Risora Privacy Policy

Effective date: 10 October 2026
Last updated: 10 October 2026
Applies to: the Risora app for iPhone, iPad and Apple Watch, including its widgets, Live Activity, Shortcuts and Control Center controls.

This policy is a plain-language description of how the app works. It is not legal advice.

The short version

1. Who we are

The controller of the personal data described in this policy is:

HOPIN.IT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (HopIn.IT sp. z o.o.)
ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland
KRS 0001117479, NIP 8971940626, REGON 529197668

The App Store listing for Risora shows a different seller name; HOPIN.IT is the controller of the personal data described in this policy.

You can contact us about privacy at [email protected]. Based on our current assessment, the law does not require us to appoint a Data Protection Officer. We will reassess this if our processing changes.

UK representative. We have not appointed a representative in the UK under Article 27 UK GDPR. If you are in the UK, contact us directly at [email protected].

2. What stays on your device

The following is stored only on your device (and in your own iCloud account where noted). We do not receive it:

Risora asks only for permission to send notifications, to add images to Photos and (through the iOS prompt) to track. It does not use your camera, microphone, location, contacts or health data.

3. What we collect, why, and our legal basis

The legal bases below apply under the EU and UK General Data Protection Regulation (GDPR). "Legitimate interests" (Art. 6(1)(f) GDPR) means we have weighed our interest against your rights; you can object at any time (section 9). Where the law also requires your consent before an app stores or reads information on your device (in Poland, Art. 399 of the Electronic Communications Law), we ask for it first.

3.1 Usage analytics (Amplitude)

Your choice.

Full analytics, what: which screens and features you use (for example opening the app, onboarding steps, choosing a category or author, adding a favorite, sharing, reading aloud, changing fonts or backgrounds, reminders, widgets, the Live Activity, rating prompts, the paywall and offers, purchases and subscription changes), with simple details such as a category ID, a count, a duration or a product ID. For purchases we record the product, price and currency. We also record whether you are a subscriber, your plan and its renewal status, app version, app language, how many times you opened the app, whether onboarding is complete, whether notifications and Live Activities are allowed, how many widgets and reminder sets you have, whether you created a collection, whether the Apple Watch app is installed, your longest streak, and session start and end. We do not send the mood you pick.
AI feature usage: the style or topic you chose, a length bucket for your text (for example "short"), whether you are a subscriber and have free uses left, which AI model answered, success or failure, whether you kept or deleted the result and your answer to the AI permission prompt. If you rate AI quotes, your rating and reasons (not the quotes) are recorded too. We do not send the reason a safety check blocked a request.
Device data: Amplitude also receives your device model, iOS version, language, your IP address (Amplitude uses it to estimate your country and city) and your device's Identifier for Vendor (IDFV), a code Apple gives each app developer for your device, which Amplitude uses as your device ID. Amplitude stores this data in the United States. Risora sends its analytics to its own Amplitude project, separate from our other apps, and we do not combine data across our apps.
What we never send: the text of quotes, anything you type, collection names, file names or photos.
Apple Search Ads: in full analytics, if you installed Risora from an Apple Search Ads ad, Apple tells the app the campaign, ad group, keyword, ad variation and country, and we add these to your analytics profile. For other installs we only record that the install was organic or unknown. This uses Apple's own attribution service (AdServices) and does not require tracking permission. This is skipped in anonymous mode.

Anonymous mode. Amplitude only. Risora uses a random device ID created each time the app launches and held only in memory, never stored on your device, and no user ID. Amplitude's collection of your IP address, city, region, country, DMA, carrier and IDFV is disabled. Only a small fixed list of non-personal event details is sent, each event tagged "anonymous". Nothing in this mode is linked to RevenueCat, Meta or Branch. Firebase Crashlytics (section 3.2) is also off in this mode. Earlier events sent before these changes may remain in Amplitude until we purge them.

Why: to understand which features help people, fix broken flows and measure our marketing.
Legal basis:

3.2 Crash reports (Google Firebase Crashlytics)

Crash reports (Google Firebase Crashlytics). Crash logs and technical details (device model, iOS version, app version, a random installation ID, the app's state when it crashed), to find and fix bugs. In the EEA: your consent, given on the analytics sheet; nothing is sent if you tap "Not now" or turn the switch off. Outside the EEA: our legitimate interest in keeping the app working (Art. 6(1)(f) GDPR). Crash reports follow the "Share usage analytics" switch in both cases.

