Effective date: July 18, 2026
1. Who we are and scope
Riso is operated by Vibeler Inc. ("Vibeler," "we," "us," or "our"), a Canadian federal corporation located in Ontario, Canada. This Privacy Policy applies to Riso, riso.app, support communications, and related services that link to this Policy.
For privacy-law purposes, Vibeler is the organization responsible for personal information we control. Because Riso is designed to run primarily on your device, much of the information described below may be processed locally without being received by Vibeler during ordinary app use.
This Policy does not apply to Apple's App Store, iOS, device settings, email providers, or other third-party services that operate under their own privacy notices.
2. Information Riso handles
The categories below describe what Riso may collect, store, generate, or process depending on the features and permissions you use.
Name, optional email if account features are used, age, gender selection, whether you identify as a morning person, wake pain points, alarm count, trust level, wake-delay frequency, night and wake feelings, alert-latency answers, actual and target wake times, target bedtime, sleep goal, accountability preference, first-win ritual, commitment period, referral or attribution source, onboarding progress, and preference settings.
User ID, email address, account name, account status, sign-in and logout state, authentication and refresh tokens stored in iOS Keychain, account creation timestamps, server-side account records, sync records, restore records, subscription entitlement references, support records, and account-deletion request records if account, sync, restore, or backend-backed features are used.
Alarm times, repeat days, labels, sound choices, mission selections, mission order, protection level, wake-check settings, recovery settings, target barcode identifiers, barcode labels and redacted display values, object-hunt selections, photo mission reference images, and local mission-readiness metadata.
Wake event dates, scheduled alarm times, actual wake times, mission type, whether a mission completed, streak and milestone progress, local proof measurements, feedback, wake-session state, pending wake events, and alarm recovery records.
Live camera frames used for selected missions, saved reference photos for photo missions, smile, body movement, bed-making, sky, object, and barcode proof signals, motion/step signals for movement missions, and derived values used to determine whether a mission appears complete.
Sleep sessions, bedtime and wake time, duration, sleep goal, quality score, estimated insights, sleep sound events such as snore, breathing, cough, gasp, talking, noise, and silence, optional short sleep audio clips, clip filenames, waveform peaks, exercise mission completions, movement counts, wake consistency, streaks, and active night-session recovery state.
App version and build, device model, system name/version, simulator status for diagnostics, notification identifiers, alarm delivery status, audio runtime status, device volume level in diagnostics, local app logs, alarm audit records, audio evidence records, widget mirror data such as name, streak, avatar level, next alarm time/id/label, sleep goal, recent sleep duration, average sleep hours, and timestamps.
Subscription product identifiers, premium entitlement state, trial eligibility, renewal status, expiration dates, app marketplace, and restore status. Apple, Google, or another billing provider may process payments and provide purchase-related status to the app.
Your email address, message contents, attachments, screenshots, diagnostic exports, and any information you choose to send us.
Basic technical information that browsers, hosting providers, and font or asset providers process when you visit the website, such as IP address, user agent, requested URL, referrer, and timestamps. We do not need free-form search queries for the static site to work.
3. Permissions
Riso asks for permissions only when needed for features you choose. Notifications and alarm permissions are used to schedule alarms, wake checks, reminders, recovery notifications, badges, and sound. Camera permission is used for photo, barcode, object, smile, bed, sky, and body-movement missions. Motion permission is used for shake and walking missions and optional sleep-tracking context. Microphone permission is used for optional sleep sound analysis that may continue while the screen is locked or while you use another app. Current iOS builds are not designed to write data to Apple Health or HealthKit unless a later version clearly discloses that behavior and asks for the required permission. iOS may show indicators when microphone or camera access is active.
You can change permissions in iOS Settings. If you deny or revoke permissions, some missions or sleep features may not work, and Riso may offer a fallback where available.
4. How Riso uses information
We use information to provide, operate, secure, troubleshoot, maintain, and improve Riso; schedule and trigger alarms; run missions and wake checks; maintain streaks, milestones, widgets, and journey progress; save preferences; provide sleep history and insights; process subscriptions; respond to support requests; comply with law; enforce terms; prevent misuse; and communicate service or legal updates.
Riso may use automated analysis to help decide whether mission proof appears valid, whether sleep audio contains certain events, and whether a wake or sleep record should be shown. These outputs are estimates and can be inaccurate. They should not be used as medical, safety, employment, legal, insurance, credit, housing, or emergency determinations.
