Revolut collects sensitive categories of personal data, which may include biometric information used for identity verification purposes such as facial recognition or fingerprint authentication.
This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data such as facial scans or fingerprints is highly sensitive because, unlike passwords or account numbers, it cannot be changed if compromised, making its collection and protection particularly significant.
Interpretive note: The specific extent of biometric data collection is inferred from the financial services and identity verification context; the exact policy language on this point was in portions of the document not fully reproduced in the source text.
If Revolut collects your biometric data for identity verification, that information is subject to specific legal protections in several US states, and its exposure or misuse would carry risks that cannot be remediated by simply resetting a credential.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"We collect your personal data when you use: our website at www.revolut.com/en-US/; any of our Revolut apps; any of the services available to you through our apps or websiteExcerpt from Revolut's Privacy Policy
REGULATORY LANDSCAPE: Biometric data collection is regulated at the state level in the US, most significantly under the Illinois Biometric Information Privacy Act (BIPA), which requires written notice and consent before collecting biometric identifiers and …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Biometric data such as facial scans or fingerprints is highly sensitive because, unlike passwords or account numbers, it cannot be changed if compromised, making its collection and protection particularly significant.
If Revolut collects your biometric data for identity verification, that information is subject to specific legal protections in several US states, and its exposure or misuse would carry risks that cannot be remediated by simply resetting a credential.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.