Privacy Policy
This privacy policy explains how Risha collects, uses and protects your personal information when you use the app.
1. Who we are
- Risha (Novels) is an app published on Google Play and the App Store by syrdroid.
- It is built and run by a single independent developer.
- Privacy contact: Yaman8da@gmail.com
2. What we collect
- Account: your name, username, email address and how you sign in (email and password, Google, Apple, or a guest account). Passwords are handled by our sign-in provider and are never visible to us.
- Profile and settings: bio, avatar letter and colour, app language, content languages, and your notification and newsletter choices.
- Reading and activity: reading progress and reading time, the device name and ID used to save progress, your library, favorites, likes, follows, downloads, points, Flames (login streaks), referrals, gifts and weekly votes.
- Your content: novels, chapters and drafts you write, covers you upload, comments, reviews and reports.
- Approximate location: your country, used for statistics and to protect accounts. We do not collect GPS or any other precise location. For accounts active before 14 September 2026 we also keep the last IP address that was recorded, used only to detect accounts that abuse rewards.
- Support messages: bug reports and feedback you send, with the device details and screenshot you choose to attach. You can send them anonymously.
- Diagnostics: app usage events (Firebase Analytics), crash reports (Firebase Crashlytics) and error logs. On Android, Firebase Analytics may read your device’s advertising ID for app measurement.
- Advertising data (app version 1.5.0 and later): when you choose to watch a rewarded ad, our ad partners Unity and Liftoff receive your device’s advertising ID (on iPhone and iPad only if you allow tracking), device and network details (such as model, operating system, language and IP address) and how you interact with the ad (views, clicks, completion). Your internal account ID is sent to Unity so a watched ad can be rewarded.
- Notifications: your device’s push token (Firebase Cloud Messaging by Google; OneSignal in app versions before 1.4.1).
- Purchases: subscription status, purchase history and transaction IDs from Google Play, the App Store and RevenueCat. We never receive your card details.
- Device checks (Android): Google Play Integrity results, used to detect modified apps and abuse.
- Not collected: GPS or precise location, contacts, or photos you do not choose to upload.
3. How we use data
- Run the service: accounts, reading, offline downloads, saving your progress, and syncing it across devices for Plus and Pro subscribers.
- Authors: publishing novels and chapters, drafts, statistics and translation.
- Points and rewards: points, Flames, referrals, gifts and promotional rewards.
- Rewarded ads: showing the ads you choose to watch in exchange for an early chapter, points or keeping your Flame, measuring them, and preventing reward abuse.
- Purchases: Risha Plus and Pro, verification badges, novel promotions and Fast Pass unlocks, all verified on our server.
- Communication: push and in-app notifications (new chapters, replies, follows, reminders) and, while you are subscribed, the newsletter.
- Safety: preventing fraud and abuse, enforcing our Terms, and protecting authors’ work while reading (see Security).
- Improvement: fixing crashes and improving performance.
4. Legal bases
- Contract: to provide the app and the features you use or buy.
- Legitimate interests: security, fraud prevention, fixing problems and improving the app.
- Consent: push notifications, through your device’s notification permission.
- Consent for personalised ads: in the European Economic Area, the United Kingdom and Switzerland we ask before your first ad, and until you answer your ads are not personalised; on iPhone and iPad, ads can use your advertising ID only if you allow tracking in Apple’s prompt. Rewarded ads that are not personalised rely on our legitimate interest in keeping Risha free.
- Newsletter: turned on by default for new accounts; you can turn it off at any time in Settings → Newsletter.
- Legal obligation: keeping payment records where the law requires it.
5. Service providers
- Supabase: database, sign-in, file storage and server functions.
- Google: Google Sign-In, Google Play billing, Play Integrity, Firebase Analytics and Crashlytics, and Google Fonts (some reading fonts are downloaded from Google when you choose them).
- Apple: Sign in with Apple, App Store purchases and push notifications on iPhone and iPad.
- RevenueCat: purchases and subscriptions.
- Firebase Cloud Messaging (Google): push notifications.
- OneSignal: push notifications in app versions before 1.4.1.
- Amplitude: product analytics (screens and features used, reading and purchase steps, app version, device model, and the device's language and region settings). Linked only to your internal account ID — no name, email, comment or novel text, search terms, advertising ID, IP address or location.
