Risc.Ai privacy policy
Risc.Ai is an app where a child draws, says what they drew and gets a picture made by artificial intelligence. This page explains what data the app uses, why, and how to ask for deletion.
Who the app is for
The app is made for children to use with a responsible adult. The account is created by the adult, who gives consent for the use of the data described here. We ask for the minimum: no age, phone number, address or photo of the child.
Data we keep on the server
- Account: email and password. The child's nickname stays on the phone and is not sent to our servers. The password is stored securely by the sign-in service; we can't see it.
- Coins and purchases: balance, coins used, purchases made through the app store and the subscription, if any.
- Reports: when someone taps "Something odd in this picture?", we keep a small copy of the picture, the text that was asked for and the account, for review.
- Contact us: when an adult sends a message from the app (Settings › For parents › Contact us), we keep the message, its type (question, suggestion or problem), the reply email, the account, the app version, the phone system and the language, so we can answer. Nothing about the child is sent.
- Technical data: error logs and a check that requests come from the original app, used for security and to prevent abuse.
Data that only passes through the server
To make a picture, the app sends the drawing, the typed or spoken text and the chosen style. They are used only to make the picture and are not stored on our server. The finished picture goes back to the phone.
Before the text goes to the artificial intelligence, the server removes any email, phone number, address, ID numbers, school name and last name the child may have typed or said. Even so, we ask that children not share personal details in the drawing or the text.
The text also goes through an automatic filter for inappropriate content before the picture: swear words are removed, requests such as blood, weapons or cigarettes become a child-friendly version, and requests for sexual content, explicit violence, self-harm or hate are not drawn (no coin is used). This filter is run by a text artificial intelligence model that receives only the text, already without personal details, and we don't keep the text or its result. Blocked requests are noted only on the phone itself, for parents to see in Settings, behind the parent gate ("Blocked requests"): the text, the reason and the date, for up to 30 days. This list is not sent to our servers and can be cleared at any time.
The artificial intelligence companies receive the drawing and the text only to make the picture. They may keep the request for a limited time, under their own policies, for safety and abuse prevention.
What stays on the phone
The gallery, story books, coloring pages and preferences such as the language stay only on the device. Uninstalling the app deletes them.
Who we share data with
We use contracted companies to run the service: cloud hosting and database, sign-in, artificial intelligence models that make the pictures, account emails (confirmation, password codes and Contact us messages) and payments through the app store. They receive only what each task needs and follow their own privacy policies. Some of these services process data outside Brazil, in other countries such as the United States. When that happens, the data is used only to make the picture, run the account or record the purchase.
We don't sell data, show ads or use tracking for advertising.
Microphone and camera
The microphone is used only when someone taps the talk button, to turn speech into text with the phone's own speech recognition. The camera and photos are used only when someone chooses to take or import a picture of a drawing.
Sharing
Sharing a picture is behind a question for grown-ups. The picture goes to the app that was chosen and follows that app's policy.
How long we keep data
Account data is kept while the account exists. Reports are kept until the review is done. Contact us messages are kept while the account exists and are deleted with it. Purchase records are kept for as long as the law requires, without name or email.
Your rights and deleting the account
The responsible adult can ask to access, correct or delete the data at any time. To delete the account and data:
- in the app: Settings › For parents › Delete account and data;
- without the app: see how to ask for deletion.
Changes
If this policy changes, the date at the top is updated.
Contact
Privacy questions: washingtondacosta@gmail.com