The short version
- You can create, preview and export invoices without an account and without an internet connection.
- We only store your data on our servers if you choose to sign in.
- We show ads using Google AdMob. AdMob uses a device/advertising identifier for advertising; on iOS we ask for your permission first (App Tracking Transparency).
- We do not use your invoice or client data for advertising, and we do not sell or rent your personal data.
- You can delete your account and all associated data from inside the app at any time.
1. Who we are
Invoicio (“Invoicio”, “we”, “us”) is a mobile invoicing application published by Kreatorz (kreatorz.co).
For privacy questions, contact us at support@kreatorz.co.
2. Information we collect
2.1 Information you provide
| Category | Examples | When |
|---|---|---|
| Account information | Email address; if you use Google Sign-In: your Google account email, display name and profile photo URL | Only when you sign in |
| Business profile | Business name, address, contact details, tax/registration numbers, business logo image | When you fill in your profile |
| Invoice content | Invoice numbers, line item descriptions, quantities, rates, tax and discount values, totals, currency, dates, payment terms, notes, status | When you create invoices |
| Client records | Client name, company, email address, phone number and postal address | When you add clients |
2.2 Information collected automatically
| Category | Detail |
|---|---|
| Anonymous identifier | On first launch the app may create an anonymous Firebase user ID so that work created before sign-in is not lost. It is not linked to your identity unless you sign in. |
| Advertising identifier | Our advertising partner, Google AdMob, uses a device/advertising identifier (Apple IDFA / Android Advertising ID) and ad-interaction data to serve and measure ads. See section 3. |
| Local device storage | App preferences and your working invoice are cached on your device. Temporary files are created when generating a PDF. |
| Security/operational logs | Our infrastructure provider (Google Firebase) records standard service logs, including IP address and timestamps, for security and reliability. |
2.3 What we do not collect
- ✕ No separate analytics or crashlytics SDKs — no Firebase Analytics, no Crashlytics
- ✕ No location data
- ✕ No contacts, calendar or microphone access
- ✕ No payment card or bank account details — Invoicio does not process payments
2.4 Device permissions
| Permission | Why | Required? |
|---|---|---|
| Photo library | To select a business logo for your invoices | Optional |
| Camera | To photograph a business logo | Optional |
| Tracking (iOS) | On iOS, the App Tracking Transparency prompt asks permission to use the advertising identifier for personalised ads. If you decline, ads may still show but are not personalised. | Optional |
Images you select are used solely for your invoice branding. They are not scanned or analysed.
3. Advertising (Google AdMob)
Invoicio displays advertising provided by Google AdMob (Google LLC / Google Ireland Ltd) to help keep the app free. To serve and measure these ads, AdMob may collect and process:
| Data | Purpose | Used for tracking? |
|---|---|---|
| Device / advertising identifier (Apple IDFA, Android Advertising ID) | Serving and measuring ads; frequency capping; limiting repetitive ads | Yes |
| Product interaction (ad impressions, taps) | Measuring ad performance and fraud/abuse prevention | Yes |
| Coarse device/technical data (device type, OS, approximate region from IP) | Serving ads appropriate to the device and region | Yes |
On iOS 14.5 and later we present Apple’s App Tracking Transparency prompt before the advertising identifier is used for tracking. If you do not grant permission, ads may still be shown but will not be personalised. You can change this at any time in iOS Settings → Privacy & Security → Tracking. On Android you can reset or delete your Advertising ID in system settings.
Google’s use of this data is governed by how Google uses information from partners’ sites/apps and Google’s Privacy Policy. We do not share your invoice content, client records or business profile with AdMob.
4. Your clients’ data — an important note
When you enter details about your clients (name, email, phone, address), you remain the party responsible for that information. In GDPR terms you act as the data controller and Invoicio acts as a data processor on your behalf. You are responsible for having a lawful basis to store your clients’ details and for responding to their privacy requests. We process that data only to provide the service to you, and never for our own purposes.
