Privacy policy

Last updated 12 October 2026

Rivu is a personal money tracker. You log what you earn, spend and save, and Rivu shows you where it went. This page says what we collect to do that, who else handles it, and what you can do about it.

Rivu is run by Ekereke Precious in Nigeria, who is responsible for your data (the “data controller”). Questions or requests: privacy@userivu.com.

What we collect

• Your Google sign-in. Your name, email address and profile picture, as Google shares them when you choose “Continue with Google”. We never see your Google password.
• What you log. Expenses, categories, budgets, income, bills, savings, net worth entries, no-spend days and receipt details (shop, items, amounts, date), plus your username, bio and currencies.
• Your passcode and device unlock, if you turn them on. We keep a one-way hash of the passcode, never the passcode itself. For Face ID, fingerprint or a security key, we keep the public key your device creates. Your face or fingerprint never leaves your device.
• Usage of paid features. When you scan a receipt we record that a scan happened, whether it worked and what it cost us to run. This is how we keep scans within the monthly limit and the service affordable.

We don't run ads, use advertising or analytics trackers, or sell or rent your data to anyone.

Receipt photos

When you scan a receipt, the photo is sent to Anthropic, the AI provider that reads it into lines. Your name and email aren't sent with it. We don't store the photo: only the lines you check and save are kept. Anthropic doesn't use it to train its models and keeps it only briefly, under its own commercial terms.

Why we use it

• To run Rivu for you: show your numbers, sync them across your devices, read receipts you scan. This is the agreement between us when you sign up.
• To keep your account secure: sign-in, passcode, locking after a quiet spell, and spotting abuse.
• To keep the service running and affordable: counting scans and their cost.

We don't use your data to make automated decisions about you.

Who else handles it

These companies process data for us, only to provide Rivu:

• Supabase: our database and sign-in. Stores your account and everything you log.
• Netlify: hosts the website and app.
• Google: signs you in.
• Anthropic: reads receipt photos, as described above.

Exchange rates come from a rates provider. No information about you is sent to it.

These providers may store or process data outside Nigeria, for example in the United States. We only use providers that commit by contract to protecting it, as the Nigeria Data Protection Act and, where it applies, the GDPR require.

How it's protected

• Everything is encrypted on the way between your device and our servers, and encrypted where it's stored.
• The database only lets your account read your rows. One account can't see another's entries.
• Rivu's admin tools show scan counts and costs per account, never your entries.
• You can add a passcode and device unlock, and Rivu locks itself after a quiet spell.

No system is perfectly secure. If a breach puts your data at risk, we'll tell you and the Nigeria Data Protection Commission without delay.

Cookies and storage on your device

Rivu uses only what it needs to work: cookies that keep you signed in and know when to lock, and storage on your device for settings such as your theme, currencies, the last exchange rates and whether the sidebar is folded. There are no advertising or tracking cookies, so there's nothing to opt out of.

How long we keep it

We keep your data while you have an account. When you delete your account, everything is deleted from the database straight away. Copies in our database provider's backups are removed as those backups expire, on its own schedule.

Your rights

You can, at any time:

• Get a copy of your data: Account → Your data → Download everything.
• Correct it: edit or remove any entry in the app.
• Delete your account and everything in it: Account → Your data → Delete account.
• Object to or restrict how we use it, or ask anything else, by writing to privacy@userivu.com. We reply within 30 days.

If you're unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng), or to the data protection authority where you live.

Children

Rivu is for people aged 18 and over. We don't knowingly collect data from anyone younger.

Changes

If we change this policy, the date at the top changes too. If a change affects how your data is used, we'll tell you in the app before it takes effect.