How Google uses it: Google acts as our processor. See how Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites . Firebase's privacy information: https://firebase.google.com/support/privacy .

3.3 Advertising measurement (Meta and Branch)

When they run: Risora includes the Meta (Facebook) SDK and the Branch SDK. They collect data for attribution only after you tap "Allow" on the iOS tracking prompt. Before you answer, or if you tap "Ask App Not to Track", Meta's automatic event logging and advertiser ID are off, and Branch is limited to opening Risora web links in the app (deep links) without attribution. Anonymous mode (section 3.1) also keeps your activity from being linked to Meta or Branch.
What: once you allow tracking, they report app installs, app opens and in-app purchases, together with device information (model, iOS version, language, time zone), IP address and device identifiers including your device's advertising identifier (IDFA), so we can tell which ads and Risora web links led to an install. Meta and Branch may link your activity in Risora with your activity in other companies' apps and websites for advertising and ad measurement. Invite and share links you send from Risora are ordinary App Store links; Apple tells us only aggregated counts for them. We keep Branch so we can measure future Facebook app-install ads.
Who is responsible: for the Meta SDK, we and Meta Platforms Ireland Limited are joint controllers (Art. 26 GDPR) for collecting your data and sending it to Meta, under the Meta Business Tools Terms and Controller Addendum (https://www.facebook.com/legal/controller_addendum). We are responsible for this notice and for asking for your consent; Meta is responsible for answering your rights requests about what it holds, and you can also contact us. After Meta receives the data it is an independent controller and uses it under the Meta Privacy Policy (https://www.facebook.com/privacy/policy), including to provide measurement, target ads and improve its products. You can control this in your Facebook settings under "Your activity off Meta technologies" and through the iOS tracking setting. Branch acts as our processor.
Why: to measure and improve our advertising.
Legal basis: your consent given through the iOS tracking prompt (Art. 6(1)(a) GDPR; Art. 399 of the Polish Electronic Communications Law). Meta and Branch receive data only after you tap Allow.

3.4 Subscriptions and purchases (Apple and RevenueCat)

What: purchases are made and paid through Apple's App Store; we never receive your payment card or Apple Account details. RevenueCat receives your App Store receipts and transactions (product, price, currency, dates, trial and renewal status), a random app user ID created by RevenueCat, device and app information, and Apple's AdServices attribution token (which tells RevenueCat whether you came from an Apple Search Ads ad). In full analytics we give RevenueCat the device ID Amplitude uses (your IDFV) so subscription revenue appears in our analytics; in anonymous mode we do not.
Why: to unlock Premium, restore purchases, show offers you qualify for and understand subscription revenue.
Legal basis: performance of our contract with you (Art. 6(1)(b), providing what you paid for); legitimate interests for revenue analytics (Art. 6(1)(f)); legal obligation for tax and accounting records (Art. 6(1)(c)).

3.5 Background images

What: Risora downloads its background catalog from our server (api.hopin.it, served through Cloudflare) and the images from our storage at DigitalOcean (Frankfurt, Germany). The catalog request includes the app name, your app language, your device's date and whether you are a subscriber. Like any internet request, both services see your IP address.
Why: to show backgrounds.
Legal basis: performance of our contract with you (Art. 6(1)(b)); our legitimate interest in running and securing the service (Art. 6(1)(f)). api.hopin.it is served through Cloudflare from our own server at DigitalOcean. Image storage is DigitalOcean Spaces in Frankfurt. Access logs are kept only as long as needed to keep the service running and secure, then deleted.

3.6 Contacting us

If you email us (the in-app "Contact us" link opens your email app addressed to [email protected]), we receive your email address, your message and anything you attach.
Why: to answer you. Legal basis: legitimate interests (Art. 6(1)(f)), or contract (Art. 6(1)(b)) where your question is about your purchase.

3.7 Ratings and reviews

Risora may ask whether you are enjoying the app. If you are, it shows Apple's standard rating prompt; reviews go to Apple under Apple's terms. If you are not, it offers to email us. We record only that the prompt was shown and the outcome (in full analytics). The "Rate" option in Settings opens Apple's prompt directly.

3.8 Author search

Tapping an author's name opens a Google search for that name in your browser. Google's privacy policy applies to that search.

