Revisync / security
How Revisync protects your data
A transparent account of the Android app’s local encryption, the limits of exported backups and what happens if the service ends.
Where your study data is stored
Revisync keeps study records in Android’s application-private storage. It does not run its own study synchronisation or account server, and using the website does not upload your study database.
Database encryption and key management
The local SQLite database is encrypted with SQLCipher. In the currently released code, the database encryption key is bundled with and managed by the application; it is not unique to your device or user account, is not derived from a password you choose and is not exclusively protected by Android Keystore.
This protects against some casual attempts to read the database file but is not an absolute defence against a compromised device, modified app or reverse engineering. We do not describe this arrangement as end-to-end encryption, user-managed encryption or protection against every threat.
Full backups versus CSV export
A full Revisync backup contains a copy of the already encrypted database, wrapped in an application-specific file format. An additional obfuscation step is not a second independent layer of strong encryption and does not give you a separate user password.
A CSV export contains human-readable study catalogue data and is not encrypted by Revisync. Treat exported files as sensitive and consider whether the chosen storage provider or cloud service offers its own encryption and access controls.
Backups and restoration
Settings → Backup can create a new full backup through Android’s file picker. An optional automatic backup can update a previously configured destination; it is not continuous synchronisation or a guaranteed separate copy every time. Android permissions, power-management policies and storage availability can affect scheduled runs.
A full backup is only recoverable using a compatible Revisync version and a valid restoration flow. Restoring a valid backup may replace current local data. A CSV export does not preserve all dates, review history and app preferences. Uninstalling or clearing app storage can delete records not preserved elsewhere.
Business continuity and product shutdown
An already installed, compatible version of Revisync may remain usable if Galcore Studios stops operating.
Future downloads, operating-system compatibility, updates, technical support and fixes cannot be guaranteed. An exported backup does not guarantee future compatible restoration software.
Before uninstalling, changing devices or depending on Revisync for long-term archival, create and verify an independent full backup while you have Premium access, and optionally export CSV for partial human-readable portability. Legal consumer rights remain unaffected by product discontinuation.
Google Play purchase recovery
Premium is a one-time in-app purchase handled by Google Play. It can require Google services for activation and recovery. Recovering Premium does not restore your locally stored study records or backups.
Security limitations and reports
No software or device is immune to every security risk. Keep Android updated, protect screen access and restrict sharing of exported files. Report suspected security problems to our official support address.