Is buying a chinese phone risky???

As far as we know it's only the Xiaomi browser that is sending user data back to China.
So if you used a private browser or even just google chrome you should be fine.

I owned 3 xiaomi phones and never really cared enough about what I was using them for to be worried about privacy.