Risora Privacy Policy
Effective date: 10 October 2026
Last updated: 10 October 2026
Applies to: the Risora app for iPhone, iPad and Apple Watch, including its widgets, Live Activity, Shortcuts and Control Center controls.
This policy is a plain-language description of how the app works. It is not legal advice.
The short version
- You do not need an account to use Risora. We never ask for your name, email address or gender.
- Your favorites, history, own quotes, collections, chosen photos and settings live on your device. If iCloud is on, Apple syncs your favorites, history, collections (including your own and AI quotes in them) and your streak between your own devices.
- We use analytics and crash reporting tools (Amplitude, and Google Firebase Crashlytics for crashes) to understand how the app is used and to fix bugs. In the EEA, full analytics and crash reports start only if you tap Allow on a one-time "Share usage analytics?" screen; otherwise Risora uses a limited anonymous mode with no crash reports. Everywhere else it is on by default and you can switch it off in Settings. We never send the text of quotes or anything you type.
- If you tap Allow when iOS asks whether Risora may track you, Meta (Facebook) and Branch start and measure which ads bring people to Risora, and may link your activity with other companies' apps and websites. If you tap "Ask App Not to Track", neither runs.
- Subscriptions are handled by Apple. RevenueCat helps us check whether your subscription is active. We never see your card details.
- Optional AI features send what you type to AI providers through our server. We ask your permission first, and our server does not store what you type. AI quotes carry a visible "AI" label.
- We keep no user profile or content on our own servers (only anti-abuse and usage counters: daily ones for up to 48 hours, monthly ones for up to 40 days and the free-AI usage counter for 24 months, section 4.4). You can delete everything on your device, including iCloud sync data, with Settings, Privacy & data, Delete my data. Copies held by our service providers can be deleted on request: email [email protected] with the Support ID shown on that screen.
1. Who we are
The controller of the personal data described in this policy is:
HOPIN.IT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (HopIn.IT sp. z o.o.)
ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland
KRS 0001117479, NIP 8971940626, REGON 529197668
The App Store listing for Risora shows a different seller name; HOPIN.IT is the controller of the personal data described in this policy.
You can contact us about privacy at [email protected]. Based on our current assessment, the law does not require us to appoint a Data Protection Officer. We will reassess this if our processing changes.
UK representative. We have not appointed a representative in the UK under Article 27 UK GDPR. If you are in the UK, contact us directly at [email protected].
2. What stays on your device
The following is stored only on your device (and in your own iCloud account where noted). We do not receive it:
- Favorites, reading history, your own quotes, your collections (including AI quotes you chose to keep) and your streak. If iCloud is enabled for Risora, Apple's iCloud key-value storage syncs these between devices signed in to your Apple Account. This data sits in your iCloud account; we cannot access it.
- Photos you choose as a background. Risora uses Apple's photo picker, which only gives the app the single photo you pick. No access to your photo library is requested. The picked photo is resized and stored in the app's private storage so your widgets can show it.
- Images you save. If you save a quote image, iOS asks for permission to add it to your Photos. Risora only adds images; it does not read your library.
- AI backgrounds you keep, together with the description you typed for them, stored in the app's private storage.
- Settings and preferences: chosen categories, mood, fonts, colors, themes, reminder schedules, widget settings and what the app has learned about the quotes you like (recommendations, including the mood you pick, are calculated on your device only).
- Reminders. Notifications are scheduled locally on your device by iOS. We do not use a push notification server.
- Apple Watch, widgets, Live Activity and Shortcuts. These read the same on-device data. Your iPhone and Apple Watch exchange quotes and favorites directly through Apple's WatchConnectivity. Basic Watch app usage events are passed to your iPhone and included in our analytics (section 3.1).
- Read aloud. Quotes are spoken by your device's built-in voice; no audio or text is sent to us.
Risora asks only for permission to send notifications, to add images to Photos and (through the iOS prompt) to track. It does not use your camera, microphone, location, contacts or health data.
3. What we collect, why, and our legal basis
The legal bases below apply under the EU and UK General Data Protection Regulation (GDPR). "Legitimate interests" (Art. 6(1)(f) GDPR) means we have weighed our interest against your rights; you can object at any time (section 9). Where the law also requires your consent before an app stores or reads information on your device (in Poland, Art. 399 of the Electronic Communications Law), we ask for it first.
