Privacy Policy for Zibill - One App for All Your Bills
Last Updated: June 25, 2026
INNOVASIV TECHNOLOGIES PVT. LTD. built the Zibill app as a commercial application for Indian GST billing. This Privacy Policy explains exactly what data Zibill collects, why, how it is stored, and which third-party services receive any portion of it.
INFORMATION WE COLLECT
1.1 Information You Provide
Business Profile Data
When you set up your business in Zibill, you provide:
Business name, address, city, state, pincode
GSTIN (GST Identification Number)
Phone number and email address
UPI ID for payment QR code generation
Bank account number, IFSC code, account holder name, branch name
Business logo image
Signature image
This data is stored exclusively on your device. We never transmit it to our servers.
Party Data (Customers & Suppliers)
Names, GSTINs, addresses, phone numbers, email addresses of your customers and suppliers
Invoice & Transaction Data
Invoices, quotations, purchase orders
Line items with HSN/SAC codes, quantities, rates, GST amounts
Payment records and due dates
Product & Inventory Data
Product and service names, HSN/SAC codes, GST rates, prices, stock levels
All data listed above is stored on your device only. We never upload it to our servers.
1.2 Information Collected Automatically
Subscription Status
When you purchase Zibill Pro, RevenueCat (our subscription management partner) automatically collects:
An anonymous device identifier
Subscription status and purchase history
Google Play purchase receipt/token
Device OS version, app version, country, device locale
Phone number (used as your account identifier to enable Pro subscription restore if you reinstall the app or switch devices)
Firebase Initialization & Phone Authentication
Zibill uses Firebase Core for app startup. A basic registration ping is sent to Google Firebase servers on each app launch containing the app identifier.
When you sign in to Zibill, your phone number is sent to Google Firebase Authentication to generate and verify a one-time password (OTP). Firebase may temporarily store your phone number for OTP delivery and verification per Google's Firebase Privacy Policy. We do not use Firebase Analytics or Crashlytics.
Google AdMob (Advertisements)
Zibill shows ads to free users via Google AdMob. AdMob automatically collects an advertising ID (Android Advertising ID) from your device to serve relevant ads. Pro subscribers do not see ads. AdMob's data collection is governed by Google's privacy policy.
1.3 Information from Third-Party Sources
GST Portal Lookup
When you enter a GSTIN to auto-fill party details, the App contacts the official Indian Government GST Portal (services.gst.gov.in). The GSTIN you entered is sent to the portal. The portal returns the publicly registered business name, address, city, state, and pincode for that GSTIN. This data is saved locally on your device only.
Postal Pincode Lookup
When you enter a pincode in business setup or party creation, the App contacts the Indian Postal Pincode API (api.postalpincode.in) to auto-fill city and state. Only the 6-digit pincode is sent. No personal data is transmitted. The returned city/state is saved locally on your device only.
Bank IFSC Lookup
When you enter your bank IFSC code in business settings, the App contacts the Razorpay IFSC API (ifsc.razorpay.com) to auto-fill your bank name and branch. Only the 11-character IFSC code is sent. No personal data is transmitted. The returned bank details are saved locally on your device only.
HOW WE USE YOUR INFORMATION
Business profile - Generate GST invoices, PDFs, UPI QR codes
Party details - Auto-fill invoice forms, track payments
Invoice data - Billing records, GST reports, payment reminders
Google account email - Authenticate Google Drive backup only
Subscription status - Unlock Pro features in the App
GSTIN lookup result - Pre-fill party name and address in forms
Phone number — Sign in via OTP verification, restore Pro subscription if you reinstall or switch devices
Your data is used only to make the app work. Free users see ads served by Google AdMob. Pro subscribers have no ads, marketing, or selling to third parties.
HOW WE SHARE YOUR INFORMATION
We do not sell your personal data. We share only the minimum data required with each service listed below to make the app work.
