BodaPro
Use onlineDownload
Extensions
/
RisitBook
/

Privacy

RisitBook Privacy Policy and Terms of Use

Effective date: 8 November 2026

RisitBook is a bookkeeping app for small businesses. It is provided by Bodastage Solutions through the BodaPro Platform ("BodaPro", "we", "us") as a mobile app and as an extension of the BodaPro desktop and web platform.

This document explains what information RisitBook collects, how it is used and shared, and the rules for using the service. By creating an account or using RisitBook, you agree to this Privacy Policy and the Terms of Use below.

Questions or requests: risitbook@bodapro.app

Part 1: Privacy Policy

1. Information we collect

Information you give us

  • Account details: your name, email address and password. Your RisitBook account is your BodaPro account, the same one used by other BodaPro apps.
    • If you sign in with Google, we receive your name, email address and Google account identifier from Google.
    • If you sign in with Apple, we receive an Apple account identifier, your email address (which may be a private relay address if you choose to hide your email), and your name the first time you sign in.
    • We never receive your Google or Apple password.
  • Profile details (optional): a profile photo and your country.
  • Business details: each business you create or join, its name, type, country, currency, financial year, tax identification number, VAT settings, logo, and the footer text printed on its receipts and invoices.
  • People in a business: who belongs to each business and their role (Owner, Manager, Accountant, Submitter or Viewer / Auditor), plus invitations you send or accept.
  • Bookkeeping records you or your business enter:
    • money accounts (such as cash, bank and mobile money accounts) and their balances;
    • money in and money out, categories, credit sales and purchases, payments against them, and transfers between accounts;
    • amounts in other currencies, with the exchange rate used;
    • receipts and invoices you issue, including the customer's name and the items sold;
    • expenses submitted for approval, and the approvals, changes and refusals made on them;
    • closed months, and a record of who changed what, when.
  • Customers and suppliers: names, phone numbers and email addresses of customers and suppliers you add. You are responsible for having a lawful reason to record them.
  • Items: the products and services you sell, with their prices.
  • Attachments: photos of receipts and other files you attach to records, and business logos.
  • Updates feed: posts, replies and reactions you make in the RisitBook Updates feed, and the topics you hide.
  • Messages to the assistant: the questions and instructions you type into the RisitBook assistant.
  • Support messages: anything you send us by email.

Information collected automatically

  • Device and notification information: a push-notification token for your device and its platform (Android or iOS), so we can send you notifications.
  • Service and security logs: technical information our servers record when you use the service, such as IP address, request times, errors and app version. We use these to keep the service working and secure.
  • Sync records: to keep your phone and our servers in step, we record each change your device sends and when it was applied.
  • Assistant usage records: when you use the assistant, we record the steps it took (for example, which kind of information it looked up), timings, token usage and errors, so we can operate, bill and improve it.

Information stored on your device

RisitBook works offline. A copy of the books for the businesses you belong to, records not yet synced, recent reports and your assistant chats are stored on your phone. Your sign-in tokens are kept in your phone's secure storage. Signing out removes your sign-in tokens; uninstalling the app removes everything it stored.

Device permissions

  • Camera: used only when you choose to photograph a receipt or scan an invitation QR code.
  • Photos and files: used only when you choose a photo or file to attach, such as a receipt photo or a business logo.

We do not access your contacts, location or microphone. We do not read your SMS messages.

2. How we use your information

We use your information to:

  • create and run your account and sign you in;
  • keep each business's books: record transactions, calculate balances, profit and amounts owed, and produce reports, receipts and invoices;
  • show each person only what their role in a business allows;
  • convert amounts in other currencies, using the rates published by the Uganda Revenue Authority unless you enter the rate yourself;
  • send notifications, such as expenses waiting for approval and decisions on expenses you submitted;
  • send account emails, such as password reset codes;
  • run the Updates feed;
  • provide the assistant (see section 4);
  • charge for subscriptions, where a business is on a paid plan;
  • provide support, respond to requests, and keep the service secure, including preventing fraud and abuse;
  • meet our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Who can see your information

  • Your businesses:
    • People in a business see its records according to their role. For example, a Submitter sees the expenses they submitted, not the whole books; an Owner, Manager or Accountant sees the books.
    • A business's Owner decides who joins and what role they have, and can remove people.
    • A business's records are visible to its people, not to other RisitBook users.
  • Receipts and invoices: when you share a receipt or invoice (for example by WhatsApp or email), the person you share it with sees what is printed on it. Sharing happens through the apps you choose, under their own privacy policies.
  • Reports and exports: PDF and CSV reports you share or save leave RisitBook and are under your control.
  • Updates feed: posts and replies are visible to other RisitBook users who can see the feed.
  • Profile photo and name: visible to the people in the businesses you belong to, and next to your posts in the Updates feed.