3.1 Usage analytics (Amplitude)
Your choice.
- In the EEA (your phone's region is in the EU, Iceland, Liechtenstein or Norway), Risora shows a one-time "Share usage analytics?" screen. If you tap Allow, full analytics runs. If you tap "Not now" or do not answer, Risora uses anonymous mode (below).
- Elsewhere, including the UK, full analytics is on by default and you can turn it off in Settings with the Share usage analytics switch, which puts Risora in anonymous mode. Turning it on again takes effect the next time you open the app.
- In the EEA you can change your choice in the same Settings switch at any time.
Full analytics, what: which screens and features you use (for example opening the app, onboarding steps, choosing a category or author, adding a favorite, sharing, reading aloud, changing fonts or backgrounds, reminders, widgets, the Live Activity, rating prompts, the paywall and offers, purchases and subscription changes), with simple details such as a category ID, a count, a duration or a product ID. For purchases we record the product, price and currency. We also record whether you are a subscriber, your plan and its renewal status, app version, app language, how many times you opened the app, whether onboarding is complete, whether notifications and Live Activities are allowed, how many widgets and reminder sets you have, whether you created a collection, whether the Apple Watch app is installed, your longest streak, and session start and end. We do not send the mood you pick.
AI feature usage: the style or topic you chose, a length bucket for your text (for example "short"), whether you are a subscriber and have free uses left, which AI model answered, success or failure, whether you kept or deleted the result and your answer to the AI permission prompt. If you rate AI quotes, your rating and reasons (not the quotes) are recorded too. We do not send the reason a safety check blocked a request.
Device data: Amplitude also receives your device model, iOS version, language, your IP address (Amplitude uses it to estimate your country and city) and your device's Identifier for Vendor (IDFV), a code Apple gives each app developer for your device, which Amplitude uses as your device ID. Amplitude stores this data in the United States. Risora sends its analytics to its own Amplitude project, separate from our other apps, and we do not combine data across our apps.
What we never send: the text of quotes, anything you type, collection names, file names or photos.
Apple Search Ads: in full analytics, if you installed Risora from an Apple Search Ads ad, Apple tells the app the campaign, ad group, keyword, ad variation and country, and we add these to your analytics profile. For other installs we only record that the install was organic or unknown. This uses Apple's own attribution service (AdServices) and does not require tracking permission. This is skipped in anonymous mode.
Anonymous mode. Amplitude only. Risora uses a random device ID created each time the app launches and held only in memory, never stored on your device, and no user ID. Amplitude's collection of your IP address, city, region, country, DMA, carrier and IDFV is disabled. Only a small fixed list of non-personal event details is sent, each event tagged "anonymous". Nothing in this mode is linked to RevenueCat, Meta or Branch. Firebase Crashlytics (section 3.2) is also off in this mode. Earlier events sent before these changes may remain in Amplitude until we purge them.
Why: to understand which features help people, fix broken flows and measure our marketing.
Legal basis:
- EEA, full analytics: your consent (Art. 6(1)(a) GDPR; Art. 399 of the Polish Electronic Communications Law, which implements Art. 5(3) of Directive 2002/58/EC). You can withdraw it at any time with the "Share usage analytics" switch, as easily as you gave it.
- EEA, anonymous mode: we do not store an identifier on your device. The app creates a random ID in memory for the current launch only, and it is discarded when the app closes. We send only a small set of anonymous counts about how the app is used, on the basis of our legitimate interest in knowing whether the app works and which features are used (Art. 6(1)(f) GDPR). You can object at any time (section 9).
- UK and elsewhere: legitimate interests (Art. 6(1)(f) GDPR) and, in the UK, the statistical purposes exception to the UK PECR consent rule, with a simple way to object (the Settings switch).
3.2 Crash reports (Google Firebase Crashlytics)
Crash reports (Google Firebase Crashlytics). Crash logs and technical details (device model, iOS version, app version, a random installation ID, the app's state when it crashed), to find and fix bugs. In the EEA: your consent, given on the analytics sheet; nothing is sent if you tap "Not now" or turn the switch off. Outside the EEA: our legitimate interest in keeping the app working (Art. 6(1)(f) GDPR). Crash reports follow the "Share usage analytics" switch in both cases.
