Privacy policy
Risy holds receipts and bank statements, which are personal financial records. This page says plainly what we collect, who else handles it, and how you take it out or delete it.
Last updated November 12, 2026
Draft. This text describes the app before its release and is waiting for a legal review. It will be final when Risy is on the App Store.
The short version
- Your receipts, statements and chats are stored on servers in Canada so they survive a lost phone, and only your account can read them.
- To read a receipt or answer a question, we send it to an AI provider. Today that provider works in the United States.
- The app has no ads, no ad SDKs and no analytics or tracking SDKs. We do not sell your data.
- You can export a year of records at any time, free, and delete your account in the app.
Who we are
Risy is run by Risy, based in Alberta, Canada. For anything about your personal information, write to [email protected]. We answer within 30 days.
What we collect
What you give the app
- Photos and scans of receipts, and screenshots and PDFs you add, such as invoices and bank statements.
- Messages you send to the chat, and anything you attach to them.
- Voice messages, which are turned into text. The recording is deleted from the phone once it is text.
- Your name and a short description of your work, if you enter them. The read uses them to tell a work expense from a personal one.
- Your corrections: a changed store, date, total, tax, category or book.
What the app works out
- The record read from each document: store, address, date, line items, taxes, totals, how it was paid and, when printed, the last four digits of the card.
- Statement lines, the links between a receipt and its payment, recurring payments, and money paid to you that you scan, such as a cheque.
- The chat's answers, and for each answer the steps that produced it: what was asked of the AI model and what it returned.
Technical data
- An account identifier and a sign-in session.
- Server logs with the request path, status, error kind and record identifiers. They do not hold what a receipt or message says.
- Counts of AI use on your account: the day, the task, the amount of text processed and its cost. No content.
We do not collect your location, contacts or advertising identifier. A photo you import from your library keeps the details your camera stored in the file, which can include where and when it was taken. A scan made with the camera inside Risy carries none.
How we use it
- To read your documents into records, match payments, find recurring payments and answer your questions.
- To keep your records in step between our servers and your phone, and to build your export.
- To find and fix faults. When you send a report from the chat, we read your report together with the steps of the answer it is about.
We do not use your records for advertising, we do not sell them, and we do not use them to train AI models.
Who else handles your data, and where
We use the service providers below. Some work outside Canada, so your information is processed in those countries and is subject to their laws, including lawful requests from their authorities.
| Provider | What it does | Where |
|---|---|---|
| Supabase | The database and file storage that hold your records, files and chats, and the sign-in. | Canada (AWS, Montréal region) |
| Our application server | Receives what the app sends, runs the reading, matching and chat jobs, and talks to the services below. | Germany (Hetzner) |
| Anthropic (Claude) | Reads receipt images, PDFs and statements, and answers chat questions from your records. | United States |
| OpenAI | Turns a voice message into text, only when you use the microphone. | United States |
This website and messages to us
The website has no ads, no analytics and no tracking scripts. Two more providers take part when you open it or write to [email protected]; neither handles the records in the app.
| Provider | What it does | Where |
|---|---|---|
| Cloudflare | Serves this website, and so sees the address of the device that asks for a page. It also forwards a message written to our address to our mailbox. | Its network worldwide, Canada included; a United States company |
| Google (Gmail) | The mailbox where a message you write to us lands and is answered. | United States |
What the AI provider receives
- For a receipt: its image, the text your phone read from it, your work description, the day and the app's language.
- For a PDF: the file, your name and work description, the day and the app's language.
- For a chat question: your recent messages, a short overview of your records (stores, categories, tax labels), the results of the searches the answer needs, with amounts and line names, your name, and photos or a PDF you attached.
- For a voice message: the recording, your languages and up to 80 of your store names, so that names are spelled right.
- When you ask the chat to look something up on the web, the name of the product or company goes to the provider's web search. Our server then opens the pages it finds, and those sites see our server's address, not yours. An image or a link you open from such an answer loads from that site, which then sees your phone's address.
Before anything is sent to an AI provider for the first time, the app asks for your consent and names the provider.
How long we keep it
- Your records and files are kept while you have an account. You can export them at any time.
- Deleting one receipt removes it from your records, totals and export. Its data stays on our servers, marked as deleted, until you delete your account.
- PDFs you send stay as your documents until you delete your account.
- Deleting a chat does not delete the records or files that came in through it.
- Deleting your account removes your records, files, chats and sign-in from our systems at once. Backups made by our storage provider can hold a copy for a limited time before they are overwritten.
The app also keeps a copy of your records on your phone, so it opens without a network. If your iPhone backs up to iCloud, that copy is part of the backup, which is held by Apple under your Apple Account.
How we protect it
- The app talks to our servers over an encrypted connection.
- Each account can read and change only its own rows and files. The database itself enforces this on every request.
- The keys to the AI providers are kept on our servers and never in the app.
- On your phone, the records are protected by the iPhone's own passcode and encryption. Risy does not add a lock of its own.
No system is perfectly secure. If a breach puts your information at real risk, we will tell you and the regulators as the law requires.
Your choices
- See and correct. Every record is in the app, with its original, and you can change what was read.
- Export. A year of one book as a ZIP: a summary PDF, a spreadsheet, a JSON file, a capture log and every original file. It is free, also after a subscription ends.
- Delete. Settings has Delete account, on the same screen as the export. It cannot be undone.
- Withdraw consent. You can stop using the AI features at any time by not sending new documents, or delete your account. Reading a receipt needs the AI provider.
- Ask us. For a copy of your information, a correction or a question about how it is handled, write to [email protected].
Children
Risy is for adults. It is not directed at anyone under 18, and we do not knowingly collect their information.
Changes
When the app starts handling data in a new way, this page changes first, and the date at the top changes with it. For a change that matters, the app will tell you before it applies.
Questions and complaints
Write to [email protected] first, and we will try to put it right. You may also contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.
See also the terms of use.