Revolut updated its privacy policy effective June 18, 2026, expanding the scope of personal data it collects and uses. The policy now explicitly discloses collection of behavioral biometric data (scrolling and typing patterns), device identifiers including eSIM information, place of birth and citizenship, trusted locations for security purposes, and inferred data profiles based on spending behavior and risk scoring. The updated policy also clarifies that Revolut creates new data about users through analysis of existing information, and adds references to standalone privacy notices for specific products like Revolut Messenger and Revolut Kids & Teens.
Consumers: Revolut now tells you it collects data about how you interact with the app and specific device identifiers you may not have been aware of.
Consumers: Revolut now discloses that it creates new data about you by analyzing your spending patterns and financial information to generate risk assessments and personalized profiles.
Consumers: Revolut now tells you it collects additional identity information (place of birth, citizenship) and location data for security features like Street Mode.
Data controllers: Organizations using Revolut products must now account for separate privacy notices that apply to specific features, which may require separate consent or data processing documentation.
Consumers: Revolut now explicitly states it shares personal data with e-KYC providers for identity verification purposes.
The updated policy discloses that Revolut now collects behavioral biometric data (such as scrolling and typing patterns), expanded device identifiers including eSIM information, place of birth and citizenship, and trusted locations for security purposes. The policy also states that Revolut creates inferred data about users, including spending behavior profiles and risk scores, by analyzing information already collected. These disclosures expand the categories of personal data Revolut processes and uses for fraud detection, product eligibility decisions, and personalized marketing. You can manage privacy preferences directly in the Revolut app or contact dpo@revolut.com to request access to, deletion of, or restrictions on use of your personal data.
→ Review the updated privacy policy at Revolut's website to understand the new data collection categories, particularly behavioral biometric data and inferred spending profiles.
→ Manage privacy preferences directly in the Revolut app to control how personal data is used for marketing and other purposes.
→ Contact dpo@revolut.com to request access to, deletion of, or restrictions on use of personal data.
Policy now explicitly discloses collection of behavioral biometric data such as scrolling and typing patterns for fraud detection.
Policy now discloses that Revolut creates new data about users including spending behavior profiles and risk scores derived from transaction history and application details.
Policy now includes eSIM ICCID and eSIM matching ID in the list of unique device identifiers collected.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Revolut's updated privacy policy (effective June 18, 2026) materially expands disclosed data collection and processing practices. The policy now explicitly discloses collection of behavioral biometric data, expanded device identifiers (eSIM ICCID, eSIM matching ID), place …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005629.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them t…
ConductAtlas tracked the restructuring, new disclosures, and entity changes that followed the largest privacy fine in EU history.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do…
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.