Invoice Choice Privacy Policy
Last updated: November 1, 2026
Invoice Choice ("the App", "we", "us") is an invoicing app for freelancers and small businesses. This policy explains what information the App collects, where it is kept, who else handles it, and the choices you have. We have tried to say it plainly. If anything is unclear, write to us at choiceinvoiceapp@gmail.com.
The short version
Your invoices, clients and other business data are stored on your device and synced to our servers. They are not kept on your device only.
You do not create an account. The App signs you in anonymously. There is no email address or password.
Some features send data to other services we use to run the App. They are listed below. This includes sending receipt photos to an AI service when you use receipt scanning.
We use AppsFlyer to measure which ad or campaign led to your installing the App. This only happens if you allow tracking when asked (App Tracking Transparency on iOS, or your Android ad settings). We do not sell your information, and we do not show ads inside the App.
If you delete the App, the copy on our servers stays until you ask us to remove it.
Information we collect
Information you enter or add
Business profile: your business name, email, phone, address, website, logo, signature and the name printed under it, currency, default tax rate, and your invoice appearance choices (template, accent colour, background).
Clients: names, email addresses, phone numbers and addresses of the people and businesses you invoice.
Invoices and quotes: line items, amounts, tax, dates, status, notes, payment terms and invoice numbers.
Expenses: vendor, date, category, amounts and tax, notes, and photos of receipts that you attach.
Recurring schedules: the repeating invoices you set up, and when they run.
Reminder settings: whether payment reminders are on and when they should go out.
Client portal links: the shareable online invoice links you create, with their expiry date and how many times each has been opened.
Support messages: if you use Contact Support, the category you choose, your message, and the email address you may optionally give so we can reply.
Information collected automatically
Anonymous session: when you first use the App it creates an anonymous identifier on your device. All of your synced data is tied to it.
Advertising identifier: if you allow tracking when asked (the App Tracking Transparency prompt on iOS, or your Android ad permissions), we collect your device's advertising identifier so AppsFlyer can tell us which ad campaign, if any, led to your install. If you decline, no advertising identifier is collected and this is skipped entirely.
Receipt scanning records: when you scan a receipt we keep a simple usage record (that a scan happened, when, and technical counts used to apply usage limits). It does not contain the photo or what was read from it.
Support technical details: a support message also records your device platform (iOS or Android), the App version, the time sent, and your anonymous identifier.
Subscription status: whether you have an active Pro subscription, handled by RevenueCat (see below).
Standard server logs: the services that host the App record ordinary technical details, such as IP addresses and request times, for security and reliability.
Photos and camera. The App asks for access to your camera and photo library only to let you choose a logo or take or pick a receipt photo. It does not read your other photos. A receipt photo you attach to an expense is saved with that expense. A photo you scan is sent for reading as described under "Anthropic" below, and is saved only if you attach it to an expense.
What we do not collect. We do not see or store your payment card details. We do not collect your location. We do not show ads inside the App, and we do not sell your information to anyone. Our only use of an advertising identifier is described above, to measure our own ad campaigns through AppsFlyer — and only if you allow it.
Crash and error reporting. We use Sentry to automatically detect when the app crashes or encounters an error, so we can fix problems quickly. This includes technical information like your device model, operating system version, app version, and the technical details of what went wrong — never your invoices, clients, or business data.
Where your information is stored
Your data is kept in a database on your device, and the App syncs it to a backend that we run on Supabase. This lets your data be backed up and lets the features below work. Logo, signature and receipt photos are stored as files in private storage that only your session can access. Supabase is described below.
Services that handle your information
We use these providers to run the App. Each handles only what its job needs and has its own privacy policy.
Supabase stores and syncs your data as described above and runs our server functions. Everything in "Information we collect" that you enter is stored there. See supabase.com/privacy.
Resend sends emails on our behalf. It handles two kinds of email:
Payment reminders to your clients. If you turn on payment reminders (a Pro feature), we email your client on your behalf before and after an invoice is due. The email contains your client's name and email address, the invoice number, amount and due date, your business name and contact details, and, if available, a link to the invoice online. Replies go to the business email on your profile.
Support messages to us. When you use Contact Support, your message is emailed to us.
See resend.com/legal/privacy-policy.
RevenueCat manages subscriptions. It receives a random App user identifier and your purchase and subscription status so we can tell whether Pro is active. We also check this status from our servers before running Pro features such as reminders. See revenuecat.com/privacy.
AppsFlyer measures which ad campaign, if any, led to your installing the App. It receives a device advertising identifier only if you allow tracking when asked, plus basic device and install information. This is used only to measure our own ad campaigns and is not used to track you across other companies' apps or websites for their own purposes. See appsflyer.com/privacy-policy.