How Google uses it: Google acts as our processor. See how Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites . Firebase's privacy information: https://firebase.google.com/support/privacy .
3.3 Advertising measurement (Meta and Branch)
When they run: Risora includes the Meta (Facebook) SDK and the Branch SDK. They collect data for attribution only after you tap "Allow" on the iOS tracking prompt. Before you answer, or if you tap "Ask App Not to Track", Meta's automatic event logging and advertiser ID are off, and Branch is limited to opening Risora web links in the app (deep links) without attribution. Anonymous mode (section 3.1) also keeps your activity from being linked to Meta or Branch.
What: once you allow tracking, they report app installs, app opens and in-app purchases, together with device information (model, iOS version, language, time zone), IP address and device identifiers including your device's advertising identifier (IDFA), so we can tell which ads and Risora web links led to an install. Meta and Branch may link your activity in Risora with your activity in other companies' apps and websites for advertising and ad measurement. Invite and share links you send from Risora are ordinary App Store links; Apple tells us only aggregated counts for them. We keep Branch so we can measure future Facebook app-install ads.
Who is responsible: for the Meta SDK, we and Meta Platforms Ireland Limited are joint controllers (Art. 26 GDPR) for collecting your data and sending it to Meta, under the Meta Business Tools Terms and Controller Addendum (https://www.facebook.com/legal/controller_addendum). We are responsible for this notice and for asking for your consent; Meta is responsible for answering your rights requests about what it holds, and you can also contact us. After Meta receives the data it is an independent controller and uses it under the Meta Privacy Policy (https://www.facebook.com/privacy/policy), including to provide measurement, target ads and improve its products. You can control this in your Facebook settings under "Your activity off Meta technologies" and through the iOS tracking setting. Branch acts as our processor.
Why: to measure and improve our advertising.
Legal basis: your consent given through the iOS tracking prompt (Art. 6(1)(a) GDPR; Art. 399 of the Polish Electronic Communications Law). Meta and Branch receive data only after you tap Allow.
3.4 Subscriptions and purchases (Apple and RevenueCat)
What: purchases are made and paid through Apple's App Store; we never receive your payment card or Apple Account details. RevenueCat receives your App Store receipts and transactions (product, price, currency, dates, trial and renewal status), a random app user ID created by RevenueCat, device and app information, and Apple's AdServices attribution token (which tells RevenueCat whether you came from an Apple Search Ads ad). In full analytics we give RevenueCat the device ID Amplitude uses (your IDFV) so subscription revenue appears in our analytics; in anonymous mode we do not.
Why: to unlock Premium, restore purchases, show offers you qualify for and understand subscription revenue.
Legal basis: performance of our contract with you (Art. 6(1)(b), providing what you paid for); legitimate interests for revenue analytics (Art. 6(1)(f)); legal obligation for tax and accounting records (Art. 6(1)(c)).
3.5 Background images
What: Risora downloads its background catalog from our server (api.hopin.it, served through Cloudflare) and the images from our storage at DigitalOcean (Frankfurt, Germany). The catalog request includes the app name, your app language, your device's date and whether you are a subscriber. Like any internet request, both services see your IP address.
Why: to show backgrounds.
Legal basis: performance of our contract with you (Art. 6(1)(b)); our legitimate interest in running and securing the service (Art. 6(1)(f)). api.hopin.it is served through Cloudflare from our own server at DigitalOcean. Image storage is DigitalOcean Spaces in Frankfurt. Access logs are kept only as long as needed to keep the service running and secure, then deleted.
3.6 Contacting us
If you email us (the in-app "Contact us" link opens your email app addressed to [email protected]), we receive your email address, your message and anything you attach.
Why: to answer you. Legal basis: legitimate interests (Art. 6(1)(f)), or contract (Art. 6(1)(b)) where your question is about your purchase.
3.7 Ratings and reviews
Risora may ask whether you are enjoying the app. If you are, it shows Apple's standard rating prompt; reviews go to Apple under Apple's terms. If you are not, it offers to email us. We record only that the prompt was shown and the outcome (in full analytics). The "Rate" option in Settings opens Apple's prompt directly.