We do not use live camera frames, mission photos, sleep audio clips, voice data, face/smile signals, body-movement signals, or support attachments to train general-purpose AI models unless we first provide a clear disclosure and obtain any consent required by law. We may use aggregated, de-identified, synthetic, or otherwise non-personal information for product improvement, research, testing, and security where permitted by law.
Where privacy laws require a legal basis, we rely on one or more of consent, performance of a contract with you, legitimate interests in operating and protecting Riso, compliance with legal obligations, protection of vital interests or safety where applicable, and your direction when you choose to share information with us or another destination.
5. Local-first storage
As currently designed, core Riso data is primarily stored locally using app storage, secure keychain storage, UserDefaults, App Group storage for widgets, local files, and local databases. Ordinary use does not require Vibeler to receive your mission photos, live camera frames, raw barcode values, sleep audio clips, or sleep history.
Photo mission targets are stored as local image files and enrollment metadata. Barcode targets in current builds are stored as a verification hash, label, type, redacted display value, and creation date rather than raw barcode values. Optional sleep audio clips are stored locally, excluded from device backup where the app can set that flag, and are designed to auto-delete after about seven days or when storage exceeds the app's clip limit. You can delete recordings or sleep data inside the app.
Riso's camera, image, face/smile, body-movement, and audio proof features are designed to verify wake-up tasks and sleep cues, not to identify you, authenticate your identity, recognize you as the same person across contexts, or create a biometric identity profile. Riso does not use face recognition, identity matching, cross-context tracking, or advertising profiles based on your face, body, voice, sleep audio, mission photos, or camera frames. Depending on where you live and how a feature is used, some of this information may be considered sensitive personal information; we treat it as potentially sensitive even when it stays local.
6. Account, sync, and backend data
Riso can be used without an account where the app supports that mode. If you create an account, sign in, sync across devices, restore account or premium state, use accountability or support features that depend on backend systems, or use another backend-backed feature, Vibeler may process server-side account data such as user ID, email address, name or profile details, account status, sign-in/session records, subscription entitlement references, device and app metadata, timestamps, synced preferences or progress records, support records, and account-deletion request records.
Server-side account data is used to authenticate you, restore access, keep account-enabled settings or progress available where sync is offered, process deletion or export requests, provide support, troubleshoot reliability issues, maintain security, prevent abuse, comply with law, enforce our Terms, and operate Vibeler's business. Vibeler personnel, contractors, and service providers may access account or support records only as reasonably needed for support, security, legal/compliance, billing, subscription, abuse-prevention, debugging, or service operations.
If you delete your account or request deletion, we will delete or de-identify server-side account data within a reasonable period, subject to backups, legal holds, fraud and security records, transaction and subscription records, unresolved disputes, records needed to protect Vibeler or users, and records we must or may retain by law. Deleting local app data, uninstalling Riso, or clearing device storage does not automatically delete information already stored in device backups, Apple systems, Google systems if applicable, email providers, support tools, or other destinations, and it does not automatically cancel app-store subscriptions.
7. When information may leave your device
Information may leave your device in these situations:
- You create an account, sign in, use sync, restore account or subscription state, or use backend-backed features.
- You contact support, send an email, share screenshots, attach files, or export and share alarm diagnostics.
- Apple, Google, or another app marketplace processes downloads, purchases, subscriptions, restores, refunds, trials, entitlement status, crash reports if enabled by your platform settings, and platform services.
- Your device, operating system, backups, iCloud settings, email provider, or sharing destination processes information according to your settings and those providers' terms.
- The website loads pages, fonts, images, scripts, or other static assets through hosting and asset providers; those providers may receive standard browser technical data.
- We use service providers for hosting, email, support, security, compliance, or business operations, subject to appropriate contractual safeguards.
- We believe disclosure is required or permitted by law, legal process, safety, fraud prevention, rights enforcement, or protection of Vibeler, users, or others.
- Information is transferred as part of a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction.
We may create or use aggregated, de-identified, or otherwise non-personal information for analytics, research, product improvement, security, and business purposes, where permitted by law. We do not try to re-identify de-identified information except where allowed by law for testing, security, or compliance.
8. Service providers, SDKs, and third-party code
Riso and the website may use service providers and third-party code for app distribution, in-app purchases, entitlement handling, hosting, support, email, security, compliance, diagnostics, static assets, fonts, and locally bundled animations. Current app code is not built around advertising SDKs or third-party behavioral-advertising trackers.