Apple App Store and Google Play process all purchases and subscription billing. We never receive your card details. Apple's and Google's own policies cover those transactions. Apple and Google may also share anonymous, aggregated crash and usage statistics with us if you have allowed it in your device settings.
Anthropic provides the AI that reads receipts. When you use receipt scanning (a Pro feature), the photo of the receipt is sent from the App to our server and on to Anthropic, which reads it and returns the details it finds, such as the vendor, date, items, tax and total, so you can review them and save them as an expense. We do not keep a copy of the photo from the scan itself, and we send Anthropic only the photo and your business currency, not your name, email or any other details from your profile. Receipt photos can contain personal or financial information, so only scan what you are happy to have read this way. Scanning is limited per person per day and per month. See anthropic.com/legal/privacy.
The client portal
When you use the client portal (a Pro feature), you can create a link to a single invoice and share it with your client. Anyone who has the link can open it, and what they see is that invoice: its line items, amounts, dates, notes, your business name and logo, and your business contact email. We cannot tell who opens a link. We only count how many times it has been opened.
A link works for one invoice only. It expires (after 180 days by default, and never after more than a year) and you can turn it off yourself at any time.
Deleting the invoice, or turning the link off, stops it working.
Links are long random codes and are not listed or searchable. Treat a link like the invoice itself: send it only to people you want to see it.
We do not keep the link itself, only a scrambled form of it, so we cannot show it to you again. The App can create a new one.
Your anonymous session
You do not sign up and there is no login. The App gives each installation an anonymous session, and your data belongs to that session. This means:
We do not know your name or email address unless you put them in your business profile or a support message.
There is no password to forget, and no way to sign in to the same data on another phone.
If you delete the App or clear its data, the session is lost. The data it created stays on our servers, but it is no longer reachable from the App. A new installation starts empty and cannot see it.
How long we keep information
While you use the App: your synced data is kept so the App can work.
Things you delete in the App: invoices, quotes, clients and similar records are marked as deleted and no longer show in the App, but a copy remains on our servers until we remove it, which we do on request. Receipt photos are permanently removed 30 days after you delete the expense they belong to.
Portal links: removed from our database 90 days after they expire or are turned off.
Support messages: kept until they are no longer needed for support or until you ask us to delete them.
Receipt scanning usage records: kept as simple counts for as long as we run the service, and deleted on request.
Advertising identifier: AppsFlyer keeps install-attribution data according to its own retention policy; we do not store your advertising identifier ourselves beyond what's needed to pass it to AppsFlyer at install time.
Technical job logs: deleted after 30 days.
If you delete the App: nothing is removed from our servers automatically. To have your data erased, ask us (see below).
Deleting your data and your other rights
You can ask us at any time to:
delete the data held for you, including your synced business data and any support messages;
tell you what we hold about you, or give you a copy;
correct something that is wrong.
Email choiceinvoiceapp@gmail.com from any address. Because there are no accounts, we find your data by what is in it. Please tell us the business name and email address you used in the App, and for support messages the email you gave. If you no longer have the App and cannot give us details that match, we may not be able to find your data. We will reply, and delete what you ask us to delete, within a reasonable time. Some data may remain for a short while in backups. Your clients can also ask us to remove their details; if so, they should include the business that invoiced them.
Depending on where you live, you may have further rights under local law. Contact us and we will do what we reasonably can.
Records held by RevenueCat, Apple, Google and AppsFlyer, such as your subscription and purchase history or install-attribution data, are kept by them. We can help you contact them. To manage a subscription, use your Apple ID or Google Play settings. To opt out of ad tracking, use your device's tracking/ad settings — declining the App Tracking Transparency prompt (iOS) or turning off ad personalization (Android) stops the advertising identifier from being collected.
Who we share information with
We share information only with the providers listed above, only so the App can do what you ask, and when the law requires it. We do not sell your information or your clients' information. We do not show advertising inside the App.
Your clients' information
The client details you add belong to you. We process them only to provide the App to you: showing them in the App, putting them on your invoices, and emailing your clients reminders if you switch that on. You are responsible for having a proper reason to hold your clients' details and to email them.
Security
Data is sent over encrypted connections. Files are kept in private storage, and each person's records can only be reached by their own session. No system is completely secure, so we cannot promise absolute security, and you should keep your device protected.
Children's privacy
Invoice Choice is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you think a child has given us information, contact us and we will delete it.
Changes to this policy
We may update this policy as the App changes. When we do, we will change the "Last updated" date above. If a change makes a significant difference to how we handle your information, we will point it out inside the App.
Contact us
For privacy questions, deletion requests, or help with anything in this policy, email: choiceinvoiceapp@gmail.com.