- syrdroid.com: our own website, which serves share links and the product offers shown in the app.
- Unity (Unity Ads and the LevelPlay mediation platform, including ironSource Ads): rewarded ads. Privacy policy: https://unity.com/legal/game-player-and-app-user-privacy-policy
- Liftoff (Liftoff Monetize, formerly Vungle): rewarded ads. Privacy policy: https://liftoff.ai/privacy-policy/
- We do not sell your personal information.
6. Ads and promotions
- Risha shows promotions for novels that their authors pay for, and product offers from Temu through affiliate links.
- These promotions and offers are not personalized, and we do not build advertising profiles about you.
- Rewarded ads (app version 1.5.0 and later): short ads from Unity and Liftoff that play only when you choose to watch one, for example to open an early chapter, earn points or keep your Flame.
- In the European Economic Area, the United Kingdom and Switzerland we ask once, before your first ad, whether these ads may be personalised. Until you answer they are not. You can change your answer at any time in Settings → Ad privacy.
- Elsewhere, our ad partners may personalise ads using your advertising ID. You can limit this or reset the ID in your device settings (Android: Settings → Privacy → Ads; iPhone and iPad: Settings → Privacy & Security → Tracking).
- We ask our ad partners not to show ads for categories that do not suit our readers, such as alcohol, gambling, dating and music.
- When you tap a product offer, we count the click without your account details (only the product and the app language), and the offer opens on Temu, where Temu’s own privacy policy applies.
- Some paid plans remove ads, as shown on the subscription page.
- Novel recommendations inside the app follow the content languages you choose.
7. Data retention
- Account and content: kept while your account exists.
- Diagnostics and logs: deleted automatically after 30 days; some security records are kept for up to one year.
- Payment records: kept as needed for accounting and legal duties, including after account deletion.
- Backups: we keep occasional backup copies of the database to recover from failures. They are stored securely and deleted when no longer needed.
8. Account deletion
- You can delete your account in the app: Settings → Edit Profile → Delete Account. You can also ask by email at Yaman8da@gmail.com.
- Email, Google and Apple accounts are deleted automatically 7 days after the request. Signing in again during these 7 days cancels the request.
- Guest accounts are deleted immediately.
- We delete your profile, email, sign-in details, reading data, favorites, points, notifications, comments and unpublished drafts.
- Novels you have published stay available to readers under the name “Deleted author”, with their chapters and readers’ comments, and without any of your personal details. For the same reason, unpublished work that another author’s translation is based on is kept.
- We keep a record that the deletion was completed (without your email), and payment records where required.
- If you signed in with Apple, deleting your account also revokes Risha’s access to your Apple Account.
- Deleting your account does not cancel a Google Play or App Store subscription. Cancel it in Google Play, or on iPhone and iPad in Settings → your name → Subscriptions.
9. International transfers
- Your data may be processed in different regions because our service providers operate globally (for example Supabase, Google, OneSignal, Unity and Liftoff).
- We make sure all providers apply appropriate technical and organizational safeguards.
10. Security
- Encryption: data between the app and our servers is encrypted in transit (HTTPS), and sensitive settings on your device are stored encrypted.
- Access control: strict database access rules, so only you, and the administrator when necessary, can see your private data.
- Content protection: to protect authors’ work, screenshots and screen recording are blocked while reading on Android; on iPhone and iPad the chapter is hidden while the screen is recorded or mirrored.
11. Children
- The Risha app is intended for users aged 13 and older.
- We do not knowingly collect personal information from children under 13.
12. Your choices & rights
- Control: manage notifications and the newsletter in Settings, or notifications in your device settings.
- Access and edit: update your profile, reading preferences and content in the app.
- Ads: change ad personalisation in Settings → Ad privacy (European Economic Area, United Kingdom and Switzerland), or limit or reset your advertising ID in your device settings.
- Rights: depending on where you live, you may ask for access to your data, or for its correction, deletion or a copy.
- Contact: to use these rights or ask a question, email Yaman8da@gmail.com.
13. Changes
- We may update this privacy policy to reflect new app features, gamification mechanics, or legal requirements.
- We will post the revised version with an updated effective date and notify you in-app when appropriate.