4. The RisitBook assistant

The assistant answers questions and carries out tasks using your RisitBook information.

  • When you use it, your messages and the information it needs to answer are sent to an AI model provider that processes them on our behalf. That information includes business records you are allowed to see. The provider returns the reply.
  • The assistant acts only with your role's permissions. Anything that changes your records asks for your approval first.
  • Your chat history is stored on your device. Usage records are kept on our servers as described in section 1.
  • Do not enter information in the assistant that you do not want processed this way.

5. Service providers we share information with

We share information only with service providers that help us run RisitBook, and only as needed for their service:

  • hosting and storage of our servers, databases and uploaded files;
  • AI model providers, for the assistant;
  • notification services: Google Firebase Cloud Messaging (and, through it, Apple Push Notification service) for push notifications;
  • email delivery, for account emails such as password reset codes;
  • payment providers, if a business pays for a subscription. They process card and mobile money payments on their own secure pages; we do not receive full card numbers or mobile money PINs;
  • Google or Apple, if you choose to sign in with them;
  • monitoring tools, used to keep the service reliable.

We may also disclose information if required by law, to protect the rights, safety or property of our users or others, or as part of a merger or transfer of our business. In a transfer, this policy would continue to apply to your information.

6. How we protect your information

  • Information is sent over encrypted connections (HTTPS).
  • Uploaded files are stored privately and opened only through short-lived links given to people allowed to see them.
  • Access to records is controlled by business membership and role.
  • Closed months cannot be changed without reopening them, and changes are recorded with who made them.
  • No method of storage or transmission is completely secure, but we work to protect your information and to fix problems quickly.
  • Protect your phone with a screen lock: the books stored on it for offline use are readable by anyone who can unlock it.

7. How long we keep information

  • Account information: kept while your account is active.
  • Business records: these belong to the business. When you leave a business or delete your account, the business keeps the records you entered, because it needs them for its accounts and taxes. Your name may remain on records you made, such as an expense you submitted.
  • Businesses you own: when an Owner deletes their RisitBook account, a business with nothing recorded is deleted and any other is archived (read-only, with its records kept). To have an archived business's records erased, the Owner can email us. We erase them unless we must keep them by law.
  • Service, security and usage logs: kept for a limited period and then deleted or anonymised.
  • Legal holds: we may keep information for longer where the law requires it, or to resolve disputes and enforce our agreements.

8. Deleting your account

In the app: go to More → Your account → Delete my RisitBook account. The app shows what will happen to each of your businesses before you confirm with your password (or by typing DELETE if you sign in with Google or Apple).

When you delete your RisitBook account:

  • you leave every business someone else owns. Records you entered stay with those businesses, as described in section 7;
  • a business you own with nobody else in it and nothing recorded is deleted;
  • any other business you own is archived: it becomes read-only, and nobody, including the people in it, can open it. Its records are kept. To have them erased, email us;
  • your expenses still waiting for approval are withdrawn, and invitations you sent stop working;
  • your RisitBook device tokens are deleted, and the copy of the books on your phone is removed when you are signed out.

Your RisitBook account is part of your BodaPro account, which you may also use for other BodaPro apps. Deleting your RisitBook account does not delete your BodaPro account: you can still sign in to other BodaPro apps, and signing in to RisitBook again starts with no businesses.

To delete your whole BodaPro account (your name, email, password, profile photo and sign-in details, for every BodaPro app), send a request to risitbook@bodapro.app from the email address on your account, with the subject "Delete my account". We may ask you to confirm the request. When it is deleted, your Updates feed posts and replies are deleted or anonymised, and records you entered in businesses are kept for those businesses, as described in section 7. We complete these requests within 30 days.

9. Your rights and choices

You can:

  • view and update your name and password in the app (More → Your account);
  • delete your RisitBook account in the app (More → Your account → Delete my RisitBook account);
  • change your profile photo or remove it;
  • leave a business, or, as an Owner, remove people from it;
  • export your business's reports as PDF or CSV;
  • ask us for a copy of your personal information, or to correct or delete it, by emailing risitbook@bodapro.app.