3.8 Author search
Tapping an author's name opens a Google search for that name in your browser. Google's privacy policy applies to that search.
3.9 Support ID
The Delete my data screen in Settings (Settings, Privacy & data) shows a Support ID that you can tap to copy. It is the random app user ID RevenueCat created for you and the device ID Amplitude uses in full analytics. Including it in a request to us lets you identify your records at our service providers. It does not reveal who you are.
3.10 Data we receive from others, and whether you must give data
We receive from Apple the Apple Search Ads campaign that led to your install and, through RevenueCat, your subscription status; from Branch and Meta (only if you allowed tracking) the ad or link you came from. We do not receive your name or contact details from them.
You do not have to give us any personal data to use Risora's free features. Server-based features (AI and backgrounds) cannot work without sending the content you choose. Analytics, crash reports and advertising measurement are not required to use the app; in the EEA they run only if you allow them.
4. AI features (optional)
Risora offers optional AI features: writing motivational quotes for you ("Create with AI") and creating AI backgrounds.
4.1 Your permission
Before you first use an AI feature, Risora asks for your permission. If you decline, nothing is sent and the rest of the app works normally. Free users get one free AI request of each kind; subscribers get a daily allowance (AI backgrounds also have a monthly limit).
4.2 What is sent
- For AI quotes: the text you type (if any), an optional "different direction" note, the topic and tone you chose, and your app language.
- For AI backgrounds: the description you type (if any), the style you chose and your app language.
- Technical data: your RevenueCat app user ID (a random ID, used to check your subscription and apply usage limits), your App Store country (to choose a nearby AI host), the app's identification token and your IP address.
Risora does not send your name, your favorites, your history or any profile about you to the AI.
4.3 Where it goes
- Our AI server, which runs on Cloudflare (Cloudflare, Inc., USA, global network). It checks your subscription status with RevenueCat using your app user ID.
- OpenRouter (OpenRouter, Inc., USA), which forwards the request to the AI model host we have selected.
- AI model hosts.
- Everything you type is first checked for harmful content by a model hosted on Microsoft Azure (OpenAI models) or Mistral AI (France). A request with only a topic or style and no typed text is not checked by a model, because it contains nothing you wrote.
- Quotes are then written by Anthropic Claude models hosted on Amazon Web Services (Bedrock) or Google Cloud (Vertex AI), or, when those are overloaded, by Mistral AI models hosted by Mistral AI.
- If you are in the EU, EEA, UK or Switzerland (based on the stricter of your App Store country and your IP address), or if your location is unknown, text requests are sent to hosts in the EU.
- AI backgrounds are created by a Google Gemini image model on Google Cloud (Vertex AI) for all users. This host is not limited to the EU and may process your image prompt in the United States or other countries. Your description is first checked and rewritten into a safe image prompt, and the finished image is checked by a model on Microsoft Azure.
4.4 What is kept
- Our server does not store what you type or what the AI writes. Its technical logs record the time, feature, outcome (including the safety category if a request was blocked, without any identifier), model, cost, region and whether you are a subscriber, never the text.
- To apply usage limits and prevent abuse, our server keeps counters linked to a one-way scrambled (hashed) form of your app user ID, and spending and blocked-request counters linked to your IP address (stored as is) for up to 48 hours (Art. 6(1)(f) GDPR, our legitimate interest in preventing abuse). Daily counters expire after 48 hours, monthly counters after 40 days and the free-use counter after 24 months. After several blocked requests within a few minutes, AI features pause for 30 minutes, and after many blocked requests in one day they pause until the next day.
- For AI quotes, we only use hosts with zero data retention (through OpenRouter's zero-data-retention routing, which applies to model inference; OpenRouter does not store prompts unless prompt logging is enabled, and we have not enabled it) and instruct them not to store your requests or use them for training. For AI backgrounds, we instruct providers not to collect or train on your data, but the image host may keep requests for a limited time under its own terms (for example for abuse monitoring).
- We do not use your personal data or your content to train AI models, and we instruct our AI providers not to.
