Privacy Policy

1. Who we are

This Privacy Policy describes how the AI Invoice mobile application (“App”), operated by the developer published on the Apple App Store under the name associated with the App (Bundle ID com.storstar.aiinvoice), processes personal information.

For privacy-related requests, contact: Privacy@aiinvoice.site.

2. Information we process

2.1 Account and authentication

If you use Sign in with Apple, we process identifiers and profile data that Apple provides with your consent, such as your Apple user identifier, and, if you choose to share them, your name and email address. We use this to create and secure your account and to provide sync and support.

2.2 Business and invoice data

You may enter or import data including: business profiles (name, address, phone, email, tax and banking details, logos, signatures), clients (contact details), catalog items, invoices, PDFs or exports, and related notes. If you use cloud sync, this content is stored on our servers (see Section 4).

2.3 AI chat and invoice assistance

When you use in-app AI features, your messages and related invoice context needed to operate the feature are sent to our backend for processing. Do not submit special categories of data unless necessary; you are responsible for the content you send.

2.4 Device permissions

With your permission, the App may access:

• Contacts — to import contacts as clients.
• Camera — for profile or business logo photos.
• Photo library — to choose images for profile or logo.
• Microphone — for voice input related to invoices.
• Speech recognition — to convert speech to text.

2.5 Local storage

The App stores data on your device so it can work offline or load quickly. Removing the App or using in-app account deletion (see Section 7) affects local copies as described there.

3. Analytics, attribution, and subscriptions

3.1 PostHog (product analytics)

We may use PostHog, Inc. to understand how the App is used. When enabled, PostHog may receive events such as: app launched, onboarding completed, user logged in, business created, chat message sent, PDF generated, client created, item created, invoice created, paywall viewed, subscription purchased, subscription restored, and app error events (including error context such as sync, chat, PDF, or auth failures, HTTP codes, and non-secret error summaries). Data is processed in accordance with PostHog’s terms and privacy policy.

3.2 AppsFlyer (attribution)

We may use AppsFlyer Ltd. for install attribution, sessions, and related measurement. On iOS, if you grant permission via App Tracking Transparency, an advertising identifier may be used for attribution. If you deny tracking, limited measurement may still occur in line with Apple’s rules and AppsFlyer’s configuration.

3.3 RevenueCat (subscriptions)

In-app purchases and subscriptions are processed by Apple. We may use RevenueCat, Inc. to validate entitlements and manage subscription state. RevenueCat may receive purchase-related identifiers and subscription events as needed for that purpose.

3.4 Apple

Apple processes payment and account data in connection with the App Store and Sign in with Apple under Apple’s privacy policy.

4. Hosting, security, and transfer

Application programming interfaces (“API”) and cloud sync are provided using infrastructure such as Cloudflare (workers / edge) and a PostgreSQL database hosted with our cloud provider. Data may be processed in the United States, the European Economic Area, or other regions where our subprocessors operate.

We implement reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure.

5. Purposes and legal bases (EEA/UK)

We process personal information to provide the App, authenticate users, sync data, improve reliability and security, comply with law, and—where enabled—analytics and attribution.

Depending on context, we rely on performance of a contract, legitimate interests (for example, fraud prevention, service improvement, and analytics balanced against your rights), consent (where required, such as tracking or certain permissions), and legal obligation.

6. Sharing

We share information with service providers that help us operate the App (hosting, database, AI processing, analytics, attribution, subscription tooling, email delivery as applicable), and with Apple for App Store and authentication flows. We may disclose information if required by law or to protect rights, safety, and security.

7. Retention and deletion

We retain information while your account is active and as needed to provide the service and for legitimate business purposes (such as security backups, dispute resolution, and legal compliance), then delete or anonymize it consistent with those purposes.

In-app “Delete account” removes local data from your device and signs you out. If you have used cloud sync, copies of your data may remain on our servers until deleted as part of our retention processes. To request deletion of server-side data tied to your account, email Privacy@aiinvoice.site from the address associated with your account, if applicable, and include “Data deletion request” in the subject line. We will verify and process requests where required by law.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, or to data portability. You may also withdraw consent where processing is based on consent. Contact Privacy@aiinvoice.site to exercise these rights. You may lodge a complaint with your local supervisory authority.

California residents: California law may grant additional rights regarding personal information, including the right to know, delete, and opt out of certain “sales” or “sharing” (as defined under California law). We do not sell personal information for money. To exercise rights, contact us at the email above.

9. Children

The App is not directed at children under 13 (or the digital consent age in your region). We do not knowingly collect personal information from children. If you believe we have collected such data, contact us and we will take appropriate steps.

10. International users

If you access the App from outside the country where we operate, your information may be transferred across borders. We use appropriate safeguards where required by law.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may require additional notice where legally required.

12. Disclaimer

This document summarizes our practices in plain language and is not legal advice for you. If you need legal advice, consult a qualified attorney.