Privacy policy

Who we are

Risiti (“we”, “us”) makes Risiti, an app for recording a business's sales and expenses and making receipts for customers. This policy covers the Risiti app, its reading service and this website.

What Risiti keeps, and where

When you use Risiti in a browser, or install it on your phone or computer, what you enter is stored in that browser's storage on that device. This includes:

• your shops, such as their names, places, selling points, products and prices, currency, tax details and logo;
• your sales and expenses, such as amounts, dates and times, items, categories, payment methods, notes, and the customer names or numbers you choose to record;
• receipts you make for customers, and receipt photos you keep with an expense;
• your settings.

Without an account, we do not have a copy of these records. We cannot see them, and we cannot recover them if your device is lost or your browser's data is cleared. Keep a backup: in Settings, choose Download a full backup, or make an account.

If you open Risiti inside an AI assistant workspace, the same records are kept in the assistant app's private storage for your account instead, and that app's terms and privacy policy apply to them.

If you make an account

An account is optional. If you make one, Risiti keeps:

• the phone number or email address you sign in with, and the name you give, if any. Risiti sends nothing to that number or address;
• your password and your recovery code, only as scrambled values (salted hashes) that cannot be turned back into the password or the code;
• the devices where you are signed in, named by browser and system (for example “Chrome on Android”), with when each was last used;
• your records, everything listed above including receipt photos, so that each device where you sign in gets the same shops, sales and expenses. Each device also keeps its own copy, so Risiti works offline.

Your account and records are stored in a database run for us by Cloudflare. Only you see your records in the app, on the devices where you are signed in, and the people you choose to share a shop with (below). People who run Risiti can reach that database; we look at what is in it only to keep the service working and secure, when you ask us to, or when the law requires it.

Sharing a shop with the people who work in it

In Staff access you can share a shop with someone: they sign in with their own Risiti account and see that shop's sales, expenses, day reports, staff performance and reports, and, if you let them, record sales, expenses and day reports in it. For this, Risiti keeps the name you give them, which shops they see, what they may do, and when they joined and were last seen. The invitation code is kept only as a scrambled value until it is used, and stops working after 14 days. They never receive your other shops, your settings, budgets or receipt photos. You can change or end their access at any time; when it ends, the shop's records leave their devices. If someone shares their shop with you, those records belong to them.

Your customers' details

Risiti works out your customers from the sales you record: their names and areas, when and how often they buy, and the prices they pay. If you add a customer's phone number, their place on a map, directions or notes, these are kept with that shop, in your account when you have one, and the people you share the shop with can see them. Add only what your customers would expect you to keep, and remove it when they ask.

You can see your signed-in devices and sign any of them out in Settings. Signing out removes the copy on that device; your account keeps its own.

What leaves your device, and why

Most of Risiti works without sending anything anywhere. Information leaves your device only in the cases below, and only when you ask for them.

Keeping your account in step

If you are signed in to an account, every change you make, such as a sale, an expense, a receipt or a setting, is sent to your account over an encrypted connection, and changes made on your other devices come back to this one.

Reading photos, screenshots, PDFs and messages

When you ask Risiti to read something, such as a receipt photo, a WhatsApp screenshot, a PDF or a message you paste, the app sends the images and text to Risiti's reading service, together with instructions and the details needed to read them correctly, such as your currency, your country, today's date and the names of your shop's selling points and products. PDFs are turned into page images on your device first.

The reading service passes the request to an AI model provided by Anthropic and sends the result straight back to your device, where you check it before anything is saved. The reading service does not store or log what you send.

What is read on your device

M-Pesa and similar mobile-money confirmations in their usual format are read on your device and are not sent anywhere. So are M-Pesa statements (PDF, Excel or CSV): the payments in them are read on your device. If a statement is locked, the password you type opens it once and is not kept. WhatsApp chat exports are also read on your device; only the messages Risiti cannot read by itself are sent to be read as above.