3.9 Support ID

The Delete my data screen in Settings (Settings, Privacy & data) shows a Support ID that you can tap to copy. It is the random app user ID RevenueCat created for you and the device ID Amplitude uses in full analytics. Including it in a request to us lets you identify your records at our service providers. It does not reveal who you are.

3.10 Data we receive from others, and whether you must give data

We receive from Apple the Apple Search Ads campaign that led to your install and, through RevenueCat, your subscription status; from Branch and Meta (only if you allowed tracking) the ad or link you came from. We do not receive your name or contact details from them.

You do not have to give us any personal data to use Risora's free features. Server-based features (AI and backgrounds) cannot work without sending the content you choose. Analytics, crash reports and advertising measurement are not required to use the app; in the EEA they run only if you allow them.

4. AI features (optional)

Risora offers optional AI features: writing motivational quotes for you ("Create with AI") and creating AI backgrounds.

4.1 Your permission

Before you first use an AI feature, Risora asks for your permission. If you decline, nothing is sent and the rest of the app works normally. Free users get one free AI request of each kind; subscribers get a daily allowance (AI backgrounds also have a monthly limit).

4.2 What is sent

Risora does not send your name, your favorites, your history or any profile about you to the AI.

4.3 Where it goes

  1. Our AI server, which runs on Cloudflare (Cloudflare, Inc., USA, global network). It checks your subscription status with RevenueCat using your app user ID.
  2. OpenRouter (OpenRouter, Inc., USA), which forwards the request to the AI model host we have selected.
  3. AI model hosts.

4.4 What is kept

4.5 Safety and labelling

Every request with typed text is checked automatically. If a request suggests you may be in crisis, Risora shows links to support services (findahelpline.com) instead of generating content. AI quotes show a visible "AI" label in the app (on the home screen, in favorites and history) and on quote images you share, and AI backgrounds carry a machine-readable "AI-generated" marker in their file data. AI backgrounds are shown in a separate "Create with AI" section. AI quotes are saved to a collection named "AI quotes" by default (you can rename it). AI output can be wrong or unsuitable and is not advice.

Please do not type health information or other sensitive details about yourself or others into the AI features.

4.6 Feedback you choose to send

After an AI quote set you can rate it, pick reasons (such as "too generic") and optionally choose to share the generated quotes with us. Feedback is delivered to our internal support channel, a private Telegram chat (Telegram Messenger, https://telegram.org/privacy) that our team reads. It carries your message, rating, app version, device model, iOS version, language and your country at a coarse level, and no account or device identifiers. It also includes a random per-install feedback key, stored in your device's Keychain, which our server uses only to limit how often feedback can be sent; our staff do not see it and it is not linked to your analytics or purchases. Your rating and reasons (not the quotes) are also recorded in our analytics (section 3.1) when full analytics is on.
Legal basis: your consent, which you give by tapping Send (Art. 6(1)(a)).

4.7 How to avoid sending data to AI

Do not use "Create with AI" or AI backgrounds, or decline the permission prompt. Nothing is sent to AI providers otherwise.

Legal basis for AI processing: your consent, given in the app before first use (Art. 6(1)(a) GDPR); our legitimate interest in preventing abuse and applying usage limits (Art. 6(1)(f)); and performance of our contract with you for subscribers' allowances (Art. 6(1)(b)). You can withdraw your consent by not using the AI features.

5. Who we share data with

We do not sell your personal information. Apart from Meta, which receives data only if you allow tracking (section 3.3), and the independent services marked below, these providers process data on our behalf:

ProviderPurposeDataLocationPrivacy policy
Amplitude, Inc.Usage analyticsUsage events, purchase values, IDFV (device ID), IP address, approximate location, device info, Search Ads attribution (full analytics); limited events only in anonymous modeUnited Stateshttps://amplitude.com/privacy
Google (Firebase Crashlytics)Crash reportsCrash data, installation ID, device infoUSA and other Google locationshttps://firebase.google.com/support/privacy ; sub-processors https://firebase.google.com/terms/subprocessors
Meta Platforms Ireland Limited and Meta Platforms, Inc. (Facebook SDK), joint controller for collection, then independent controllerAdvertising measurementInstall, app and purchase events, device info, device identifiers, IP address, advertising ID; only after you allow trackingIreland and USAhttps://www.facebook.com/privacy/policy
Branch Metrics, Inc.Link handling and install attributionDevice info, device identifiers, IP address, link clicks, installs and opens; attribution and advertising ID only after you allow trackingUSAhttps://legal.branch.io/saas/privacy-policy/ ; sub-processors https://legal.branch.io/saas/subprocessor-list/
RevenueCat, Inc.Subscription managementApp user ID, IDFV (full analytics only), App Store transactions, device info, Apple AdServices attribution tokenUSAhttps://www.revenuecat.com/privacy ; https://www.revenuecat.com/dpa
AppleApp Store purchases, Search Ads attribution, iCloud sync, ratingsAs described in sections 2 and 3Worldwidehttps://www.apple.com/legal/privacy/
Cloudflare, Inc.Hosting our AI server; delivering api.hopin.itAI requests in transit, IP address, technical logs, catalog requestsGlobal networkhttps://www.cloudflare.com/privacypolicy/ ; https://www.cloudflare.com/cloudflare-customer-dpa/
DigitalOcean, LLCOur server behind api.hopin.it (catalog) and background image storageIP address, app language, subscriber flagSpaces: Germany (Frankfurt); server: DigitalOcean data centrehttps://www.digitalocean.com/legal/privacy-policy
OpenRouter, Inc.Routing AI requestsAI requests in transitUSAhttps://openrouter.ai/privacy
Amazon Web Services, Google Cloud, Microsoft Azure, Mistral AIHosting AI models (Mistral AI also writes quotes when other hosts are overloaded)AI request text or image promptsEU or USA, and for AI backgrounds any Google Cloud region (section 4.3)https://aws.amazon.com/privacy/ , https://cloud.google.com/terms/cloud-privacy-notice , https://www.microsoft.com/privacy/privacystatement , https://legal.mistral.ai/
Zoho Corporation (Zoho Mail)Support emailYour email address, message and attachmentsEU (Zoho EU data centre, zoho.eu)https://www.zoho.com/privacy.html
Telegram (Telegram Messenger)Our internal support channel: receiving AI feedback you choose to sendFeedback you choose to sendTelegram's servershttps://telegram.org/privacy

Each of these providers is bound by a contract or by its published terms to protect your data at least as well as this policy describes and to use it only for the purposes listed here. Meta and Branch are also bound by their own privacy policies and by their terms with us.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case this policy continues to apply.

When you share a quote to Instagram, Facebook, X or another app, you choose what to send and that app's own privacy policy applies.

6. International transfers

Some of our providers are in the United States or other countries outside the European Economic Area. The safeguard we rely on for each is:

You can get a copy of the clauses by emailing [email protected].

7. How long we keep data

DataHow long
On-device dataUntil you delete it with Delete my data or delete the app
iCloud-synced favorites, history, collections and streakIn your iCloud account until you delete them with Delete my data (section 10)
Amplitude analytics24 months from when they are received, then deleted automatically
Crashlytics crash reports90 days
Meta and Branch attribution dataUnder each provider's own retention policy
Subscription records (RevenueCat)For as long as we hold an account with RevenueCat and up to six years after, and as tax and accounting law requires
AI request textNot stored by our server; not stored by text model hosts (zero data retention)
AI usage counters (hashed ID)Daily: 48 hours; monthly: 40 days; free-use counter: 24 months
IP address on our AI serverUp to 48 hours
AI server technical logs (no text)Up to 7 days
Background catalog and image server logsOnly as long as needed to keep the service running and secure, then deleted
AI feedback you sendOnly as long as needed to review it and improve the app, then deleted
Support emailsAs long as needed to handle your request and any follow-up, then deleted

When we delete data from Crashlytics, it leaves live and backup systems within about 180 days.

8. Security

We use encrypted connections (HTTPS) for all data the app sends, keep on-device data in the app's protected storage, and limit access to our provider accounts to staff who need it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

9. Your rights (EU, EEA, UK and similar laws)

You have the right to:

Your right to object. Where we rely on legitimate interests (anonymous analytics, crash reports, abuse prevention, revenue analytics), you can object at any time by emailing [email protected], and for analytics by turning off Settings, Share usage analytics. We will stop unless we have compelling legitimate grounds. You can always object to use of your data for advertising measurement.

Automated decisions. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our automatic safety check only decides whether an AI request is answered and may pause AI features for up to a day; if you think this happened by mistake, email us.

To use these rights, email us (section 15). We will reply within one month. Because Risora has no accounts, see section 10 for how we find your data.

You also have the right to complain to a data protection authority. Our lead authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, https://uodo.gov.pl. You can also complain to the authority in the country where you live or work. In the UK, this is the Information Commissioner's Office (https://ico.org.uk).

