Privacy Policy

Last Updated: November 10, 2026 · Applies to Risvo version 2.0.0

Overview

The short version: Your data stays on your device. The developer does not collect, store, see, or sell your personal information — because none of it ever leaves your device.

Risvo was previously called Recur. It is the same app, the same developer, and the same privacy promise.

This policy explains what data exists in the Risvo mobile application, where it lives, and what rights you have over it. For information about this website, see the Website section below.

Who I Am

Risvo is built and maintained by an independent individual developer — not a company, startup, or organization of any kind. When this policy says "I", "me", or "the developer", it refers to that one person. When it says "we" or "our", it means the same individual.

For privacy law purposes: the developer acts as the data controller for any information associated with app support (i.e., emails you send to [email protected]). For the app itself, there is effectively no processing of personal data — your app data never reaches the developer.

Contact: [email protected]

Data Collection

What Is Not Collected

The developer does not collect:

• Personal information (name, email address, phone number, date of birth)
• Account credentials of any kind (no accounts exist)
• Usage analytics, session data, or behavioral tracking
• Advertising identifiers (GAID or otherwise)
• Location data (coarse or precise)
• Device fingerprints or hardware identifiers
• Crash reports or diagnostic data sent to the developer
• Any information about the subscriptions, loans, or cards you track

What Stays On Your Device

All data you enter in Risvo is stored locally on your device only, in a local on-device database:

• Subscription details (names, amounts, billing dates)
• Loan and EMI information
• Credit card tracking data
• Payment reminders and notification settings
• Categories, profiles, and payment methods
• App preferences and settings

This data is never transmitted to the developer or any server the developer controls.

Optional Features

Backup and Restore (Local)

Risvo can export your data to a JSON backup file. This is free for everyone and is entirely your choice.

• What is in the file: Your subscriptions, loans, cards, categories, profiles, payment methods, and settings.
• Where it goes: You pick. The file is saved on your device or handed to the Android share sheet, where you choose the destination (your own cloud drive, email, a computer). The developer is never a destination.
• Protection: The file is encrypted with AES-256-CBC with HMAC-SHA256 integrity checks. You can optionally add a password, which applies an additional layer using PBKDF2-SHA256 key derivation. If you forget the password, the backup cannot be recovered.
• Restore: Choose a backup file in Settings > Backups. The file is read on your device.

Cloud backup and Google Sign-In are not part of Risvo 2.0. Risvo does not connect to Google Drive or any Google account.

App Lock / Biometric Authentication

Risvo includes an optional app lock that uses your device's fingerprint, face recognition, or screen lock through Android's own authentication prompt. When enabled:

• Authentication is handled entirely by Android. Risvo never accesses, stores, or transmits biometric data.
• Risvo only receives a success or failure result.
• Nothing about this feature leaves your device.

You can enable or disable app lock at any time in Settings.

In-App Purchases

Risvo offers a one-time premium purchase through Google Play. All payment processing is handled entirely by Google. The developer receives:

• A confirmation signal that a valid purchase exists (used to unlock premium features on your device)
• No payment details, billing address, or credit card information of any kind

Permissions

Risvo requests only the permissions required for its features:

Risvo does not request access to your contacts, location, camera, microphone, or storage. Biometric authentication is handled by Android's own prompt.

Network Requests

Risvo makes network requests only for these specific purposes:

• Exchange rates: Currency conversion data is fetched from free public APIs (exchangerate-api.com, fawazahmed0 GitHub API, frankfurter.app). Only a currency code (e.g., "USD") is sent — no personal data, no device identifiers, no account information, no API keys linked to you.
• In-app purchases: Handled entirely by Google Play's infrastructure.
• App updates: The app periodically checks for updates via the Google Play in-app update API. This is handled entirely by Google Play's infrastructure and transmits no personal data from the app.
• In-app review: Risvo may occasionally prompt you to review the app on Google Play. To determine when to show this prompt, the app tracks basic engagement metrics locally on your device (such as launch count and number of items added). This data never leaves your device and is not shared with the developer. The review dialog itself is provided by Google.

There is no telemetry, no crash reporting, no heartbeat, no background analytics, and no other outbound network activity beyond the features described above.

Data Sharing

The developer does not share your data with anyone.

• No third-party analytics (no Firebase Analytics, no Mixpanel, no Amplitude)
• No advertising networks of any kind
• No data brokers
• No affiliate tracking
• No monetization of user data

The only third-party data flows are exchange rate lookups (currency codes only, to public APIs) and Google Play for updates and purchases.

