Privacy Policy

Overview

InvoiceGo helps contractors create estimates, invoices, and track the business behind them. This policy describes, in plain terms, what data the app collects, why, where it goes, and the choices you have over it. It is not a substitute for legal advice.

Information You Provide

• Account details: name, email, company name, trade type, phone and business address.
• Business records you create: clients, estimates, invoices, line items, payments, expenses, team members, and payslips.
• Optional images you choose to add: a company logo, expense receipts, and document attachments.

Information From Your Device

A few features ask for device permissions, only when you use that feature:

• Contacts — to import a client and pre-fill their name, phone, email, address, and (if the contact has one) their photo.
• Camera and Photo Library — to set a company logo, attach a document, or photograph an expense receipt.
• Face ID — if you turn on biometric sign-in or app-lock. Your face data is never seen by InvoiceGo or leaves your device — iOS handles the scan and only tells the app "yes" or "no."

You can revoke any of these permissions at any time in iOS Settings; the related feature will simply stop working until you turn it back on.

How We Use Your Information

Your data is used solely to run the app for you: rendering your dashboard and documents, generating PDFs, calculating totals and taxes, and syncing your records across your own devices. We do not use it to train AI models, build advertising profiles, or for any purpose unrelated to providing the app.

Where It Is Stored & How It Is Protected

Business data is encrypted at rest on your device (AES-256, via an on-device database) and synced to your private account in our cloud database so you can restore it if you change or lose your phone. Every account is isolated at the database level — Row Level Security policies mean one account can never query another account's rows, even in the event of an application bug.

Third-Party Services We Use

InvoiceGo relies on a small number of infrastructure providers to function, each only for the specific job described:

• Supabase — authentication, database, and file storage for your synced data and uploaded images.
• Apple — if you choose "Continue with Apple," Apple handles that sign-in and we receive only the identifier and email Apple shares with your consent. Apple's Push Notification service also delivers Time Clock alerts (e.g. a team member clocking in) to your device.
• Sentry — crash and error reporting, and only in app builds where it has been explicitly enabled (see "Crash Reports" below).

None of these providers may use your data for their own advertising or resell it, and we do not use any advertising or cross-app tracking SDKs.

What We Do NOT Do

• We do not sell or rent your data to third parties.
• We do not read your invoices, clients, or business records for any purpose beyond troubleshooting a support request you send us.
• We do not run advertising or cross-app tracking SDKs, and we do not build an advertising profile of you.
• Push notifications are limited to Time Clock alerts (a team member clocking in or out) — we don't use push for marketing, engagement nudges, or anything else.

Your Rights & Choices

• Access & export — every record you own can be exported as CSV directly from Settings → Export Data, at any time, without contacting us.
• Correction — edit or delete any client, invoice, estimate, expense, or team member directly in the app.
• Deletion — deleting a record removes it from your device and the cloud. To delete your entire account and all associated data, contact us at iamkolex@gmail.com; we will confirm once it's done.

If you are in the EU/UK or California, these map to the access, rectification, erasure, and portability rights you have under GDPR and the CCPA/CPRA respectively; we honor the same rights for every user regardless of location.

Data Retention

We keep your data for as long as your account is active. If you delete a record or your account, it is removed from active systems promptly; backups that briefly retain deleted data age out on a routine cycle and are not queryable through the app.

Invoice View Tracking

When you send an invoice by email, it includes a "View Invoice Online" link. If your client opens it, we record that the invoice was viewed and when, so you can see its status — we do not collect anything else about your client from that link.

Team Time Clock & Location Data

If you use InvoiceGo's Time Clock feature, each team member gets a personal web link to clock in and out of their shifts — no app install required on their end. When they do, that page records their device's location at the moment of clock-in and clock-out, and only while that page is open; it does not track their location afterward or in the background. This location, along with clock-in/out times, is visible to you as the business owner in the app. Team members are shown a notice on the clock page and must agree before their location is ever collected.

We send you a push notification when a team member clocks in or out. That notification contains only their name and a time or hours total — nothing else about them is shared with or stored by any push provider.

Children's Privacy

InvoiceGo is a business tool intended for contractors and other adults running a business. It is not directed at children, and we do not knowingly collect information from anyone under 16.

Crash Reports

If crash reporting is enabled for your app build, anonymized error reports may be sent to Sentry, our error-tracking service, to help us fix bugs. These reports contain technical details (e.g. a stack trace) and never your business data.

PDFs You Share

When you share or print a document, the PDF is generated on your device and handed to the app you choose (Mail, Messages, etc.). Where it goes from there is controlled by you and that app, not by us.

International Users

Your data is processed on our cloud provider's infrastructure, which may be located in a different country than you. Wherever it's processed, it remains protected under the safeguards described in this policy.

Changes to This Policy

If this policy changes in a way that materially affects how your data is handled, we'll update the date below and, where appropriate, let you know in the app.

Contact

Questions about this policy, or a request to access, correct, or delete your data: iamkolex@gmail.com