Where Vibeler shares personal information with service providers, we use contractual, technical, and organizational safeguards appropriate to the information and require providers to handle personal information only for permitted purposes and with protections consistent with this Policy and applicable law. Third-party platforms such as Apple, Google, device operating systems, email providers, and app marketplaces may process information under their own terms and privacy notices.
9. Diagnostics and support exports
Riso can create a user-initiated alarm diagnostics export. Depending on app state, this file may include app version/build, device model and system version, alarm readiness status, alarm schedules, wake-session ledger entries, pending and delivered notification identifiers, notification titles/bodies/user info, delivery contracts, alarm surface status, audio runtime status, audit records, pending wake events, and recent audio evidence records. The export is saved to a temporary file and shared only if you choose a destination in the system share sheet.
Riso may keep local logs, audit records, and audio evidence records to help the app recover from alarm and audio edge cases. These records are not routinely uploaded to Vibeler. If you send diagnostics to us, we use them to troubleshoot, debug reliability issues, investigate support requests, improve product safety, and protect users and Vibeler. Diagnostics can be technical and may contain alarm labels, times, identifiers, and other personal information, so review them before sharing when possible.
10. Sleep audio and recordings
Sleep sound analysis is optional. When enabled, Riso can use the microphone during a sleep session to detect sound cues such as snoring, breathing, coughing, gasping, sleep talking, environmental noise, or silence. If you also enable optional audio clips, Riso may save short clips for certain detected events. Clips are meant to help you review your night, not to diagnose a condition.
Do not enable sleep audio or clips unless it is lawful and appropriate in your setting. If someone else may be recorded, you are responsible for telling them and getting any consent required by law. Do not use Riso to record people secretly.
11. Marketing and communications
We may send service, support, legal, safety, billing, or account-related communications where appropriate. We will send marketing emails only with consent where required and will provide an unsubscribe mechanism where required by Canada's anti-spam rules and other applicable laws. App notifications can be controlled in iOS Settings and inside Riso where toggles are available.
Riso is not built around selling personal information, cross-context behavioral advertising, data-broker disclosures, or targeted advertising based on sensitive wake, sleep, camera, microphone, motion, mission, health, wellness, or fitness-adjacent data. We do not disclose that sensitive app data to employers, insurers, schools, or data brokers for their independent marketing, eligibility, pricing, or profiling purposes. If we materially change that position, we will update this Policy and provide any legally required choices before using personal information in that way.
12. Retention
We keep information only as long as reasonably needed for the purposes described in this Policy, unless a longer period is required or permitted by law. Local retention can vary by data type and user settings. Wake-event history is designed to be trimmed after about 180 days. Optional sleep audio clips are designed to auto-delete after about seven days or sooner if storage limits require it. Completed sleep records, preferences, profile details, alarms, mission targets, subscription state, and local histories may remain until you delete them, reset the app, uninstall the app, or the app performs a cleanup.
Server-side account, support, sync, security, subscription-reference, and deletion-request records are kept only as long as reasonably needed for the purposes described in this Policy, including account operation, support, security, legal compliance, dispute handling, accounting, fraud prevention, backup recovery, and enforcement of our Terms. Copies may persist for a period in device backups, iCloud backups, server backups, logs, support records, legal records, transaction records, app-store systems, or provider systems according to those systems' retention rules. Deleting Riso or clearing local data does not cancel subscriptions managed by Apple or another app marketplace.
13. Deletion and privacy choices
Riso includes controls to delete sleep recordings, sleep sessions, mission targets, and user data. A full local data reset deletes persisted alarms first, clears local profile and preference data, wake history, milestones, keychain auth values, sleep data, audio clip files, widget mirrors, photo mission targets, and non-alarm notifications where the app can do so. For safety, Riso may block sign-out or data deletion while a protected wake session is active until you finish or emergency-dismiss that alarm.
You may also revoke permissions in iOS Settings, delete the app, manage subscriptions through Apple or another app marketplace, and contact us at support@riso.app to request access, correction, deletion, export, or other privacy assistance for information Vibeler controls. We may need to verify your request, ask for enough information to locate responsive records, decline requests we cannot legally fulfill, or retain information where required or permitted by law.