4.5 Safety and labelling
Every request with typed text is checked automatically. If a request suggests you may be in crisis, Risora shows links to support services (findahelpline.com) instead of generating content. AI quotes show a visible "AI" label in the app (on the home screen, in favorites and history) and on quote images you share, and AI backgrounds carry a machine-readable "AI-generated" marker in their file data. AI backgrounds are shown in a separate "Create with AI" section. AI quotes are saved to a collection named "AI quotes" by default (you can rename it). AI output can be wrong or unsuitable and is not advice.
Please do not type health information or other sensitive details about yourself or others into the AI features.
4.6 Feedback you choose to send
After an AI quote set you can rate it, pick reasons (such as "too generic") and optionally choose to share the generated quotes with us. Feedback is delivered to our internal support channel, a private Telegram chat (Telegram Messenger, https://telegram.org/privacy) that our team reads. It carries your message, rating, app version, device model, iOS version, language and your country at a coarse level, and no account or device identifiers. It also includes a random per-install feedback key, stored in your device's Keychain, which our server uses only to limit how often feedback can be sent; our staff do not see it and it is not linked to your analytics or purchases. Your rating and reasons (not the quotes) are also recorded in our analytics (section 3.1) when full analytics is on.
Legal basis: your consent, which you give by tapping Send (Art. 6(1)(a)).
4.7 How to avoid sending data to AI
Do not use "Create with AI" or AI backgrounds, or decline the permission prompt. Nothing is sent to AI providers otherwise.
Legal basis for AI processing: your consent, given in the app before first use (Art. 6(1)(a) GDPR); our legitimate interest in preventing abuse and applying usage limits (Art. 6(1)(f)); and performance of our contract with you for subscribers' allowances (Art. 6(1)(b)). You can withdraw your consent by not using the AI features.
5. Who we share data with
We do not sell your personal information. Apart from Meta, which receives data only if you allow tracking (section 3.3), and the independent services marked below, these providers process data on our behalf:
| Provider | Purpose | Data | Location | Privacy policy |
|---|---|---|---|---|
| Amplitude, Inc. | Usage analytics | Usage events, purchase values, IDFV (device ID), IP address, approximate location, device info, Search Ads attribution (full analytics); limited events only in anonymous mode | United States | https://amplitude.com/privacy |
| Google (Firebase Crashlytics) | Crash reports | Crash data, installation ID, device info | USA and other Google locations | https://firebase.google.com/support/privacy ; sub-processors https://firebase.google.com/terms/subprocessors |
| Meta Platforms Ireland Limited and Meta Platforms, Inc. (Facebook SDK), joint controller for collection, then independent controller | Advertising measurement | Install, app and purchase events, device info, device identifiers, IP address, advertising ID; only after you allow tracking | Ireland and USA | https://www.facebook.com/privacy/policy |
| Branch Metrics, Inc. | Link handling and install attribution | Device info, device identifiers, IP address, link clicks, installs and opens; attribution and advertising ID only after you allow tracking | USA | https://legal.branch.io/saas/privacy-policy/ ; sub-processors https://legal.branch.io/saas/subprocessor-list/ |
| RevenueCat, Inc. | Subscription management | App user ID, IDFV (full analytics only), App Store transactions, device info, Apple AdServices attribution token | USA | https://www.revenuecat.com/privacy ; https://www.revenuecat.com/dpa |
| Apple | App Store purchases, Search Ads attribution, iCloud sync, ratings | As described in sections 2 and 3 | Worldwide | https://www.apple.com/legal/privacy/ |
| Cloudflare, Inc. | Hosting our AI server; delivering api.hopin.it | AI requests in transit, IP address, technical logs, catalog requests | Global network | https://www.cloudflare.com/privacypolicy/ ; https://www.cloudflare.com/cloudflare-customer-dpa/ |
| DigitalOcean, LLC | Our server behind api.hopin.it (catalog) and background image storage | IP address, app language, subscriber flag | Spaces: Germany (Frankfurt); server: DigitalOcean data centre | https://www.digitalocean.com/legal/privacy-policy |
| OpenRouter, Inc. | Routing AI requests | AI requests in transit | USA | https://openrouter.ai/privacy |
| Amazon Web Services, Google Cloud, Microsoft Azure, Mistral AI | Hosting AI models (Mistral AI also writes quotes when other hosts are overloaded) | AI request text or image prompts | EU or USA, and for AI backgrounds any Google Cloud region (section 4.3) | https://aws.amazon.com/privacy/ , https://cloud.google.com/terms/cloud-privacy-notice , https://www.microsoft.com/privacy/privacystatement , https://legal.mistral.ai/ |
| Zoho Corporation (Zoho Mail) | Support email | Your email address, message and attachments | EU (Zoho EU data centre, zoho.eu) | https://www.zoho.com/privacy.html |
| Telegram (Telegram Messenger) | Our internal support channel: receiving AI feedback you choose to send | Feedback you choose to send | Telegram's servers | https://telegram.org/privacy |
Each of these providers is bound by a contract or by its published terms to protect your data at least as well as this policy describes and to use it only for the purposes listed here. Meta and Branch are also bound by their own privacy policies and by their terms with us.
