Privacy Policy

Effective 21 October 2026 · Last updated 21 October 2026

Contents

1. Who we are
2. What this policy covers
3. Data kept on your iPhone
4. Data that leaves your iPhone
5. Device permissions
6. Your clients' information
7. Service providers
8. Why we process data
9. How long we keep it
10. Your rights
11. Deleting your account
12. Where data is stored
13. Security
14. Children
15. Changes to this policy
16. Contact and grievances

1. Who we are

Invoicy is provided by Kaizentechservice, Flat 607, Elephanta Business Hub, Block A, Dabholi, Near Haridarshan Society, Surat, Gujarat 395004, India ("we", "us"). For personal data that Invoicy processes for its own purposes, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

2. What this policy covers

This policy covers the Invoicy iPhone app, the document and payment pages Invoicy creates for your clients, and this website. It explains what personal data is involved, why, who else handles it, and the choices you have.

3. Data kept on your iPhone

Invoicy is built to work without a connection. Everything you enter is stored in a database on your device:

• your business profile (name, address, phone, email, tax and bank details you choose to add, logo);
• clients and their contact details;
• estimates, invoices, receipts and other documents, with their line items, notes and payments;
• jobs, time entries, expenses, saved items and message templates;
• photos, signatures and on-site time and location stamps you capture.

We cannot see this data. It stays on your device until you delete it, delete the app, or turn on a feature that sends part of it, described below.

4. Data that leaves your iPhone

This table lists everything Invoicy can send, so that nothing is collected without being described. Some features (card payments, and sending email or text messages through Invoicy’s servers) are not switched on in every version of the app; those rows apply only once a feature is available and you turn it on.

When you share a document through WhatsApp, Mail, Messages or another app on your phone, that app sends it under its own privacy policy, not ours.

We do not use advertising or tracking SDKs, we do not read your phone’s advertising identifier, and we do not combine your data with data from other companies. The only analytics are the anonymous usage events described above, which you can switch off at any time in Settings › Usage data. Switching them off stops collection and resets the anonymous identifier.

5. Device permissions

Invoicy asks for a permission only when you first use the feature that needs it. You can change any of these at any time in iPhone Settings › Invoicy.

6. Your clients' information

When you add a client to Invoicy, you decide what to record and what to send them. For that data you are responsible for having a lawful reason to process it, and we process it on your instructions, only to provide the features you use. If one of your clients asks us about their data, we will refer them to you.

7. Service providers

We use these companies to run the features above. Each may process data only to provide its service to us.

• Google (Firebase) — sign-in, app settings, anonymous usage analytics, backup and sync, document links. Firebase privacy
• Stripe — payout accounts and card payments. Stripe privacy
• Resend — sending emails you ask Invoicy to send. Resend privacy
• Twilio — sending text messages you ask Invoicy to send. Twilio privacy
• Apple — App Store purchases and subscriptions. Apple privacy
• RevenueCat — verifying subscription purchases and reporting whether Pro is active. RevenueCat privacy

We may also disclose data where Indian law requires it, for example in response to a valid order from a court or authority.

8. Why we process data

• To provide the features you use — sync, document links, payments and messages. You give your consent by turning these on, and you can withdraw it by turning them off.
• To keep Invoicy secure and working — preventing abuse of links and payment pages, and fixing problems you report.
• To meet legal obligations — for example, tax and accounting records for subscriptions.

We do not use your data for advertising and we do not sell it.

9. How long we keep it

• Data on your iPhone stays until you delete it or the app.
• Synced data and document links stay until you delete them or delete your account.
• Records of messages sent through Invoicy (recipient, time and delivery status) are kept with your synced data and removed with your account.
• Stripe and Apple keep payment records for the periods their own laws require.
• Anonymous usage events are kept by Google for up to 14 months, then deleted.
• Support emails are kept for up to 24 months, then deleted.

10. Your rights

Under the DPDP Act you have the right to:

• get a summary of the personal data we process about you and who we have shared it with;
• have inaccurate or incomplete data corrected or updated;
• have your data erased when it is no longer needed, or when you withdraw consent;
• withdraw consent at any time, as easily as you gave it;
• nominate another person to exercise these rights if you die or become unable to;
• have a grievance handled by us, and then escalate it to the Data Protection Board of India.

Most of your data is already in your hands: you can view, edit and export it in the app. For anything else, email support@invoicy.co. We will reply within 30 days. If you live outside India, you may have similar rights under your local law, and we will honour those requests in the same way.

11. Deleting your account

In Invoicy, go to Settings › Company and tap Delete my account and data. This permanently removes every client, document, job and photo from your phone, plus your account, synced data and any shared document links. It cannot be undone. An active App Store subscription is not cancelled automatically; cancel it in iPhone Settings › your name › Subscriptions.

12. Where data is stored

Synced data is stored on Google Cloud servers, which may be located outside India. Our service providers may also process data in other countries. We transfer data only where the DPDP Act allows it, and we require providers to protect it.

13. Security

Data is encrypted in transit. Synced data is stored under your account and protected by access rules that allow only you to read or write it. Document links use long random secrets that are not stored in readable form. No system is perfectly secure; if a personal data breach affects you, we will notify you and the Data Protection Board as the law requires.

14. Children

Invoicy is a business tool for adults. It is not intended for anyone under 18, and we do not knowingly process children's personal data.

15. Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app before it takes effect.

16. Contact and grievances

We acknowledge grievances within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.