Version 1, 9 October 2026. Information about data processing in Rilievo and the services selected by its user.
1 Provider and contacts
Rilievo is a RAVENG app provided by CE4U S.r.l., a single-member company, Via G. Rossini 29/2, 37012 Bussolengo (VR), Italy; tax/VAT number 04731920239, business register REA VR-444364. Contacts: info@raveng.it; privacy@raveng.it; certified email posta@pec.ce4u.it.
CE4U is the controller of information it receives for support, its own contractual relationships and obligations. Survey records remain on the user's iPhone; ordinary collection in the app does not automatically send them to CE4U. The organisation or professional determining a survey's purposes and means must establish its own controller/processor role, customer instructions, lawful basis and information to data subjects. Supplying software alone does not authorise CE4U to use customer material.
2 Data and routes
| Function | Data involved | Destination |
|---|---|---|
| Survey archive | Customer, site, authorised coordinates, inspector, machine codes, plates, photographs, arrows, notes, documents and results | Local app storage and device backups managed by the user |
| Local AI | Material selected for a job | Inference on the iPhone using a compatible model |
| Model download | File requests, IP address and technical network metadata | Hugging Face and provider infrastructure; downloading does not require survey photos to be sent |
| Codex Cloud, when activated | Survey material, prompts, identifying information and results | User's GitHub repository and connected OpenAI Codex account/environment |
| Location and nearby suggestions | Necessary location and geographic requests | Apple Core Location/MapKit, according to permissions and Apple terms |
| Dictation | Speech and resulting text | On-device recognition; when unavailable, use the keyboard |
| Purchases | Products, transactions and entitlement status | Apple; StoreKit verifies subscriptions and the app does not receive card details |
| Export and sharing | Package selected by the user | Files, iCloud or the recipient/service chosen in the share sheet |
| Support | Contact details, message and voluntarily supplied attachments | CE4U and its communication providers |
The app introduces no advertising or behavioural analytics SDKs. Apple's system diagnostics follow iOS choices. Website processing and logs follow the general RAVENG privacy notice. Rilievo pages introduce no new trackers, profiling cookies or third party embedded content.
3 Activating Codex Cloud
The app presents a disclosure and requires explicit activation before sending material. Data is uploaded to your repository and made available to the connected Codex service. Photographs, notes, documents and customer information are not automatically anonymised. Private visibility limits public access, but authorised collaborators, administrators and integrations may still access a repository.
Activation records your choice of technical route. It is not data subjects' consent, customer authorisation, a GDPR Article 28 agreement or assurance that a transfer is lawful. Check your contracts, account settings and agreements with GitHub and OpenAI. Do not upload confidential or personal material without appropriate authorisation and a lawful basis. Health information and other special categories require their specific applicable conditions; avoid collecting them where unnecessary.
You can disable cloud and revoke activation in the app settings. This prevents new submissions according to the setting; it does not automatically delete already submitted data or stop jobs already running with providers. Read the current disclosure before reactivation.
4 Purposes and lawful bases
CE4U processes contacts and support requests to respond and take requested precontractual steps or perform the contract where applicable (GDPR Article 6(1)(b)), or under legitimate interests in handling general requests and security (Article 6(1)(f)). Administrative information is processed for legal obligations (Article 6(1)(c)); information necessary to defend rights under the relevant legitimate interest.
The organisation determining survey processing establishes its appropriate lawful basis, customer instructions and retention period. iOS camera, location and microphone permissions are technical authorisations, not substitutes for that assessment.
You do not need to send CE4U survey photographs or technical files to purchase the app. Initial support requires contact information and a sufficient description of the issue, not customer material or credentials.
5 Recipients and international transfers
Apple handles purchases and requested system features; GitHub and OpenAI receive data when you configure and use cloud; Hugging Face receives model download requests. Roles, contracting entities, locations, retention and safeguards depend on the service, plan and agreements applying to your account. Do not assume EU-only hosting, no retention or exclusion from model training without checking the actual applicable conditions.
Services may process data outside the European Economic Area. The competent controller must assess Article 44 onwards of the GDPR, official text, available contractual safeguards and suitability for its case. This notice does not certify a particular transfer mechanism for users' accounts.
Recipients of information supplied directly to CE4U include authorised staff, communication providers, advisers and authorities when necessary. CE4U provider details and safeguards are described in the general website privacy notice and available from privacy@raveng.it.
6 Retention and deletion
Local records remain while you retain them, subject to deletion or device failure. Define assignment retention and export verified copies. Deletion within Rilievo does not remove cloud copies, Git history, PRs, OpenAI chats, shared attachments or backups. Handle these separately under provider procedures and applicable recordkeeping duties.
CE4U retains contact requests that do not lead to a contract for up to 24 months after the last contact, unless required to defend rights. Administrative records subject to legal retention follow statutory periods. Agree on content and channel before sending support attachments; do not send unnecessarily complete archives.
The GitHub token is held in the iPhone Keychain and used to authenticate service requests. Remove it in the app and revoke it on GitHub as needed. Do not send it to support. Removing a token does not delete published data.
7 Security and operational duties
Use a device passcode, iOS updates, account access controls, single-repository restricted tokens, private repositories and authorised backup locations. Rilievo does not guarantee anonymisation, additional encryption of export packages or absolute protection. Sharing makes package contents available to the recipient; inspect them first.
Revoke a suspected exposed credential and contact your internal responsible person. For a suspected breach of customer personal information, inform the competent controller and follow the applicable procedure. Contact CE4U about aspects directly concerning its processing.
8 Rights and AI output
For information processed by CE4U, request access, rectification, deletion, restriction, portability where applicable and objection to processing based on legitimate interests. Withdraw any applicable consent without affecting previous lawful processing. Write to privacy@raveng.it or the certified email above. Requests follow GDPR time limits; you may complain to the Italian data protection authority or the competent authority in your EU country.
For survey records, contact the organisation determining processing and the relevant account services. CE4U cannot remotely delete your repository or iPhone archive.
AI prepares preliminary output for operator review. The app is not designed for solely automated decisions about people producing legal or similarly significant effects. Do not use output to assess workers or other people without independently checking applicable requirements.
9 Updates
Rilievo is intended for professionals and organisations, not collection of children's data. We update this page when functions or processing routes change. The version and date appear above. See the Rilievo terms and guide.
Back to top