meta/Facebook pixel), and we do not sell or share your personal information with advertisers.

We keep your account information (name, email, profile picture) for as long as your account is active. Uploaded photos are not retained at all. If you delete your account, your personal account information is permanently removed from our systems.

• Access and export: request a copy of the account data we hold.
• Deletion: request deletion of your account and associated personal data at any time.

To exercise these rights, email support@withraven.net from the address associated with your account. Depending on where you live, you may have additional statutory rights under the laws of England and Wales, or the data protection law of your own country.

Raven is not intended for or directed at children under 13, and we do not knowingly collect personal information from them. If we learn we have, we will delete it promptly.

Our Service may run on servers located outside your country of residence. By using Raven, you consent to the transfer, processing, and storage of your information in those locations.

We may update this policy from time to time. If we make significant changes, we will notify you by email or with a notice on the site. Please review it periodically.

Questions about your privacy? Email support@withraven.net. The responsible legal entity is KEYBUY LTD (trading as withraven AI), Company No. 15562983, registered in England and Wales.