10. Deleting your data (no account needed)

We keep no user profile or content on our own servers, only the anti-abuse and usage counters in section 4.4 (daily counters up to 48 hours, monthly counters up to 40 days, and 24 months for the free-AI usage counter) that expire on their own, so there is nothing for us to delete there. Your data is on your device, in your iCloud account (if iCloud is on) and, as described in sections 3 to 5, with our service providers.

  1. In the app (recommended): open Risora, go to Settings, Privacy & data, and tap Delete my data. This wipes everything Risora stores on the device: favorites, history, own quotes, collections, photos, AI creations, settings, the app group storage, Keychain items, widgets and Apple Watch data. It also removes your iCloud key-value sync data, resets the analytics ID, and returns the app to onboarding. Do this before deleting the app.
  2. Deleting the app removes the on-device data but not the data Risora syncs through iCloud key-value storage, which stays in your iCloud account. Use Delete my data first. We cannot access or delete data in your iCloud account. Delete the app on your Apple Watch too if it is installed separately.
  3. Subscriptions are managed by Apple and are not cancelled by Delete my data or by deleting the app (section 11).
  4. Copies held by third parties (Amplitude, Crashlytics, Meta, Branch, RevenueCat): on the Delete my data screen, tap your Support ID to copy it, and email it to [email protected] with your request. The Support ID lets you identify your subscription and analytics records. We pass the request to these providers and tell you if we cannot match any data to you.
  5. Analytics going forward: turn off Share usage analytics in Settings (in the EEA, answer Not now on the analytics screen). To stop Meta and Branch, tap "Ask App Not to Track" or turn off tracking for Risora in iOS Settings, Privacy & Security, Tracking.

11. Subscriptions through Apple

Risora's subscriptions are sold and billed by Apple. Manage or cancel them in iOS Settings, your name, Subscriptions. Refunds are handled by Apple at https://reportaproblem.apple.com. Deleting the app does not cancel a subscription.

12. Children

Risora is intended for people aged 16 and over in the EEA and 13 and over in the UK and elsewhere. If you are younger, do not allow tracking or analytics or use the AI features without a parent's permission. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it. Risora's App Store age rating is 13+.

13. US privacy rights (California and other states)

Categories we collect (in the last 12 months): identifiers (device identifiers such as the IDFV, random app and installation IDs, IP address, and the advertising ID if you allow tracking); commercial information (subscription purchases, including price and currency); internet or other electronic network activity (app usage and crash data); approximate geolocation (from IP address); content you type into AI features (processed to give you a result, not stored). Sources: you, your device, Apple (Search Ads attribution) and RevenueCat. Purposes and recipients: as described in sections 3 to 5. We do not create profiles about you beyond simple usage summaries.

Advertising measurement and your choices. We do not sell your personal information for money. If you allow tracking in the iOS prompt, Meta and Branch receive your activity in Risora to measure our ads. Some US state laws call this "sharing" or "targeted advertising". HopIn.IT is a small company based in Poland and, as far as we have assessed, the thresholds of those laws do not currently apply to us. You still get the same choices wherever you live. To stop this, tap "Ask App Not to Track" in the iOS prompt, or turn off tracking for Risora in iOS Settings, Privacy & Security, Tracking. You can also email [email protected] with the subject "Privacy choices". We do not use or disclose sensitive personal information to infer characteristics about you.

Your rights: to know what we collect, to access, delete and correct it, to opt out of advertising measurement (see above), and to limit use of sensitive personal information. Email us (section 15); you may use an authorized agent. We verify requests using the Support ID described in section 10. We answer within 45 days.

Appeals. If we decline your request, you can appeal by replying to our answer with the subject "Appeal". We will answer within 60 days. If you are not satisfied, you can contact your state attorney general.

Non-discrimination: we will not deny you service, charge a different price or give you a different quality of service because you exercised your privacy rights.

Do Not Track. Our app does not respond to web browser Do Not Track signals, because it is an app, not a website. You control tracking in iOS Settings, Privacy & Security, Tracking, and analytics in the app's Settings (section 3.1).

14. Changes to this policy

If we change this policy, we will update the effective date above and, for significant changes, tell you in the app or in the App Store release notes before the change takes effect.

15. Contact

HopIn.IT sp. z o.o., ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland
Email: [email protected]