Privacy Policy

Rizur helps people track expenses and income. To do that, Rizur may collect or process account details, transaction records, uploaded files, and connected sync data.

This policy applies to the mobile app, marketing website, and support workflows operated by Rizur.

• Name, email address, profile photo, and account identifiers from sign-in providers such as Google or Apple.
• Expense and income records, transaction categories, vendor or merchant names, notes, remarks, dates, payment methods, and currencies.
• Receipt images and supporting files that you choose for AI-assisted extraction. Receipt images used for extraction are deleted after processing; attachments you intentionally save with a transaction remain until you remove them or delete your account.
• Voice recordings and AI-extracted transaction details when you use voice entry. Voice recordings are deleted after processing.
• Push notification tokens so the app can send reminders, summaries, or processing updates.
• Optional transaction-related email data when you connect Gmail. Rizur requests read-only Gmail access and cannot send, delete, or modify your email.
• App and device diagnostic data, crash information, and basic technical metadata when crash reporting or reliability tooling is enabled.

• To create and maintain your account and keep you signed in.
• To store, organize, search, and display your financial records across devices.
• To process receipt images, voice recordings, and imported messages into draft transaction details.
• To power reminders, notifications, sync jobs, fraud-prevention checks, and customer support.
• To diagnose crashes, improve reliability, and protect the service from misuse.

If you upload a receipt image, invoice image, supporting document, or voice recording, Rizur may send that content to AI or OCR providers so the service can extract merchant names, dates, amounts, categories, and other transaction details.

AI output may be incomplete or incorrect. You should review every extracted transaction before relying on it.

Depending on the features you use, data may be processed by third parties that help operate Rizur, such as:

• Google or Apple for authentication and profile data provided during sign-in.
• Firebase or similar infrastructure for authentication, messaging, or crash reporting.
• Cloud hosting and storage providers used to store app data, receipts, and attachments.
• Email providers or connected inbox services when you enable transaction sync.
• AI, OCR, or document-processing providers used to extract details from receipts, files, or audio.

Gmail sync is optional. If you enable it, Rizur uses read-only access and matching rules you configure to look for supported transaction alerts and merchant receipts.

You can preview or change matching rules, pause synchronization, or disconnect Gmail. Disconnecting prevents future access through the revoked connection.

Rizur stores locally available app data in an encrypted database on your device. Account and synchronized transaction data may also be stored on backend systems managed for Rizur. Attachments you intentionally save may be stored in managed cloud storage. Voice recordings and receipt images used for extraction are deleted after processing.

Reasonable technical and organizational controls are used to protect data, but no internet service can promise absolute security.

You can schedule account deletion from inside the app. After an identity check, you are signed out and have a 30-day grace period during which signing in again lets you cancel the request. You can also contact support@rizur.app if you cannot access the in-app flow.

When a deletion request is completed, Rizur is expected to remove your account profile, stored transaction records, uploaded receipts, voice recordings, notification tokens, and connected sync data, except where limited retention is required by law, fraud prevention, dispute handling, security logging, or backup recovery processes.

For privacy questions or support, contact support@rizur.app.