The short version
- Your shops, sales and expenses are stored on your own phone or computer, not on a Risiti server. You don't need an account.
- When you ask Risiti to read a photo, screenshot, PDF or message, it is sent through Risiti's reading service to an AI model provided by Anthropic, and the result comes back to you. Risiti does not keep a copy.
- There are no ads and no analytics or tracking in the app, and we never sell your information.
- You can download or delete everything at any time in Settings.
Who we are
Risiti (“we”, “us”) makes Risiti, an app for recording a business's sales and expenses and making receipts for customers. This policy covers the Risiti app, its reading service and this website. If you have a question about it, see Contact below.
What Risiti keeps, and where
When you use Risiti in a browser, or install it on your phone or computer, what you enter is stored in that browser's storage on that device. This includes:
- your shops, such as their names, places, selling points, products and prices, currency, tax details and logo;
- your sales and expenses, such as amounts, dates and times, items, categories, payment methods, notes, and the customer names or numbers you choose to record;
- receipts you make for customers, and receipt photos you keep with an expense;
- your settings.
We do not have a copy of these records. We cannot see them, and we cannot recover them if your device is lost or your browser's data is cleared. Keep a backup: in Settings, choose Download a full backup.
If you open Risiti inside an AI assistant workspace, the same records are kept in the assistant app's private storage for your account instead, and that app's terms and privacy policy apply to them.
What leaves your device, and why
Most of Risiti works without sending anything anywhere. Information leaves your device only in the cases below, and only when you ask for them.
Reading photos, screenshots, PDFs and messages
When you ask Risiti to read something, such as a receipt photo, a WhatsApp screenshot, a PDF or a message you paste, the app sends the images and text to Risiti's reading service, together with instructions and the details needed to read them correctly, such as your currency, your country, today's date and the names of your shop's selling points and products. PDFs are turned into page images on your device first.
The reading service passes the request to an AI model provided by Anthropic and sends the result straight back to your device, where you check it before anything is saved. The reading service does not store or log what you send.
What is read on your device
M-Pesa and similar mobile-money confirmations in their usual format are read on your device and are not sent anywhere. WhatsApp chat exports are also read on your device; only the messages Risiti cannot read by itself are sent to be read as above.
Insights you ask for
When you ask for AI insights about your business, Risiti sends a written summary of your figures, such as totals for your shops and selling points, expenses by category, place and purpose, products and prices, payment methods, busy days and hours, and the names of your top customers. It never sends images or receipt photos for this.
Typefaces
The app loads its typefaces from Google Fonts, so your browser requests them from Google, which receives your IP address. This website serves its own typefaces and makes no requests to other companies.
Who else is involved
- Cloudflare hosts the app, the reading service and this website. Like any web host, it processes technical information, such as your IP address, browser type and the pages requested, to deliver and protect the service. Cloudflare's privacy policy.
- Anthropic provides the AI that reads what you send and writes insights. Under Anthropic's commercial terms, Anthropic may not train its models on content sent through Risiti's reading service. Anthropic may keep that content for a limited time under its own policies, for example to detect misuse. Anthropic's privacy policy.
- Google serves the app's typefaces, as described above. Google's privacy policy.
These companies run their services in many countries, including the United States, so information you send to be read may be processed outside the country you live in.
What we never do
- We do not sell or rent your information, or share it for anyone's marketing.
- We do not show ads, and there are no advertising or analytics trackers in the app or on this website.
- We do not use your records to train AI models, and Anthropic may not either, as described above.
Risiti does not use cookies for advertising or analytics. The app uses your browser's storage to keep your records and settings, which is how it works. Cloudflare may set a strictly necessary cookie to protect the service against abuse.
How long things are kept
- Your records stay on your device until you delete them, delete everything in Settings, or clear your browser's data for Risiti.
- What you send to be read is handled in memory by the reading service and not kept once the reply is sent. Anthropic keeps it only as described above.
- Technical logs kept by Cloudflare follow Cloudflare's own retention periods.
Your choices and rights
You choose what Risiti reads. Every reading feature is optional: you can type any sale or expense yourself.
Depending on where you live, data protection laws, such as Kenya's Data Protection Act, 2019, or the GDPR in the EU and UK, give you rights over information about you: to know how it is used, to get a copy, to have it corrected or deleted, and to object to or restrict its use. Because your records live on your device, you can do most of this yourself in the app: see all your records, remove the ones you don't want, download everything as a backup or spreadsheets, or delete everything in Settings. For anything else, contact us.
You can also complain to your data protection authority. In Kenya, that is the Office of the Data Protection Commissioner.
Other people's details
Your sales and receipts can include your customers' names or phone numbers, and the WhatsApp reports you scan can include your staff's names and messages. That information stays in your records on your device, except when it is part of something you ask Risiti to read or summarise. Record only what you need for your business, and tell people how you use their details where the law requires it.
Children
Risiti is made for adults running a business or managing their own money. It is not meant for anyone under 18, and we do not knowingly collect information from children.
Security
Risiti, its reading service and this website are served only over encrypted connections (HTTPS). Records on your device are as safe as the device itself, so use a screen lock. A backup file holds all your records: store it as carefully as any private document.
Changes to this policy
If we change this policy, we will update this page and the date at the top. If a change affects how your records are handled, we will also say so in the app or on this website before it takes effect.