We may also disclose data if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case this policy continues to apply.
When you share a quote to Instagram, Facebook, X or another app, you choose what to send and that app's own privacy policy applies.
6. International transfers
Some of our providers are in the United States or other countries outside the European Economic Area. The safeguard we rely on for each is:
- Amplitude, Branch, Google (Firebase and Google Cloud), Meta, Microsoft and Amazon: the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR) and its UK and Swiss extensions, with Standard Contractual Clauses as a fallback.
- RevenueCat, OpenRouter and Cloudflare: Standard Contractual Clauses (Commission Decision 2021/914, Art. 46(2)(c) GDPR) in their data processing terms, with the UK Addendum for UK users. We do not rely on the Data Privacy Framework for these three.
- Mistral AI (France) and DigitalOcean (Frankfurt storage): processed in the EU.
- Apple: under Apple's own transfer terms and privacy policy.
You can get a copy of the clauses by emailing [email protected].
7. How long we keep data
| Data | How long |
|---|---|
| On-device data | Until you delete it with Delete my data or delete the app |
| iCloud-synced favorites, history, collections and streak | In your iCloud account until you delete them with Delete my data (section 10) |
| Amplitude analytics | 24 months from when they are received, then deleted automatically |
| Crashlytics crash reports | 90 days |
| Meta and Branch attribution data | Under each provider's own retention policy |
| Subscription records (RevenueCat) | For as long as we hold an account with RevenueCat and up to six years after, and as tax and accounting law requires |
| AI request text | Not stored by our server; not stored by text model hosts (zero data retention) |
| AI usage counters (hashed ID) | Daily: 48 hours; monthly: 40 days; free-use counter: 24 months |
| IP address on our AI server | Up to 48 hours |
| AI server technical logs (no text) | Up to 7 days |
| Background catalog and image server logs | Only as long as needed to keep the service running and secure, then deleted |
| AI feedback you send | Only as long as needed to review it and improve the app, then deleted |
| Support emails | As long as needed to handle your request and any follow-up, then deleted |
When we delete data from Crashlytics, it leaves live and backup systems within about 180 days.
8. Security
We use encrypted connections (HTTPS) for all data the app sends, keep on-device data in the app's protected storage, and limit access to our provider accounts to staff who need it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
9. Your rights (EU, EEA, UK and similar laws)
You have the right to:
- access your personal data and get a copy;
- correct inaccurate data;
- delete your data (in the app with Delete my data, section 10, or by email for copies held by our providers);
- restrict processing;
- data portability;
- withdraw consent at any time (for analytics: Settings, Share usage analytics; for tracking: iOS Settings, Privacy & Security, Tracking; for AI: see section 4.7), without affecting earlier processing.
Your right to object. Where we rely on legitimate interests (anonymous analytics, crash reports, abuse prevention, revenue analytics), you can object at any time by emailing [email protected], and for analytics by turning off Settings, Share usage analytics. We will stop unless we have compelling legitimate grounds. You can always object to use of your data for advertising measurement.
Automated decisions. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our automatic safety check only decides whether an AI request is answered and may pause AI features for up to a day; if you think this happened by mistake, email us.
To use these rights, email us (section 15). We will reply within one month. Because Risora has no accounts, see section 10 for how we find your data.
You also have the right to complain to a data protection authority. Our lead authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, https://uodo.gov.pl. You can also complain to the authority in the country where you live or work. In the UK, this is the Information Commissioner's Office (https://ico.org.uk).
