RISK-B Privacy Policy

Effective date: August 11, 2026

RISK-B is a workplace-safety AI advisor operated by Smarter Risk (“we”, “us”). This policy explains what we collect through the RISK-B mobile app and web widget, and what we do with it.

1. What we collect

Account information. Creating an account requires an email address, a password, and your first and last name. We store your password only as a one-way cryptographic hash — we cannot read it. Marketing consent is a separate, unchecked-by-default choice; declining it never affects the service. Transactional email (verification links, password resets) is sent regardless of marketing consent, via Amazon SES.

Chat messages. Your questions and RISK-B’s answers are stored as chat history so your conversations work across sessions.

Photos. Photos you submit for hazard analysis are processed by our AI service providers and stored with your chat history.

Purchase state. Subscriptions are processed by Apple App Store or Google Play and managed through RevenueCat. We receive your subscription tier and status — never your card number or payment details.

Usage records. We keep a ledger of credit grants and usage (timestamps and request types, not message content) for billing integrity, and a device install identifier for anti-abuse purposes.

We do not collect: location, contacts, calendars, audio, browsing history, advertising identifiers, or analytics profiles. There are no ads and no third-party analytics SDKs in the app.

2. AI processing

Chat messages and photos are processed by OpenAI and Anthropic as service providers acting on our instructions to generate answers. They do not use your RISK-B content to train their models under the API terms we operate on. Answers are AI-generated safety guidance, not legal advice.

3. Retention

Chat history (including photos stored with it): automatically deleted after 90 days.
Account information: kept while your account exists.
Billing ledger: retained after account deletion as a financial audit record (e.g. for refund disputes), keyed to an internal account number.
Deleted-account markers: we keep a permanent internal marker for deleted accounts so that subscription events arriving after deletion cannot recreate access.

4. Deleting your account

Delete in-app: Subscription → Delete account (requires your password). Deletion removes your account, remaining credits, and entitlement records immediately. What it does NOT do: cancel an App Store or Google Play subscription — Apple and Google control those; cancel in the store or billing continues. You may re-register with the same email later; prior data is not restored. No app access? See our deletion-request page: https://www.smarterrisk.com/risk-b/delete-account/.

We do not sell or share personal data for advertising. Data is processed by service providers under contract: OpenAI and Anthropic (AI processing), RevenueCat (subscription management), Apple/Google (payments), Amazon Web Services (email delivery), and our hosting infrastructure (DigitalOcean; encrypted backups on Cloudflare R2). We disclose data if legally required.

6. Security

All data is encrypted in transit (TLS). Passwords are hashed with bcrypt. Session tokens can be revoked server-side (password reset and account deletion invalidate all sessions). Administrative actions on accounts are logged to an audit trail.

7. Children

RISK-B is a workplace tool, not directed at children under 13, and we do not knowingly collect their data.

8. Changes & contact

We’ll update this page when the policy changes. Questions or requests: info@smarterrisk.com · Smarter Risk, 838 Brent Street, Winston-Salem, NC 27103.