5. How we use your information
We use your information only to:
- Provide core functionality — generating, storing and exporting your invoices;
- Authenticate you and secure your account;
- Synchronise your invoices, clients and profile across your devices;
- Display and measure advertising through Google AdMob (see section 3);
- Respond to support requests you send us;
- Maintain the security, integrity and reliability of the service;
- Comply with applicable legal obligations.
We do not use your invoice or client data for marketing, profiling, advertising or model training.
6. Legal bases for processing (GDPR / UK GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the app and syncing your data | Performance of a contract (Art. 6(1)(b)) |
| Personalised advertising (where you consent via the ATT prompt) | Consent (Art. 6(1)(a)) |
| Non-personalised advertising and ad measurement | Legitimate interests (Art. 6(1)(f)) |
| Account security and fraud/abuse prevention | Legitimate interests (Art. 6(1)(f)) |
| Responding to support enquiries | Legitimate interests / contract |
| Meeting legal or regulatory obligations | Legal obligation (Art. 6(1)(c)) |
7. Who we share information with
We do not sell your data. We share it only with infrastructure and advertising providers strictly necessary to run the service:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase (Google LLC / Google Ireland Ltd) — Authentication, Cloud Firestore, Cloud Storage | Account authentication and cloud storage of your invoices, clients, profile and logo | Account info, invoice content, client records, business profile |
| Google AdMob (Google LLC / Google Ireland Ltd) — Advertising | Serving and measuring in-app ads | Device/advertising identifier, ad-interaction data, coarse device/technical data (see section 3) |
Google’s handling of this data is governed by the Firebase Privacy and Security policy, the Google Ads policy and Google’s Privacy Policy.
We may also disclose information if legally required to do so by a valid legal process, or where necessary to protect our rights, safety, or the safety of others.
8. International data transfers
Firebase and AdMob may store and process data on servers located outside your country, including in the United States. Where data is transferred out of the EEA or UK, Google relies on approved transfer mechanisms such as the European Commission’s Standard Contractual Clauses.
9. Data retention
- Your invoices, clients and profile are retained for as long as your account exists.
- If you delete your account (Settings → Delete account), your account and its associated invoices, clients, business profile and logo are deleted. This action is irreversible.
- Data created before signing in lives only on your device; uninstalling the app removes it.
- Advertising data is retained by Google in line with Google’s own retention policies.
- Residual copies may persist in encrypted backups for a limited period before being overwritten.
10. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data (most fields are directly editable in the app);
- Delete your data — available immediately in-app via Settings → Delete account;
- Export / portability — export your invoices as PDF at any time from within the app;
- Object to or restrict certain processing, including withdrawing advertising consent via the iOS Tracking setting;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise any right not directly available in-app, email support@kreatorz.co. We aim to respond within 30 days.
California residents (CCPA/CPRA): we do not sell personal information for money. The use of an advertising identifier for personalised ads may be considered “sharing” for cross-context behavioural advertising under the CPRA; you can opt out on iOS by declining the App Tracking Transparency prompt (or in iOS Settings → Privacy & Security → Tracking) and on Android by resetting or deleting your Advertising ID. We do not knowingly process the data of minors under 16. You have the right to know, delete, correct, and to be free from discrimination for exercising these rights.
11. Security
We protect your data using:
- Encryption in transit (TLS) for all network traffic;
- Encryption at rest for data stored in Firebase;
- Per-user access rules — our Firestore and Storage security rules restrict every document and file to the authenticated user who owns it, so no user can read another user’s invoices or clients;
- Delegated authentication — passwords are handled by Firebase Authentication and are never stored by or visible to us.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children’s privacy
Invoicio is a business tool intended for users aged 16 and over. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact support@kreatorz.co and we will delete it.
13. Changes to this policy
We may update this policy from time to time. Material changes will be signalled by updating the “Last updated” date above and, where appropriate, by an in-app notice. Continued use of Invoicio after changes take effect constitutes acceptance of the revised policy.