Privacy Policy

1. Overview & Scope

This Privacy Policy describes how Invoice Maker collects, protects, stores, and utilizes data across iOS and Android builds of the mobile application (Application Identifier: com.invoice.maker.app) and associated cloud backend services.

By downloading, installing, or interacting with Invoice Maker, you accept the data practices described in this policy. If you do not consent to these practices, please discontinue use of the application.

2. Categories of Information We Collect

Invoice Maker collects strictly necessary data to enable reliable invoice generation, client book management, and cross-device financial sync:

• Account & Identity Credentials: When signing in with Google or Apple ID, we receive your unique identifier (UID), full name, and registered email address provided by the respective authentication provider.
• Business Profile Data: Trade name, owner/representative name, business email, contact phone number, physical or registered business address, and Tax/VAT identification numbers.
• Client & Billing Records: Client contact names, company names, billing emails, phone numbers, postal addresses, and invoice line items (item titles, descriptions, unit rates, quantities, applicable tax percentages, discount rates, shipping fees, currency codes, and custom payment terms).
• Financial Reports & Metrics: Invoice aggregates, total receivables, revenue sums, payment statuses, and financial breakdown metrics stored directly in secured Firestore.
• Diagnostic & Device Information: Device model, operating system version, app version, network connectivity status, preferred locale, selected currency symbol, and non-identifying crash telemetry for stability improvement.
• In-App Purchase & Subscription Data: Subscription status, entitlement verification, and transaction timestamps processed via Adapty and Apple/Google billing APIs (we do not process or store your credit card or payment card details directly).

3. How We Use Collected Data

Your information is processed strictly to provide core business utilities:

• Rendering, previewing, and generating high-resolution vector PDF invoices on your device.
• Synchronizing invoices, financial reports, client contacts, and business profiles in real-time across your authorized devices via secured Google Cloud Firestore.
• Computing financial dashboard totals (Total Invoiced Revenue, Outstanding Receivables Due, Total Paid, and Overdue balances).
• Managing multi-currency formatting and default tax and payment term configurations.
• Verifying active Pro entitlements and subscription access.
• Delivering technical customer support and resolving reported defects.

4. Cloud Infrastructure & Third-Party Services

We work exclusively with enterprise cloud infrastructure providers compliant with global security standards (ISO 27001, SOC 2, GDPR):

• Google Firebase & Cloud Firestore: Handles secure cloud persistence and authentication. All reports, invoices, and business profiles are stored in secured Firestore with TLS 1.3 encryption in transit and AES-256 encryption at rest. Access to cloud documents is strictly isolated to your authenticated Firebase UID via server-enforced security rules (/users/{uid}/*). We do not share your reports or account data with external third parties.
• Apple Inc.: Handles "Sign in with Apple" authentication and in-app purchase verification on iOS devices.
• Google Play Billing: Handles in-app purchase verification on Android devices.
• Adapty: Handles cross-platform subscription infrastructure, receipt validation, and entitlement synchronization.

We do not embed third-party advertising SDKs, tracking pixels, or cross-app surveillance trackers. We do not sell or share data under any circumstances.

5. Security, Storage Architecture & Zero Data Sharing

We implement defense-in-depth protocols to keep your business records and reports safe:

• No Local Storage for Reports: We do not use local device storage for report storages. All financial reports, ledger summaries, invoice records, and client databases are securely stored and synchronized in Google Cloud Firestore.
• Zero Data Sharing: We do not share, sell, rent, monetize, or distribute your financial reports, invoices, client contacts, or personal data to any third party, advertiser, or data broker. Your data is strictly yours.
• Transport Layer Security: All data exchanged between the app and cloud services is transmitted over encrypted HTTPS/TLS 1.3 connections.
• Access Isolation: Cloud documents are accessible solely by your authenticated account via granular security rules enforced by Google Cloud Firestore.
• Retention Policy: We retain your business profiles, client entries, invoice records, and reports only as long as your account remains active. When you delete your account, your data is permanently removed from production databases.

6. Account & Data Deletion Rights

You retain full authority and ownership over your business records. You can execute permanent data deletion at any time:

• Instant In-App Deletion: Go to Profile & Settings → Account → Delete Account. Confirming this action permanently deletes your business profile, client directory, and all generated invoices from our cloud database.
• Web-Based Deletion Portal: If you no longer have access to your mobile device or have uninstalled the app, you may request permanent deletion through our Account Deletion Portal.

7. GDPR (EU/UK) & CCPA/CPRA (California) Rights

Users in applicable jurisdictions possess legal rights concerning their personal data:

• Right to Access: You can request disclosure of what personal information is held about you.
• Right to Rectification: You can edit and update your business profile, clients, and invoices directly within the app at any time.
• Right to Erasure: You can demand immediate, permanent destruction of your personal data.
• Right to Non-Discrimination: We never deny services, alter quality, or charge different prices for exercising statutory privacy rights.

8. Children's Privacy

Invoice Maker is designed for professional business owners, freelancers, and commercial users. We do not knowingly solicit or collect data from individuals under the age of 16.

9. Policy Amendments

We may update this Privacy Policy to reflect app improvements, infrastructure updates, or regulatory changes. Any modifications will be posted to this page with an updated "Last Updated" date.

10. Contact Information

For inquiries, concerns, or data protection questions, please contact our support team: