InvoiceBoss Privacy policy

This policy explains what InvoiceBoss (“the app”, “we”) does with your information. It is written to be read, not to be survived.

The short version. Your invoices, clients and prices are stored on your own device. They are never sent to us, and we have no way to read them. There is no account and no sign-up. On Android, the app measures how it is used and reports crashes, through Google; that is described below, and it never includes anything from your invoices. The iPhone and iPad app does neither.

Information we collect

We have no server of our own and we never receive your business data. The app does not ask you to register, and nothing you type into it — invoices, clients, prices, notes — is sent to us or to anyone else. What is collected, on Android only, is usage and crash information, described further down.

What stays on your device

Everything you type into the app is written to a private database on the device itself:

• Your business details — name, address, email, phone, tax number, payment terms and logo.
• Your clients — names, addresses, email addresses and phone numbers.
• Your invoices and quotations — line items, prices, taxes, discounts, notes, payments received and any signature you draw.
• Your saved items and app settings.

This data is removed when you uninstall the app. Nobody but you can read it, including us.

Permissions the app asks for, and why

Photos

Only when you choose to add a business logo. The image you pick is copied into the app’s own storage and used on your invoices. No other photo is read, and no image is uploaded anywhere.

Camera

Only when you use Move to a new phone and scan the transfer code. The camera is used to read that one code. No photo or video is recorded, stored or transmitted.

Notifications

Only if you turn on payment reminders, which you can switch off at any time in Settings. The reminders — on the day an invoice is due, and again if it is three days late — are scheduled by the phone itself. Nothing is sent to us, to your client or to anyone else to make them happen.

Local network access

Only during a phone-to-phone transfer. The sending phone serves your backup over your own Wi-Fi so the receiving phone can fetch it directly. The address is protected by a single-use code, stops working after the transfer, and expires after five minutes. The data does not pass through any server of ours or anyone else’s.

Things you choose to send

Emailing and sharing invoices

When you email or share an invoice, the app hands the PDF to your phone’s own mail or sharing app and stops there. We do not send the message, do not see the recipient, and keep no record of it. Whatever app you choose to send with has its own privacy policy.

Backups

A backup is a plain file that you export and keep. Where it goes — a messaging app, a cloud drive, your computer — is your choice, and it is governed by whatever service you put it in.

Fonts the app downloads

The app comes with its own typefaces. If you choose one of the extra fonts for an invoice, the app downloads that font once from Google Fonts (fonts.gstatic.com) and keeps it on the phone for next time. As with any download, the request shows Google your device’s IP address and which font file was asked for. Nothing from your invoices is sent with it.

Purchases

InvoiceBoss Pro is bought through the App Store or Google Play. Those stores handle the payment; we never see your card details, billing address or any part of your payment method.

Purchases are validated for us by RevenueCat, Inc. It receives an anonymous app user identifier the app generates, the purchase token from the store, which product was bought, and your country and device type. It receives no name, no email address and nothing from your invoices.

Usage data

On Android, the app measures how it is used, through Google Analytics for Firebase. It records which screens are opened, and five events:

• a document created — invoice or quotation, which design, how many lines;
• a document sent — invoice or quotation, and whether by email, share or print;
• a quotation converted to an invoice;
• the upgrade screen being shown, and which limit or feature opened it;
• a Pro purchase completing.

Alongside these, Google collects a Firebase app-instance identifier, your advertising identifier, your device model, operating system version and language, the app version, when a session started and how long it lasted, and the approximate location — country and city — that Google works out from your IP address.

No invoice content is included: no client names, no addresses, no amounts, no item descriptions, no notes.

Crash reports

On Android, when the app crashes or hits an error, Firebase Crashlytics sends Google a report: the error and its stack trace, the app version, the device model and operating system version, the state of the device at the time — free memory and storage, for instance — and a Crashlytics installation identifier. We use it to find and fix faults.

The iPhone and iPad app does not switch on Google Analytics or Crashlytics, and sends no usage data or crash reports.

Advertising identifier

The Android app carries Google’s advertising identifier permission so that installs arriving from an advertising campaign can be attributed to it. The app shows no adverts. You can reset or delete the identifier in Android’s Settings, under Privacy, then Ads.

Who processes this data

Google and RevenueCat handle it for us, as service providers. We do not sell it, and we do not share it with anyone else for their own purposes. This website does not use cookies and loads nothing from anyone else’s servers.

Children

InvoiceBoss is a business tool and is not directed at children. We do not knowingly collect information from anyone, of any age.

Your rights

Because your data never reaches us, most data rights are already in your hands:

• Access and portability — export a full backup at any time from Backup & export. It is plain JSON you can read.
• Deletion — delete individual records in the app, or uninstall it to remove everything.

We hold no copy of your invoices to correct or delete on your behalf. Usage data is kept for up to 14 months and crash reports for 90 days, after which Google deletes them; to ask us to delete what has already been collected, write to the address below and we will delete it. Uninstalling the app stops all collection and removes everything held on the phone. Purchase records are held by the App Store or Google Play under their own policies.

Changes to this policy

If the app ever starts collecting something, this page will be updated before that version ships, and the date at the top will change. We will not quietly begin collecting data under an old policy.

Contact

Questions about this policy or about your data: info@bytedroidstudio.com