Live from WhatsApp

Live from WhatsApp is off until you turn it on in the Risiti app on an Android phone and allow it to read notifications. It then reads the notifications of the WhatsApp chats you pick (usually your staff's groups), and only those: for each new message, the chat's name, the sender's name as WhatsApp shows it, the time and the words. Other chats are only noted by name on the phone, so you can pick them, and are not sent anywhere. The photos, voice notes and files in a message are not sent, only any words written with them and WhatsApp's own label for them (for a document, its file name).

When you are signed in, each message is sent to your account so that Risiti, open on any of your devices, can record the sales and expenses in it; when you are not, messages go only to Risiti on that phone. A message Risiti cannot read by itself is read once by Anthropic's AI, as above, and the answer is kept with the message. While the phone may read notifications and you are signed in, it also checks in with your account about every half hour, when WhatsApp notifications arrive, sending the phone's make and model, the chats it watches and when it last heard a message, so your other devices can show that it is listening.

You can turn Live from WhatsApp off at any time in the app; the phone learns of it within minutes. Taking away its notification access in Android's settings stops it at once. Tell the people in the chats that their reports are recorded in Risiti.

Insights you ask for

When you ask for AI insights about your business, Risiti sends a written summary of your figures, such as totals for your shops and selling points, expenses by category, place and purpose, products and prices, payment methods, busy days and hours, and the names of your top customers. It never sends images or receipt photos for this.

Planning a route

When you ask Claude to plan a day's route, Risiti sends the day, the areas your team sells in with their usual takings on that weekday, and the customers who could buy that day: their names, areas, how often and on which days they usually order, their usual order and the price they usually pay, and any recent sale below that price. It sends no phone numbers, places or notes.

Saving a file on a phone

When you save a file, such as a PDF report or a spreadsheet, in a phone's web browser, Risiti sends it to its own server and your phone downloads it from there, so that it arrives with its name in your downloads. The file waits under a long random link that only your phone is given, and is deleted after 15 minutes. Your recovery code is never sent this way.

Your business's page

A business on Risiti can have its own public page at risiti.ai/its-name. It shows only what the business's owner puts on it in the app: the business's name, a line about it and its kind, its colour and logo, cover and product photos, the number for WhatsApp and calls, an email address, opening hours, products and services with or without prices, the places it chooses to show, delivery, payment numbers such as a Till or Paybill, offers and links. Sales, customers, staff and costs are never on it. If the owner turns on “Mark what sells most”, up to three products are marked Popular, worked out from sales, with no numbers shown. Its pictures are shown only while the page uses them. The page is public: it is listed in risiti.ai's sitemap so that search engines such as Google can find it, and it can appear in their results. The owner can hide the page at any time, which takes it off risiti.ai and out of the sitemap at once (a search engine may show its old copy for a while); deleting the business or the account deletes the page and its pictures.

When a customer sends an order or a message from a business's page, their phone opens WhatsApp (or text messages) with the message written out, and it goes from their phone to the business. Risiti does not see or keep it.

When an owner asks Risiti to make a picture for their page, Risiti sends OpenAI a description of the kind of business and its colour, and for a product or service its name (with numbers, addresses and the business's own name taken out). The picture comes back to the owner to check; Risiti keeps it only if the owner puts it on the page. Risiti also has OpenAI make one picture of each kind of business (a hardware store, a farm supply store and so on) from a description of that kind alone, which pages of that kind show until their owner adds a photo.

Which country you are in

When you make an account or sign in, the phone number box starts on the country you are in, which Cloudflare reads from your connection. Risiti does not keep it on its servers; your device remembers it for next time.

Typefaces

The app loads its typefaces from Google Fonts, so your browser requests them from Google, which receives your IP address. This website serves its own typefaces and makes no requests to other companies.

Why we use your information

Data protection laws ask us to say on what grounds we use information. For Risiti, they are:

• To give you the service you asked for. Keeping your records and account, keeping your devices in step, sharing a shop with the people you choose, and running your business's page.
• Because you choose to. Reading a photo, screenshot, PDF or message, insights, route planning, Live from WhatsApp and pictures for your page each happen only when you turn them on or ask for them, and you can stop at any time.
• To keep Risiti safe and working. Signing you in securely, pausing sign-in after too many wrong passwords, and protecting the service against abuse.
• When the law requires it. For example, answering a lawful request from an authority.