Data Export and Deletion

Export Your Data

You can export all your Risvo data at any time:

• Go to Settings > Backups > Export
• A JSON file with all your information is saved to your device or shared where you choose
• Optionally protect it with a password
• This feature is available to all users, free and premium

Delete Your Data

To permanently delete all Risvo data:

• Uninstall the app — this removes all locally stored data from your device
• Or delete individual subscriptions, loans, cards, and other items inside the app

Since all data is stored only on your device, uninstalling is complete deletion. Backup files you exported are copies you control; delete them wherever you saved them. The developer cannot delete them on your behalf.

Your Rights

Even though the developer does not collect personal data through the app, your rights under applicable privacy laws still apply to any personal data that exists (such as an email you send to the support address).

GDPR (European Economic Area and UK)

If you are in the EEA or UK, you have the right to:

• Access — request a copy of any personal data the developer holds about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — request that processing be limited.
• Objection — object to processing.
• Portability — receive your data in a portable format.

Legal basis for processing: The developer only processes personal data when you initiate contact (e.g., sending a support email). The legal basis is legitimate interest in responding to your inquiry, or your explicit consent in submitting that communication.

Because the app itself collects no personal data, there is no ongoing processing to restrict, object to, or port. To exercise any of these rights, email [email protected].

Data retention: Support emails are retained only as long as necessary to resolve your inquiry, or as required by law. You may request deletion of your correspondence at any time by emailing [email protected].

International data transfers: The app does not transfer personal data outside the EEA. Exchange rate requests send only a currency code (not personal data) to public APIs that may be hosted outside the EEA.

You also have the right to lodge a complaint with your local data protection authority (DPA).

CCPA / CPRA (California, USA)

If you are a California resident, you have the right to:

• Know what personal information is collected about you.
• Delete personal information the business holds about you.
• Correct inaccurate personal information the business holds about you.
• Opt out of the sale of your personal information.
• Non-discrimination — you will not receive different service for exercising these rights.

The developer does not sell personal information. Because the app collects no personal data, there is effectively nothing to disclose, delete via request, or opt out of. To make a verifiable request under CCPA, email [email protected].

Other Jurisdictions

The developer respects privacy rights under applicable laws in all jurisdictions. If you have a privacy request not covered above, email [email protected] and the developer will respond in good faith.

Children's Privacy (COPPA and Similar Laws)

Risvo is a personal finance management tool intended for users who can enter into contracts and manage financial obligations — generally adults or older teenagers.

The developer does not knowingly collect personal information from children under the age of 13 (or under the applicable age threshold in your jurisdiction). The app itself collects no data from anyone, but if you believe a child has submitted personal information via a support email or other means, contact [email protected] and the developer will delete it promptly.

Parents and guardians are encouraged to supervise device usage. Since all Risvo data is stored locally on the device, parental controls at the device or OS level are the most effective tool.

Data Security

Because the app stores data locally on your device, the security of your Risvo data is largely determined by your device's security (screen lock, encryption, OS version). The developer has no servers storing your app data and therefore no server-side security posture to describe.

Backup files are encrypted using AES-256-CBC with HMAC-SHA256 integrity verification. If you set a backup password, an additional layer is applied using PBKDF2-SHA256 key derivation. Where you store the file afterward is up to you.

Changes to This Policy

The developer may update this policy occasionally. Changes will be posted here with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

The core commitment — no data collection, no tracking, no selling of user information — will not change.

Governing Law

This privacy policy is subject to applicable privacy and consumer protection laws of your jurisdiction. Nothing in this policy limits rights you may have under the mandatory privacy laws of the country or region where you reside.

Third-Party Services and Trademarks

This privacy policy references third-party services and platforms. Google and Google Play are trademarks of Alphabet Inc. All other product and company names mentioned in this policy are trademarks or registered trademarks of their respective owners. The mention of these services is for descriptive purposes only and does not imply any affiliation with, endorsement by, or sponsorship by their respective owners.

Risvo is an independent app built by an independent individual developer and is not affiliated with any of the services mentioned in this policy.

Website

This website (risvo.ajxlabs.dev) does not use cookies, analytics, or tracking scripts. The website stores your theme preference (dark/light mode) and language preference in your browser's localStorage. No data is transmitted to any server. No cookies are set.

Contact

Questions or concerns about this privacy policy?

Email: [email protected]

The developer will respond to privacy inquiries as promptly as possible. You can also visit our Support & FAQ page for common questions about data privacy and app features.

Also see our Terms of Service for usage terms and liability information.

Summary

This privacy policy is effective as of November 10, 2026, for Risvo version 2.0.0.