🔒 Privacy Policy

Effective as of: 2026-10-30

This policy explains what data Revive ST handles and why. It covers the Revive ST mobile app (the "App"), the Revive ST server at api.revivest.app (the "Server") and this website. They are operated by Incognito Labs ("we", "us"), which is responsible for the data described here.

Revive ST has no user accounts: we never ask for your name, email address or any other identity. We don't show ads, sell data or track you across other apps and websites.

On your phone and your home network

The App finds and controls your speakers directly on your local network. Playback, volume, sources and settings never go through our Server.

  • Speaker setup. To connect a new speaker to your Wi-Fi, the App lists nearby Wi-Fi networks and sends the network name and password you enter directly to the speaker. Android requires the location permission to list Wi-Fi networks; the App doesn't use it to determine your location. The Wi-Fi password is never sent to us.
  • Stored on your phone. Your household account id (see below), the address of the server you chose, your favorite radio stations and the App's diagnostic logs. These stay on your phone unless you choose to share the logs, for example with us when reporting a problem. Uninstalling the App deletes them.

On the Revive ST server

Since Bose shut down its cloud, your speakers need a server to fetch their account, presets and radio stations from when they start up. By default, the App configures your speakers to use ours. The Server stores:

  • A household account id: a random identifier the Server generates the first time you configure a speaker. It isn't linked to your name, email address or phone.
  • Your speakers' device ids (each speaker's network hardware address) and the date each one was paired with your household account.
  • Your presets: for each of the 6 preset buttons, the station or content name, its source (such as TuneIn or Radio Browser), its address and its artwork address.

We use this data only to give your speakers their presets and radio stations back. We keep it for as long as your speakers use the Server, or until you ask us to delete it.

You don't have to use our Server. You can run your own and point the App and your speakers to it, in which case none of the data in this section reaches us.

Logs and diagnostics

Like any web server, the Server records the requests it receives: the requesting IP address, the time and the requested address, which can contain your household account id. When a request fails, it also records what the speaker or App sent, with the account id masked. We use these records only to keep the Server working and secure. Our hosting provider deletes them automatically after at most 30 days.

Third parties

  • Railway hosts the Server and this website, in its EU West region (Amsterdam, Netherlands).
  • Radio Browser, a community radio directory, receives your searches directly from the App, along with your IP address. The Server also looks up stations there when your speaker plays one.
  • TuneIn receives station lookups from the Server when a speaker plays a TuneIn preset. These requests come from the Server, not from your network.
  • Radio stations stream directly to your speakers, so the broadcaster sees your home IP address, as with any internet radio.
  • Expo, the platform the App is built with, receives an event each time the App starts: a random install identifier, the App version, the platform and the operating system version. We use it to count active installs and versions.
  • Fathom Analytics counts visits to this website without cookies and without collecting personal data.
  • Apple and Google handle App downloads under their own privacy policies.

Legal basis

We process the data stored on the Server because it is necessary to provide the service you ask for when you configure a speaker to use it. We process logs, launch events and website statistics based on our legitimate interest in keeping Revive ST working, secure and improving.

Your rights

Depending on where you live, including under the GDPR, you can ask us to access, correct, export or delete your data, and object to its processing. Because we don't know who you are, include your household account id in your request: it is shown as margeAccountUUID at http://<speaker-ip>:8090/info in a browser on your home network. Send requests to [email protected].

Children

Revive ST is not directed at children under 16 and collects no data that identifies them.

Security

The App and your speakers connect to our Server over HTTPS. Your household account id is what gives access to your presets: treat it as private. If a data breach affects your data, we will notify you and the authorities as required by law.

Changes

We will post any update to this policy on this page with a new effective date. Previous versions are available in the Revive ST repository.

Contact us

Questions about privacy in Revive ST: [email protected].