The short version
- You can create, preview and export invoices without an account and without an internet connection.
- We only store your data on our servers if you choose to sign in.
- We do not use advertising, analytics or third-party tracking SDKs.
- We do not sell, rent or share your personal data with third parties for their own purposes.
- You can delete your account and all associated data from inside the app at any time.
1. Who we are
Invoicio (“Invoicio”, “we”, “us”) is a mobile invoicing application published by Kreatorz (kreatorz.co).
For privacy questions, contact us at support@kreatorz.co.
2. Information we collect
2.1 Information you provide
| Category | Examples | When |
|---|---|---|
| Account information | Email address; if you use Google Sign-In: your Google account email, display name and profile photo URL | Only when you sign in |
| Business profile | Business name, address, contact details, tax/registration numbers, business logo image | When you fill in your profile |
| Invoice content | Invoice numbers, line item descriptions, quantities, rates, tax and discount values, totals, currency, dates, payment terms, notes, status | When you create invoices |
| Client records | Client name, company, email address, phone number and postal address | When you add clients |
2.2 Information collected automatically
| Category | Detail |
|---|---|
| Anonymous identifier | On first launch the app may create an anonymous Firebase user ID so that work created before sign-in is not lost. It is not linked to your identity unless you sign in. |
| Local device storage | App preferences and your working invoice are cached on your device. Temporary files are created when generating a PDF. |
| Security/operational logs | Our infrastructure provider (Google Firebase) records standard service logs, including IP address and timestamps, for security and reliability. |
2.3 What we do not collect
- ✕ No advertising identifiers (IDFA/AAID) — the app contains no ad SDKs
- ✕ No analytics or behavioural tracking — no Firebase Analytics, no Crashlytics, no third-party analytics
- ✕ No location data
- ✕ No contacts, calendar or microphone access
- ✕ No payment card or bank account details — Invoicio does not process payments
2.4 Device permissions
| Permission | Why | Required? |
|---|---|---|
| Photo library | To select a business logo for your invoices | Optional |
| Camera | To photograph a business logo | Optional |
Images you select are used solely for your invoice branding. They are not scanned or analysed.
3. Your clients’ data — an important note
When you enter details about your clients (name, email, phone, address), you remain the party responsible for that information. In GDPR terms you act as the data controller and Invoicio acts as a data processor on your behalf. You are responsible for having a lawful basis to store your clients’ details and for responding to their privacy requests. We process that data only to provide the service to you, and never for our own purposes.
4. How we use your information
We use your information only to:
- Provide core functionality — generating, storing and exporting your invoices;
- Authenticate you and secure your account;
- Synchronise your invoices, clients and profile across your devices;
- Respond to support requests you send us;
- Maintain the security, integrity and reliability of the service;
- Comply with applicable legal obligations.
We do not use your invoice or client data for marketing, profiling, advertising or model training.
5. Legal bases for processing (GDPR / UK GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the app and syncing your data | Performance of a contract (Art. 6(1)(b)) |
| Account security and fraud/abuse prevention | Legitimate interests (Art. 6(1)(f)) |
| Responding to support enquiries | Legitimate interests / contract |
| Meeting legal or regulatory obligations | Legal obligation (Art. 6(1)(c)) |
6. Who we share information with
We do not sell your data. We share it only with infrastructure providers strictly necessary to run the service:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase (Google LLC / Google Ireland Ltd) — Authentication, Cloud Firestore, Cloud Storage | Account authentication and cloud storage of your invoices, clients, profile and logo | Account info, invoice content, client records, business profile |
Google’s handling of this data is governed by the Firebase Privacy and Security policy and Google’s Privacy Policy.
We may also disclose information if legally required to do so by a valid legal process, or where necessary to protect our rights, safety, or the safety of others.
7. International data transfers
Firebase may store and process data on servers located outside your country, including in the United States. Where data is transferred out of the EEA or UK, Google relies on approved transfer mechanisms such as the European Commission’s Standard Contractual Clauses.
8. Data retention
- Your invoices, clients and profile are retained for as long as your account exists.
- If you delete your account (Settings → Delete account), your account and its associated invoices, clients, business profile and logo are deleted. This action is irreversible.
- Data created before signing in lives only on your device; uninstalling the app removes it.
- Residual copies may persist in encrypted backups for a limited period before being overwritten.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data (most fields are directly editable in the app);
- Delete your data — available immediately in-app via Settings → Delete account;
- Export / portability — export your invoices as PDF at any time from within the app;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise any right not directly available in-app, email support@kreatorz.co. We aim to respond within 30 days.
California residents (CCPA/CPRA): we do not sell or share personal information as those terms are defined by the CCPA, and we do not knowingly process the data of minors under 16. You have the right to know, delete, correct, and to be free from discrimination for exercising these rights.
10. Security
We protect your data using:
- Encryption in transit (TLS) for all network traffic;
- Encryption at rest for data stored in Firebase;
- Per-user access rules — our Firestore and Storage security rules restrict every document and file to the authenticated user who owns it, so no user can read another user’s invoices or clients;
- Delegated authentication — passwords are handled by Firebase Authentication and are never stored by or visible to us.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Children’s privacy
Invoicio is a business tool intended for users aged 16 and over. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact support@kreatorz.co and we will delete it.
12. Changes to this policy
We may update this policy from time to time. Material changes will be signalled by updating the “Last updated” date above and, where appropriate, by an in-app notice. Continued use of Invoicio after changes take effect constitutes acceptance of the revised policy.