Risal ("we", "us") is a work platform for tasks, development and server monitoring, operated by ZiyaraGo Technologies. This policy explains what data the Risal apps and website collect, how we use it, and who we share it with. The apps talk to our backend at api.risal.io.
Data we collect
- Account data — your email address (for sign-in, password reset, and notifications). If you sign in with Google or Apple, we receive your email and basic profile from them.
- Task content — the tasks you create: titles, descriptions, dates, estimates, points, and the projects/sprints you organize them into.
- Voice / audio — when you use voice input, your microphone audio is turned into text to create tasks.
- Text you submit for AI parsing — when you use the "AI parse" feature, the text you provide is processed to extract tasks.
- Push token — if you enable notifications, a device push token (Firebase Cloud Messaging) so we can deliver reminders.
- Device locale & time zone — to interpret dates and localize the interface.
How we use it
We use this data solely to provide the service: store and sync your tasks, authenticate you, send reminders you asked for, and convert your text/voice into tasks. We do not use your account or task data for advertising, we do not sell it, and we do not use it to profile you across other apps.
Website analytics & cookies
This applies to the marketing website at risal.io only — it is separate from the data inside your account. To understand how visitors use the site and improve it, we use Yandex Metrica, a web-analytics service. It sets cookies and collects standard usage data: pages viewed, referring source, approximate location (from IP, not stored as precise location), device/browser type, and on-page interactions.
Metrica's Session Replay (Webvisor) is enabled: it records anonymized interactions on public marketing pages (clicks, scrolling, mouse movement, page navigation) to help us spot usability problems. It does not capture your account, nor anything you type into the app — the app lives on a separate domain (app.risal.io) that is not part of this analytics.
You can opt out at any time via the Yandex Metrica opt-out, by blocking cookies in your browser, or with «Do Not Track». The website does not run advertising trackers.
Third-party AI services
The optional AI parse and voice-to-tasks features send the text you enter (or your voice transcript) through our server to a third-party AI provider purely to turn it into tasks. The providers we use are OpenAI, Anthropic and Google Gemini.
Only that text is sent — not your account data or other tasks. Inside the app we ask for your explicit permission, naming these providers, before any text is sent; if you decline, nothing is sent. These providers process the text on our behalf and are required to protect it to a standard equal to this policy and not to use it to train their models beyond providing the response.
Other processors
- Google Firebase Cloud Messaging — delivery of push notifications.
- Yandex Metrica — analytics for the
risal.iomarketing website only (see above). - Our backend (
api.risal.io) — storage of your account and tasks.
Account deletion & retention
You can delete your account at any time inside the app (Profile → Delete account). This permanently removes your account and associated data from our servers. We keep your data only while your account is active, except where law requires retention.
Your rights
You can access, export, or delete your data. For any privacy request, contact us at the address below.
Children
Risal is not directed to children under 13 and we do not knowingly collect data from them.
Contact
Questions about this policy: [email protected]