14. Canadian privacy rights
If Canadian privacy law applies, including PIPEDA and substantially similar provincial privacy laws where applicable, you may request access to personal information Vibeler controls about you, ask us to correct inaccurate or incomplete information, withdraw consent where legally available, and ask questions or make complaints about our privacy practices.
We will respond within the time required by applicable law and may need to verify your identity, ask for enough information to locate responsive records, refuse access where law requires or permits refusal, withhold information about other people, or retain information where required or permitted by law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or a relevant provincial privacy authority.
15. EU and UK privacy rights
If the EU GDPR, UK GDPR, or similar European data-protection law applies, Vibeler is the controller for personal information we control. The legal bases we may rely on are described above and may include consent, performance of a contract, legitimate interests, legal obligations, vital interests or safety, and your direction when you choose to share information.
Subject to limits and exceptions under applicable law, you may have rights to access, correct, erase, restrict, object to, or receive a portable copy of personal information; withdraw consent where processing is based on consent; and complain to a data-protection authority. Riso's mission proof and sleep outputs are app-functionality estimates and are not intended to make solely automated decisions that produce legal or similarly significant effects about you.
Some Riso information exists only on your device and may not be accessible to Vibeler unless you export it, share diagnostics, contact support, or use another feature that sends it to us or a provider. Use in-app controls and iOS settings for local-only data and permissions.
16. California and U.S. state privacy rights
If California's CCPA/CPRA or another U.S. state privacy law applies, you may have rights to know or confirm whether we process personal information, access personal information, receive a portable copy, correct inaccuracies, delete personal information, opt out of certain sale, sharing, targeted advertising, or profiling uses, limit certain sensitive personal information uses, appeal certain decisions where required, and not be discriminated against for exercising privacy rights.
Riso is not built around selling personal information, sharing personal information for cross-context behavioral advertising, or using sensitive wake, sleep, camera, microphone, or mission data for targeted advertising. If that changes, we will update this Policy and provide any legally required notices and choices before using personal information in that way.
To exercise a U.S. state privacy right, contact support@riso.app and tell us which right you want to exercise and where you live. We may verify your identity, ask for enough information to find responsive records, require proof of authority for an authorized agent, decline requests we cannot legally fulfill, or retain information where permitted by law.
17. Quebec Law 25
If Quebec privacy law applies, Vibeler's privacy-responsible contact can be reached at support@riso.app. We use personal information only for the purposes described in this Policy, and we treat wake, sleep, camera, microphone, mission, and diagnostics information as potentially sensitive depending on context.
Subject to legal limits, Quebec users may request access, correction, deletion, withdrawal of consent, information about automated processing, and portability where applicable. Riso may use automated analysis to estimate whether mission proof appears valid or whether sleep audio contains certain cues, but these outputs are app features and are not intended to make legal, employment, credit, housing, insurance, health-care, or similarly significant decisions about you.
If personal information is processed or disclosed outside Quebec, we use safeguards required by applicable law. If we determine that a confidentiality incident creates a legal notification obligation, we will provide notices required by law.
18. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information. Examples in the app include local storage boundaries, keychain use for auth-style values, local deletion controls, permission prompts, local clip retention limits, and limiting support diagnostics to user-initiated exports. No system is perfectly secure, and we cannot guarantee that information will never be accessed, lost, altered, or disclosed.
If we determine that a security, confidentiality, privacy, or health/wellness-data incident creates a legal notification obligation, we will provide notices required by applicable law. You are responsible for protecting your device, passcode, Apple ID, Google account if applicable, backups, email account, and sharing destinations.
19. International transfers
Vibeler is located in Ontario, Canada. If you contact us or use services that involve providers outside your region, information may be processed in Canada, the United States, or other countries where we or our providers operate. Those countries may have privacy laws different from the laws where you live. Where required, we use appropriate safeguards for cross-border processing.
20. Children
Riso is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under the age of majority where you live, use Riso only with involvement of a parent or legal guardian. If you believe a child under 13 has provided personal information to Riso or Vibeler, contact us at support@riso.app so we can take appropriate steps.
21. Changes to this Policy
We may update this Privacy Policy as Riso changes. If changes are material, we will take reasonable steps to notify you through the app, website, App Store release notes, or another appropriate method. The effective date above shows when this version took effect.
22. Contact
Vibeler Inc. is incorporated federally in Canada and located in Ontario, Canada. For privacy questions or requests, contact support@riso.app.