RaiseloEffective 21 October 2026
Raiselo is provided by Richville Torio, an individual developer ("we"), who is the controller of your personal data. If you have a question about this notice or your data, write to [email protected] or see the contact page.
The short version
- We collect what you and your co-parent put into Raiselo, so the app can share it between your two homes and keep it as a record.
- We don't sell your data, show ads, or use analytics or tracking tools.
- The other parent in your family sees what you share there. Anyone else sees only what a parent chooses to share with them.
- Messages and expense history can't be edited or deleted, because they form a record. Family records are kept for a set period after the family stops using Raiselo. See the retention schedule.
- You can download a copy of your data or delete your account in the app at any time.
What we collect
Your account
Your email address, display name and, if you add one, a profile photo. If you turn on two-step verification, we store what's needed to check your codes. We also store your family's time zone and your subscription plan.
If you sign in with Google or Apple, they send us your name, your email address and an identifier for your account with them. We never see your Google or Apple password. With Apple you can hide your email address; we then receive a private relay address that forwards to you. For Apple sign-in we also keep a token, used only to tell Apple to end Raiselo's access when you delete your account.
What your family adds
- Calendar: custody patterns, handovers (times and places), holidays, activities and swap requests.
- Messages: what you write, attachments, and when each message was sent, delivered and read.
- Expenses: amounts, categories, receipts, how costs are split, and every request, approval or dispute.
- Info vault: your children's names, dates of birth and the records and documents you add, which may include school, medical and emergency contact details.
- Exports: the PDFs you create, with their fingerprint and verification code.
- Activity log: who did what and when (for example "expense approved"), so the record shows how it came about.
Technical data
- A notification token for each device you sign in on, so we can send notifications.
- For shared export links, how many times a link was opened and when it was last opened (not who opened it).
- Our hosting providers keep standard server logs, which include IP addresses and the pages or services requested. Links that contain a private token (shared export links and calendar feeds) can appear in those logs. Only our administrators can see them.
What stays on your phone
Receipt scanning and tone assist run entirely on your phone. The receipt image is only uploaded if you attach it to an expense, and your draft message is only sent when you send it. Your safety PIN is stored only on your phone and never sent to us.
Why we use it
- To run the app: to share your family's calendar, messages, expenses and records between both parents' devices, and to send notifications.
- To keep a reliable record: so exports can be verified and the record can be relied on later, including by a court.
- To keep accounts safe: sign-in, two-step verification and preventing misuse.
- To handle subscriptions.
Legal bases (UK and EU)
- Our contract with you: running your account and the app, sharing your family's records between devices, and handling your subscription.
- Legitimate interests: keeping the family's record complete after a parent leaves, so both parents and a court can rely on it, and keeping the service secure. We weigh these against your interests, and you can object (see below).
- Legal obligations: keeping or disclosing data when the law or a court order requires it.
- Explicit consent: for health information about your children that you choose to add to the info vault, such as allergies, medications or conditions. Adding it is optional. You can remove it from the vault at any time, which withdraws consent from then on.
Who can see it
- The other parent in your family sees the family's calendar, messages, expenses, vault and exports.
- People a parent gives read-only access (for example a grandparent, lawyer or counsellor) see only the parts that parent chooses. A parent can remove their access at any time.
- Anyone with a shared export link can view that one export until the link expires or is turned off.
- Anyone with a verification code can check an export's date range and whether it's genuine, but not its contents.
- If you turn on message protection, your co-parent doesn't see in the app when you read their messages. Exports you make yourself do show it.
Service providers
We use these companies to run Raiselo. They process data only on our instructions.
| Provider | What for |
|---|---|
| Supabase | Database, sign-in, file storage and server functions. Hosted in the United States. |
| PowerSync | Keeping each device's copy of the family's records in sync. Hosted in the United States. |
| Google (Firebase Cloud Messaging) | Delivering notifications. Notifications never contain your messages; they say only things like "New message". |
| RevenueCat, Apple and Google | Subscriptions and payments. We never see your card details. |
| Google and Apple (sign-in) | Confirming who you are, if you choose Sign in with Google or Sign in with Apple. They tell us your name and email address. |
| Cloudflare | Hosting this website and the verification and export viewer pages. |
We don't sell or rent your data, and we don't share it for advertising. We would disclose it only if the law requires us to, for example under a valid court order.
International transfers
Your data is stored in the United States. For people in the UK and EU, transfers to our providers are protected by the European Commission's standard contractual clauses (with the UK addendum) in each provider's data processing agreement and, for providers certified under it, by the EU-US Data Privacy Framework and its UK extension. Write to us for a copy of the relevant safeguards.
How long we keep it
See the data retention schedule. In short: family records are kept while the family uses Raiselo and for 7 years after (2 to 7 if the parents agree), then deleted. Deleting your account removes your profile and sign-in after a 7-day grace period, and if you signed in with Apple, we tell Apple to end Raiselo's access at the same time; what you added to the family's record stays with that record.
Your choices and rights
- Get a copy: in the app, go to Settings, then Download my data. You get a ZIP of your data and files, once a day.
- Correct: you can change your name and photo in the app. Messages and expense history can't be changed once sent, because they're part of a shared record.
- Delete: in the app, go to Settings, then Delete account. See what happens in the retention schedule.
- Notifications: turn them off in your phone's settings, or hide their previews with safety mode.
- Other rights: depending on where you live, you may have more rights, such as objecting to how we use your data or complaining to a data protection authority. Write to [email protected]. We reply within one month.
Security
Data is encrypted in transit. Each family's data is walled off from every other family's at the database level. Two-step verification and a PIN lock are free on every plan.
Children
Raiselo is for parents and the adults they invite. It's not meant for children to use, and we don't knowingly create accounts for anyone under 16. Parents add information about their own children to coordinate their care.
Changes
If we change this notice in a way that matters, we'll tell you in the app before the change takes effect.