Depending on where you live, you may have further rights under data protection law, such as Uganda's Data Protection and Privacy Act, 2019. These can include the right to object to or restrict processing, and the right to complain to a data protection authority. Contact us to use them.

10. Children

RisitBook is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. When we make significant changes, we will update the effective date above and let you know in the app or by email.

Part 2: Terms of Use

1. Accepting these terms

By creating an account or using RisitBook, you agree to these Terms of Use and the Privacy Policy above. If you do not agree, do not use RisitBook.

2. What RisitBook is, and is not

  • What it is: RisitBook is a record-keeping tool for small businesses: money in and out, who owes, receipts, invoices, expenses and reports.
  • What it is not:
    • RisitBook is not a bank, payment service, accountant, auditor or tax adviser.
    • We do not hold, move or guarantee anyone's money. Payments happen outside RisitBook, and RisitBook records them.
    • Receipts and invoices from RisitBook are not fiscal documents from a tax authority's electronic invoicing system (such as URA's EFRIS). If the law requires your business to issue those, you remain responsible for doing so.
    • Businesses are responsible for their own records, tax filings and compliance with the laws that apply to them.
  • Calculated figures: figures shown in RisitBook (balances, profit, amounts owed, VAT and currency conversions) are calculated from the records entered and the exchange rates used. They are only as accurate as those records, and you should check them before relying on them, for example for a tax return.
  • The assistant can make mistakes. Check important information before relying on it.

3. Your account

  • You must be at least 18 and give accurate information.
  • Keep your password safe. You are responsible for activity on your account.
  • Tell us at risitbook@bodapro.app if you think your account has been misused.

4. Businesses and roles

  • Creating a business: the person who creates a business is its Owner. The Owner invites people and chooses their roles.
  • Responsibility for records: the people who enter records and approve expenses are responsible for them. The Owner is responsible for who has access.
  • Your choice to join: joining a business means its people, according to their roles, can see your membership and the records described in the Privacy Policy.

5. Acceptable use

You agree not to:

  • enter false records, or issue false receipts or invoices, to deceive anyone, including customers, partners, lenders or a tax authority;
  • upload content that is unlawful, abusive, hateful, or sexually explicit, that infringes someone else's rights, or that contains other people's personal information without a lawful reason;
  • post spam or advertising in the Updates feed;
  • try to access accounts, businesses or data you are not authorised to see;
  • interfere with, overload or reverse-engineer the service;
  • use RisitBook for money laundering, tax evasion, fraud or any other illegal activity.

We may remove content that breaks these terms. We may also suspend or close accounts that break them.

6. Your content

  • Ownership: you and your business keep ownership of the records and files you enter.
  • Licence to us: you give us permission to store, process and display them as needed to run RisitBook for you and your businesses.
  • Feed posts: you are responsible for what you post. Posts can be reported by other users and reviewed by us.

7. Subscriptions and payment

  • Some features, or use beyond a free trial, may need a paid subscription for a business. We will show the price before you are charged.
  • Subscriptions are paid through our payment providers. Their terms also apply to the payment.
  • If a subscription ends, you can still view and export the business's records.

8. Availability and changes

We work to keep RisitBook available, but we do not guarantee it will always be available or error-free. Records saved offline reach our servers only when your phone syncs. We may change, add or remove features.

9. Ending your use

  • You: you can stop using RisitBook at any time and delete your account as described in the Privacy Policy. Export any reports you need first.
  • Us: we may suspend or end your access if you break these terms or if required by law.

10. Liability

  • As is: to the extent the law allows, RisitBook is provided "as is".
  • What we are not liable for:
    • losses arising from records entered by users, business decisions, tax filings, or payments made outside RisitBook;
    • records lost because a phone was lost or the app was removed before it synced;
    • indirect or consequential losses.
  • Your legal rights: nothing in these terms limits any rights you have that cannot be limited by law.

11. Governing law

These terms are governed by the laws of Uganda, unless the law where you live requires otherwise.

12. Changes to these terms

We may update these terms. If we make significant changes, we will update the effective date and let you know. Continuing to use RisitBook after a change means you accept the updated terms.

13. Contact

RisitBook by BodaPro Email: risitbook@bodapro.app