We do not use your information for anything else, and we do not make decisions about you by automated means alone.

Who else is involved

• Cloudflare hosts the app, the reading service and this website, and stores accounts and their records in its database service. Like any web host, it processes technical information, such as your IP address, browser type and the pages requested, to deliver and protect the service. Cloudflare's privacy policy.
• OpenAI makes pictures for a business's page when its owner asks for one, and one picture of each kind of business, from the descriptions above; it receives nothing else from Risiti. OpenAI's privacy policy.
• Anthropic provides the AI that reads what you send and writes insights. Under Anthropic's commercial terms, Anthropic may not train its models on content sent through Risiti's reading service. Anthropic may keep that content for a limited time under its own policies, for example to detect misuse. Anthropic's privacy policy.
• Google serves the app's typefaces, as described above. Google's privacy policy.

These companies run their services in many countries, including the United States, so information you send to be read may be processed outside the country you live in.

What we never do

• We do not sell or rent your information, or share it for anyone's marketing.
• We do not show ads, and there are no advertising or analytics trackers in the app or on this website.
• We do not use your records to train AI models, and Anthropic may not either, as described above.

Risiti does not use cookies for advertising or analytics. The app uses your browser's storage to keep your records and settings, which is how it works. Cloudflare may set a strictly necessary cookie to protect the service against abuse.

How long things are kept

• Your records stay on your device until you delete them, delete everything in Settings, sign out, or clear your browser's data for Risiti.
• Your account and its records are kept until you delete them or delete the account in Settings, which removes them from Risiti's database at once. Copies in the database's automatic backups expire within 30 days.
• What you send to be read is handled in memory by the reading service and not kept once the reply is sent. Anthropic keeps it only as described above.
• Messages from Live from WhatsApp are kept in your account for 45 days, so every device can record what is in them, and then deleted, whether or not the phone still sends any. Each device where Risiti is open keeps the last 7 days, to read new messages in context. A phone that has not checked in for 60 days is forgotten. The sales and expenses recorded from them are your records, as above.
• Your business's page is public until you hide it, delete the business or delete your account.
• A file you save on a phone is deleted from Risiti's server 15 minutes after you save it.
• Technical logs kept by Cloudflare follow Cloudflare's own retention periods.

Your choices and rights

You choose what Risiti reads. Every reading feature is optional: you can type any sale or expense yourself.

Depending on where you live, data protection laws, such as Kenya's Data Protection Act, 2019, or the GDPR in the EU and UK, give you rights over information about you: to know how it is used, to get a copy, to have it corrected or deleted, and to object to or restrict its use. You can do most of this yourself in the app: see all your records, remove the ones you don't want, download everything as a backup or spreadsheets, delete everything in Settings, or delete your account and everything in it with Delete my account.

You can also complain to your data protection authority. In Kenya, that is the Office of the Data Protection Commissioner.

Other people's details

Your sales and receipts can include your customers' names or phone numbers, and the WhatsApp reports you scan can include your staff's names and messages. That information stays in your records, on your device and in your account if you have one, except when it is part of something you ask Risiti to read or summarise. Record only what you need for your business, and tell people how you use their details where the law requires it.

For these details you decide what is kept and why, so in data protection terms you are responsible for them (the controller), and Risiti keeps and handles them for you (the processor), only to give you the service. If one of your customers or staff asks us about their details, we will pass the request to you.

Children

Risiti is made for adults running a business or managing their own money. It is not meant for anyone under 18, and we do not knowingly collect information from children.

Security

Risiti, its reading service and this website are served only over encrypted connections (HTTPS). Records on your device are as safe as the device itself, so use a screen lock. A backup file holds all your records: store it as carefully as any private document.

With an account, use a password you don't use anywhere else and keep your recovery code private: anyone who has them can see your records. Passwords and recovery codes are stored only as salted hashes, each signed-in device has its own sign-in key, and too many wrong passwords pause signing in for a while.

Changes to this policy

If we change this policy, we will update this page and the date at the top. If a change affects how your records are handled, we will also say so in the app or on this website before it takes effect.