§ Legal
Privacy Policy
Last updated: July 10, 2026
Draft — pending legal review
This is an AI-assisted draft written to match how Raven actually works today. It still needs a professional review before launch.
This Privacy Policy explains what information Raven (“we,” “us,” “our”) collects, how we use it, and your rights over your data. Raven is a web companion to the Geospy AI mobile app; it is an entertainment tool that uses AI to guess where a photo was taken. It is not a surveillance or tracking service.
1. Information we collect
We collect the minimum needed to run the Service:
- Account information: when you sign in with Google, we receive your name, email address, and profile picture. Sign-in is handled by our authentication provider, Supabase.
- Session information: essential cookies that keep you signed in during a session.
- Payment information: if you subscribe, our payment processor Paddle collects your payment details. We never see or store your full card number; Paddle is our merchant of record.
- Technical data: standard server logs such as IP address and browser type, used to keep the Service secure and working.
2. Your uploaded photos
The most important part of our privacy promise: we do not store your photos. Here is exactly what happens when you upload an image:
- Your photo is sent to our server and held only in temporary memory (RAM).
- It is passed directly to the Google Gemini vision API for analysis.
- As soon as the guess is returned, the image is permanently discarded from memory.
Your photo is never written to a disk, saved to a storage bucket, or kept in a database. It exists only for the few seconds it takes to process your request. This matches exactly how our analysis endpoint is built.
3. How we use your information
- To provide the Service — create and manage your account, process photo-analysis requests, and handle subscriptions.
- To communicate with you — send account notices, updates, and receipts.
- To keep the Service secure — detect and prevent fraud or abuse.
4. Third-party processors
We rely on a few trusted providers to operate Raven:
- Google — the Gemini API performs the AI analysis on the photos you upload. Images are handled under Google’s API data-use policies.
- Google Analytics — if you accept analytics cookies, Google Analytics helps us understand aggregate site usage (pages visited, approximate location, device type). It never sees your uploaded photos.
- Supabase — secure user authentication (signing you in with Google).
- Paddle — processes all payments and subscriptions as our merchant of record.
6. Analytics, and no advertising
With your consent, Raven uses Google Analytics to understand how visitors use the site (pages viewed, approximate region, device type) — never your uploaded photos. Raven does not include any advertising trackers or pixels (for example, a Meta/Facebook pixel), and we do not sell or share your personal information with advertisers.
7. Data retention
We keep your account information (name, email, profile picture) for as long as your account is active. Uploaded photos are not retained at all. If you delete your account, your personal account information is permanently removed from our systems.
8. Your rights
- Access and export: request a copy of the account data we hold.
- Deletion: request deletion of your account and associated personal data at any time.
To exercise these rights, email support@withraven.net from the address associated with your account. Depending on where you live, you may have additional statutory rights under the laws of England and Wales, or the data protection law of your own country.
9. Children’s privacy
Raven is not intended for or directed at children under 13, and we do not knowingly collect personal information from them. If we learn we have, we will delete it promptly.
10. International users
Our Service may run on servers located outside your country of residence. By using Raven, you consent to the transfer, processing, and storage of your information in those locations.
11. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email or with a notice on the site. Please review it periodically.
12. Contact us
Questions about your privacy? Email support@withraven.net. The responsible legal entity is KEYBUY LTD (trading as withraven AI), Company No. 15562983, registered in England and Wales.