10. Deleting your data (no account needed)
We keep no user profile or content on our own servers, only the anti-abuse and usage counters in section 4.4 (daily counters up to 48 hours, monthly counters up to 40 days, and 24 months for the free-AI usage counter) that expire on their own, so there is nothing for us to delete there. Your data is on your device, in your iCloud account (if iCloud is on) and, as described in sections 3 to 5, with our service providers.
- In the app (recommended): open Risora, go to Settings, Privacy & data, and tap Delete my data. This wipes everything Risora stores on the device: favorites, history, own quotes, collections, photos, AI creations, settings, the app group storage, Keychain items, widgets and Apple Watch data. It also removes your iCloud key-value sync data, resets the analytics ID, and returns the app to onboarding. Do this before deleting the app.
- Deleting the app removes the on-device data but not the data Risora syncs through iCloud key-value storage, which stays in your iCloud account. Use Delete my data first. We cannot access or delete data in your iCloud account. Delete the app on your Apple Watch too if it is installed separately.
- Subscriptions are managed by Apple and are not cancelled by Delete my data or by deleting the app (section 11).
- Copies held by third parties (Amplitude, Crashlytics, Meta, Branch, RevenueCat): on the Delete my data screen, tap your Support ID to copy it, and email it to [email protected] with your request. The Support ID lets you identify your subscription and analytics records. We pass the request to these providers and tell you if we cannot match any data to you.
- Analytics going forward: turn off Share usage analytics in Settings (in the EEA, answer Not now on the analytics screen). To stop Meta and Branch, tap "Ask App Not to Track" or turn off tracking for Risora in iOS Settings, Privacy & Security, Tracking.
11. Subscriptions through Apple
Risora's subscriptions are sold and billed by Apple. Manage or cancel them in iOS Settings, your name, Subscriptions. Refunds are handled by Apple at https://reportaproblem.apple.com. Deleting the app does not cancel a subscription.
12. Children
Risora is intended for people aged 16 and over in the EEA and 13 and over in the UK and elsewhere. If you are younger, do not allow tracking or analytics or use the AI features without a parent's permission. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it. Risora's App Store age rating is 13+.
13. US privacy rights (California and other states)
Categories we collect (in the last 12 months): identifiers (device identifiers such as the IDFV, random app and installation IDs, IP address, and the advertising ID if you allow tracking); commercial information (subscription purchases, including price and currency); internet or other electronic network activity (app usage and crash data); approximate geolocation (from IP address); content you type into AI features (processed to give you a result, not stored). Sources: you, your device, Apple (Search Ads attribution) and RevenueCat. Purposes and recipients: as described in sections 3 to 5. We do not create profiles about you beyond simple usage summaries.
Advertising measurement and your choices. We do not sell your personal information for money. If you allow tracking in the iOS prompt, Meta and Branch receive your activity in Risora to measure our ads. Some US state laws call this "sharing" or "targeted advertising". HopIn.IT is a small company based in Poland and, as far as we have assessed, the thresholds of those laws do not currently apply to us. You still get the same choices wherever you live. To stop this, tap "Ask App Not to Track" in the iOS prompt, or turn off tracking for Risora in iOS Settings, Privacy & Security, Tracking. You can also email [email protected] with the subject "Privacy choices". We do not use or disclose sensitive personal information to infer characteristics about you.
Your rights: to know what we collect, to access, delete and correct it, to opt out of advertising measurement (see above), and to limit use of sensitive personal information. Email us (section 15); you may use an authorized agent. We verify requests using the Support ID described in section 10. We answer within 45 days.
Appeals. If we decline your request, you can appeal by replying to our answer with the subject "Appeal". We will answer within 60 days. If you are not satisfied, you can contact your state attorney general.
Non-discrimination: we will not deny you service, charge a different price or give you a different quality of service because you exercised your privacy rights.
Do Not Track. Our app does not respond to web browser Do Not Track signals, because it is an app, not a website. You control tracking in iOS Settings, Privacy & Security, Tracking, and analytics in the app's Settings (section 3.1).
14. Changes to this policy
If we change this policy, we will update the effective date above and, for significant changes, tell you in the app or in the App Store release notes before the change takes effect.
15. Contact
HopIn.IT sp. z o.o., ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland
Email: [email protected]