Privacy Policy

What we store on your device

Everything you create lives in the app's own storage on your phone: your business profile and logo, your clients, your saved items and prices, every invoice and estimate, and the PDFs you generate. We do not copy any of it to a server.

Because it sits on your device, deleting the app also deletes that data. It is worth exporting your data now and then from Settings, then Export all data. The export is a ZIP with your PDFs, spreadsheets, your logo and photos, and a data file. It is a copy for you to keep: the app cannot restore your invoices or estimates from it, though you can import the clients spreadsheet back in.

What we do not collect

We do not ask for your name, email, or phone number to use the app. We do not track your location. We do not read your invoices, your clients, or your amounts. We do not build an advertising profile of you, and we do not sell or rent data to anyone.

The Contacts permission

If you tap Import from Contacts, the app asks your permission and reads your address book for one reason: to create client records on your phone. Your contacts are not uploaded and not shared. You can decline, and everything else in the app still works normally.

Services we rely on

To keep the app stable and to understand which features earn their keep, we use a small number of privacy-conscious services. None of them receive your invoices, clients, or amounts.

• Crash reporting (Sentry). When the app crashes, Sentry sends us a technical report: a random install ID, your device model, OS version, and the part of the code that failed. This helps us fix the bug. We turn off the options that would attach personal information or record your screen.
• Anonymous analytics (PostHog). We log anonymous, aggregate actions, for example that an invoice was shared, tied to a random install ID that is not linked to your name or email. We never send document contents, and screen recording is off.
• Purchases (RevenueCat with Apple and Google). The app asks RevenueCat only when it needs to: when the Pro screen opens (including when you reach the free limit), when you tap Restore purchase, or when you buy, and again when you return to the app in that same session. It does not ask just because you opened the app. The exception is a phone that has already bought Pro, has a purchase that was started and not completed or cancelled, cannot read its own records, or was updated from an older version and has not yet had one successful check: there the app also asks each time it opens, so it can unlock Pro, hear about a refund, or finish a delayed purchase. Each request carries a random ID RevenueCat creates for this install, plus your device and app version. If you do buy InvoiceWright Pro, the App Store or Google Play processes the payment, and RevenueCat keeps track of the receipt so the app can unlock Pro and restore it if you reinstall. We never see your card details.

Sentry and PostHog process this technical data on servers in the European Union.

Turning crash reporting and analytics off

In the EU, the EEA, the UK and Switzerland, crash reporting and analytics start switched off, and nothing is sent until you switch them on. The app decides this from your phone: if its region is in one of those places or its time zone is a European one, or the app cannot read them, they start off. Everywhere else they start on. Whichever way they start, the app keeps any choice you make. Switching crash reporting on starts it at the next launch.

You can turn crash reporting and analytics on or off at any time from Settings, then Privacy and legal. Analytics stops the moment you switch it off. The crash reporter is different: it starts when the app launches and cannot be shut down while the app is running, so it keeps going until you close the app completely and open it again — switching to another app and back is not enough. Until you have done that, it can still send a crash or freeze report, carrying a random install ID, your device model, OS version and the part of the code that failed, or a short record that the app was open and for how long, carrying a random install ID, your device model and OS version. Neither carries your invoices, your clients, or your amounts.

Once you have closed and reopened the app with the switch off, it sends nothing new. Anything recorded before you switched it off that had not been uploaded yet, because the device was offline for example, may still be sent once.

Three further things are not part of that switch and carry on with it off: the update check described below, the App Store or Google Play connection that unlocks or restores a purchase, and the RevenueCat checks described above.

The invoice generator on this website

The free generator on this website runs entirely in your browser. What you type into it is kept in that browser's own storage so the page still has it if you come back, and it is not sent to us or to anyone else — there is no address for it to be sent to. We never see it, and it is not part of any analytics.

The PDF is made by your browser's own print function, on your device. Nothing is uploaded to produce it.

The "Clear this form" button on that page erases the saved draft immediately. Clearing your browser's site data for this website does the same thing.

Links to Google Play on this website

Links to Google Play on this website carry a label naming the kind of page they sit on (for example "trade page"), so Google can count, in total, how many installs come from this website. The label names the page, not you. Links to the App Store carry no label.

Checking for updates

When you open the app it may ask our update service whether a newer version of the app's own code is available. That request carries only what is needed to answer it: the app version, your platform, and a random install ID. It does not carry your invoices, your clients, your amounts, your name, or your location, and nothing about your documents leaves the device as part of it. If an update is available the app downloads the new code, exactly as a store update would, and the check itself works the same way whether you accept it or not.

Purchases and billing

InvoiceWright Pro is a one-time purchase. When you buy it, Apple or Google charges you, shows you the receipt, and handles any refund. We receive a confirmation that the purchase happened, through RevenueCat, so the app can unlock Pro on your devices. We do not store or process your payment method.

Sharing and printing

When you share or print an invoice, the PDF is created on your device and handed to whatever app or printer you choose, such as WhatsApp, your email app, or a nearby printer. From that point on, that app's own privacy policy applies, not ours.

Keeping and deleting your data

Because your data sits on your device, you decide how long it stays. To remove everything, delete the app. To keep a copy first, export your data before you do.

The anonymous crash and usage data described above is kept only as long as we need it to fix bugs and improve the app, and it is never tied to you by name.

Your choices

• Decline the Contacts permission, at install or later in your phone settings.
• Export all of your data at any time from Settings, then Export all data.
• Remove all of your data by deleting the app.
• Email us with any privacy question or request.

Children

InvoiceWright is a tool for running a business and is not directed at children under 13. We do not knowingly collect information from children.

Security

Your data stays inside the app's private storage, protected by your phone's own security. We keep the app updated and use reputable providers for the few services above. No app can promise perfect security, but keeping your data off our servers removes a whole category of risk.

Changes to this policy

If we change this policy, we will update the page and the effective date at the top. If a change is significant, we will do our best to flag it in the app.