Your data is only shared with these services to make the app work:
Google Drive — your backup files (optional)
RevenueCat — to verify Pro subscription and restore purchases across devices (receives your phone number as account identifier)
WhatsApp — when YOU choose to share an invoice
GST Portal — to look up GSTIN business details
Google Play — to process Pro subscription payment
Google AdMob — to serve ads to free users (advertising ID only)
Firebase Authentication — to verify your phone number via OTP during sign-in
We have no control over how these services handle data. Please read their privacy policies linked in the Third-Party Services section below.
DATA STORAGE & SECURITY
Local Storage
All your business data — invoices, parties, products, payments — is stored in a secure local database on your device. This data is protected by Android's built-in security and is not accessible to other apps.
No Backend Server
Zibill does not operate any backend server. We do not store your business or invoice data on our servers.
Network Security
All network connections use secure encrypted connection. Unsecured connections are not allowed.
Google Drive Backup
Backup files are stored in your personal Google Drive protected by your Google account security. We strongly recommend enabling two-factor authentication on your Google account.
Device Security
We recommend using device lock screen protection (PIN, fingerprint, or pattern) to protect your financial data stored on the device.
DATA RETENTION
Business data, invoices, parties - Stored on your device until you uninstall the App
Generated PDF invoices - Stored on your device until you manually delete them
Google Drive backup files - Stored in your Google Drive until you delete them
GST portal lookup result - Stored locally until you delete the party record
Phone number (Firebase Auth) — Deleted from Firebase servers after OTP verification is complete
RevenueCat user account (phone number) — Retained per RevenueCat's privacy policy; contact admin@innovasivtech.com to request deletion
YOUR DATA RIGHTS
You have the right to:
All your data is on your device — only you can access it.
Delete your data — uninstall the App to delete all local data
Delete backup — manually delete "Zibill Backups" folder from your Google Drive
For any data requests:
Email: admin@innovasivtech.com
We will respond within 7 business days.
For a step-by-step guide to delete your account and data, visit our Delete Account page.
THIRD-PARTY SERVICES
Google Sign-In - Google - Drive backup authentication - https://policies.google.com/privacy
Google Drive API - Google - Optional data backup - https://policies.google.com/privacy
Firebase Core & Authentication - Google - App initialization and phone OTP sign-in - https://firebase.google.com/support/privacy
GST Portal - Govt. of India - GSTIN business lookup - Govt. of India, IT Act 2000
RevenueCat - RevenueCat Inc. - Pro subscription verification - https://www.revenuecat.com/privacy
Google Play - Google - In-app purchase processing - https://policies.google.com/privacy
WhatsApp - Meta - Invoice PDF sharing (user-initiated) - https://www.whatsapp.com/legal/privacy-policy
Google AdMob - Google - Ads for free users - https://policies.google.com/privacy
Postal Pincode API — api.postalpincode.in — Address auto-fill — Pincode sent, city/state returned — https://www.indiapost.gov.in
Razorpay IFSC API — Razorpay — Bank name auto-fill — IFSC code sent, bank details returned — https://razorpay.com/privacy/
DATA SAFETY — GOOGLE PLAY DECLARATION
For transparency, here is exactly what we declare in the Google Play Data Safety section:
Data Collected:
Email address — collected for Google Drive backup authentication (not shared with us)
Photos/images — business logo selected from gallery, stored locally only
Financial info — Pro subscription purchase status via Google Play / RevenueCat
Device identifiers — anonymous ID used by RevenueCat for subscription verification and by Google AdMob for ad serving
Phone number — collected for sign-in authentication (Firebase OTP) and Pro subscription restore across devices (RevenueCat)
We do not collect your location, contacts, camera, microphone, or browsing history.
All data sent over internet is fully secured and protected. To delete your data, email: admin@innovasivtech.com
Children's Privacy
Zibill does not knowingly collect information from children under 13.
Changes to This Policy
We may update this policy. Changes will be posted on this page with an updated date.
Contact Us
For questions about this Privacy Policy, contact us at:
admin@innovasivtech.com