Privacy policy

Who we are

Revealy is run by Kamel Mohsen Kamel, an individual based in Egypt. For any question about your data, or to ask for a copy, a correction, or deletion, write to support@revealy.net.

What we store

• Your account: your email address, your language, and your password. The password is stored only as a one-way hash that nobody, including us, can turn back into the password.
• Your reveals: the parents' names, the baby's nickname if you give one, the reveal date, time, and time zone, the theme, and your message for guests.
• Your doctor or clinic, or someone you trust who enters the result instead: the name you give us, and their email address if you give it, so we can send them the secure link. If you send the link yourself (for example on WhatsApp), we don't get their email.
• The result: the baby's gender and the doctor's optional note. Both are stored encrypted, and nobody can see them before the reveal time: not you, not our team, not us.
• Guests: the name and guess a guest chooses to enter, and a cookie on their device that remembers their guess. Emoji reactions sent around the reveal time are only counted, without names.
• Payments: the method, the amount, and our payment reference, plus the sender's name, phone number, and transaction number you give us so we can find your transfer.
• Support: notes our team writes while helping with your reveal, and a record of the actions they take on it.
• Security: your IP address, used only to stop abuse such as too many sign-in attempts. We keep it only in scrambled form, for about a day. Our hosting provider also keeps short-lived technical logs.

Why we use it

• To provide the service you asked for: your account, your reveal, the doctor's link, the guest page, and payment confirmation.
• To send service emails: confirming your email, resetting your password, payment updates, the doctor's link, "result received" notices, reminders before your reveal, and changes to your reveal time. We don't send marketing emails.
• To keep the service safe and stop abuse.
• To keep accounting records of payments.
• To count visits and measure how fast pages load, so we know how the site is used and can keep it quick (see Cookies and analytics below).

Who can see it

• Anyone with your guest link can open your guest page and see the parents' names, your message, guests' names and guesses, and, from the reveal time, the result and the doctor's note. Share the link only with people you want there.
• Our team (admins and staff) can see account, reveal, and payment details to help you. They never see the result before the reveal time, and their actions on your reveal are logged.
• Trusted service providers that run parts of the service for us: hosting, the database, email delivery, and measuring visits and page speed. They process data only to provide their service to us.
• We don't sell your data and we don't use advertising trackers. We share data with authorities only when the law requires it.

Cookies and analytics

We use only the cookies the site needs to work:

• A sign-in cookie that keeps you signed in, for up to 30 days.
• A guest cookie that remembers your guess on a reveal.
• A language cookie that remembers your language.

Your browser also keeps two small settings on your device only: the name you last used to guess (so it's filled in for you) and whether you turned on the reveal's sound.

We count visits and measure how fast pages load without cookies and without identifying you, and we remove the private codes from page addresses (such as the codes in guest and doctor links) before anything is sent. There are no advertising cookies.

How long we keep it

• Reveals, with the result, the doctor's details, guesses, and notes: deleted automatically 90 days after the reveal time, or 90 days after a reveal is cancelled.
• Accounts: until you delete yours. Accounts whose email address is never confirmed are deleted after 7 days.
• Payment records: kept as long as accounting and legal obligations require. When you delete your account, we remove your name and phone number from them.
• Reaction counts and security records: about a day.

Your choices

• You can change most details yourself on your reveal's page, and delete a reveal at any time.
• You can delete your account from Account settings. This deletes your reveals with it.
• For anything else, such as a copy of your data, write to support@revealy.net. We reply within 30 days.

How we protect it

Connections to Revealy are encrypted (HTTPS). Passwords are hashed, the result and the doctor's note are encrypted, and the links we send are long random codes that we store only in scrambled form. Our team signs in with a password and an authenticator app.

Children

Accounts are for adults aged 18 or older. Anyone with a guest link can view a guest page; we store a guest's name and guess only if they choose to enter them.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change is important, we also email account holders.