My Invoice and Bill Maker Privacy Policy

My Invoice and Bill Maker ("Invoice") is a free, ad-supported invoice and billing app that keeps your business data on your device. It is developed and maintained by Prachi, an independent developer, who you can reach any time at support@elevatedev.co.in.

This privacy policy took effect on the "last updated" date shown above (August 28, 2026). It explains, in plain language, what data the app handles, how that data is used, and — just as importantly — what the app does not do.

The short version: your billing data — invoices, estimates, clients, payments, expenses and reports — is stored in a SQLCipher-encrypted database on your device and is never sent to the developer, sold, or used to target ads. There is no account, no online AI, no analytics and no server operated by the developer for that data. Every feature is free and there are no in-app purchases of any kind: Invoice is funded by a single banner ad served by Google AdMob, which uses the Android Advertising ID and standard ad-request data. In the EEA, the UK and Switzerland you are asked for your advertising consent before any ad loads, and you can change that choice at any time in the app's settings. The app also offers an optional, opt-in Google Drive backup, described in full below: off by default, it uploads one encrypted file to a hidden folder in your own Google Drive only after you tap Connect Google Drive and grant access yourself — the developer never sees it, and it is account-protected rather than end-to-end encrypted, as explained below. A local encrypted export/backup file also works today, entirely offline. The app therefore uses the internet for advertising and, if you connect it, for the Google Drive backup.

Invoice has no user accounts, no sign-in, no cloud database and no server operated by the developer for your billing data, so Prachi has no technical means to see, access or recover it. Everything you enter — invoices, estimates, clients, payments, expenses, taxes and reports — stays on your device, in a SQLCipher-encrypted database, and is never used to target ads.

One kind of data leaves your device routinely: because the app is funded by advertising, Google AdMob processes the Android Advertising ID and standard ad-request data to serve and measure the banner ad (see "Advertising (Google AdMob)"). A second kind leaves your device only if you choose it: the optional Google Drive backup, described under "Google Drive Backup" below, uploads a single encrypted file containing your invoices, estimates, clients, payments, expenses and business profiles to a hidden, app-only folder in your own Google Drive — off by default, and only after you connect it yourself. Beyond advertising and that opt-in backup, nothing is transmitted: there is no online AI, no analytics, and your billing data is never used to target ads.

To do its job, Invoice stores the following information locally, in the app's private storage on your device. This data stays on the device ONLY — it is never uploaded, transmitted, sold or shared:

• Your business profile: name, address, contact details, tax registration (GSTIN / VAT number / generic tax ID), logo, signature image and, if you choose to enter them, bank account, IFSC, IBAN, SWIFT, routing or UPI payment details.
• Your billing documents — invoices, estimates, quotes, delivery challans, purchase orders, receipts and credit notes — and the client and customer records (names, addresses, tax IDs and contact details), line items, payments and expenses behind them.
• Templates, currency and tax-module preferences, automation (recurring invoice and payment-reminder) settings, and any receipt or document attachments you add — stored in the app's private storage.
• In-app preferences and, if you enable the optional app lock, a salted PBKDF2 hash of your PIN — never the PIN itself.
• PDF documents, CSV exports and encrypted local backup files you generate, saved only to folders you choose.

In the categories used by Google Play's Data Safety section, the information Invoice handles falls under:

• Financial information (your invoices, estimates, quotes, delivery challans, purchase orders, receipts, credit notes, payments, expenses and tax figures, including any bank account, IFSC, IBAN, SWIFT, routing or UPI details you choose to print on a document) — stored on-device only, unless you opt in to the encrypted Google Drive backup described under "Google Drive Backup" below, which stores an encrypted copy in a hidden folder in your own Google Drive.
• Business & customer contact information (your business profile, and the names, addresses, tax IDs and contact details of the clients you bill) — stored on-device only, unless you opt in to the encrypted Google Drive backup described under "Google Drive Backup" below, which stores an encrypted copy in a hidden folder in your own Google Drive.
• Photos & files (your logo, signature image, and any receipt or document attachments you add) — stored on-device only.
• App activity & settings (templates, currency, tax-module, automation and app-lock preferences) — stored on-device only.
• Device or other IDs — the Android Advertising ID, processed by Google AdMob solely to serve and measure the banner ad. This is the one category that routinely leaves your device.
• Your photo and app-settings categories are stored on-device only. Your financial and business/customer-contact categories are stored on-device only unless you opt in to the Google Drive backup, in which case an encrypted copy is also stored in a hidden folder in your own Google Drive — still never "collected" or "shared" with the developer in the Play Data Safety sense, since Prachi has no access to it either way. The advertising category is different: because the app shows a banner ad, the Android Advertising ID and standard ad-request data are collected and shared with Google AdMob in the Play Data Safety sense, solely for advertising.

The data above is used only inside the app, on your device, to provide the features you asked for. It is never used for advertising, profiling, marketing, "improving our services" or any purpose beyond these:

• To create and manage your billing documents — invoices, estimates, quotes, delivery challans, purchase orders, receipts and credit notes — and to convert estimates into invoices.
• To generate branded PDFs on-device using your chosen template, logo, signature and accent colour, printed in your app language.
• To calculate totals and taxes (including the optional India GST and EU/UK VAT RegionPacks) and format currency for 150+ currencies, entirely on-device.
• To record payments (including partial payments), run recurring invoices and payment reminders, track expenses, and compute reports — sales, tax, aging and profit & loss — entirely on-device.
• To let you import a client's name, phone and email from your device contacts when you choose to, and to let you scan a barcode to add a catalog item, using an on-device model.
• To lock the app behind your PIN or fingerprint, if you enable the optional app lock.
• To request and display the banner ad that funds the app, via Google AdMob.

Prachi does not share, sell, rent, trade or disclose your billing data to third parties — for advertising, analytics, "partners" or anything else. There is nothing of yours to share: your invoices, clients and finances never reach the developer in the first place, and they are never shared with the advertising SDK or used to target ads.

The one thing that is shared with a third party as a routine part of using the app is advertising data: to serve the banner ad that funds the app, the Google AdMob SDK shares the Android Advertising ID and standard ad-request data with Google, as described in "Advertising (Google AdMob)" below.

Beyond advertising, information can leave Invoice in ways entirely under your control: when you explicitly export or share a document yourself — for example, sending a PDF invoice through Android's share sheet, in which case it is transferred by the app you pick (email, messaging, cloud storage) under that app's own policies, not ours — when you save a local encrypted backup file to a location you choose, or when you connect the optional Google Drive backup described below, which uploads one encrypted backup file to a hidden folder in your own Google Drive. In every case the choice and the destination are yours; none of these is Prachi sharing your data with a third party.

Invoice integrates two third-party services: Google AdMob, which serves the single banner ad described under "Advertising (Google AdMob)", and, only if you choose to connect it, Google Drive, used solely for the optional encrypted backup described under "Google Drive Backup" below. There is no payment or billing SDK, because there is nothing to buy. There are no other third-party services — no online AI, no analytics providers, no cloud databases and no other SDK that receives data from this app.

Invoice has no in-app purchase of any kind. No Google Play Billing code exists in the app — it was removed entirely, along with the Pro tier it used to gate — no purchase screen is reachable anywhere in the app, and no payment is ever processed or stored by anyone. Every feature (every template, unlimited business profiles, unlimited invoices and estimates, reports, the app lock and the encrypted backup) is free for everyone.

If you install the app from Google Play, Google's own terms and privacy policy govern the store itself (downloads, payments and reviews), independently of this app.

Invoice may request the following Android permissions, and only for the reasons stated. Denying an optional permission never locks you out of the rest of the app:

• Internet — used to request and measure the banner ad served by Google AdMob (the advertising that keeps every feature of the app free) and, if you connect the optional Google Drive backup, to upload your encrypted backup file to your own Google Drive. Your billing data is never transmitted to the developer, sold or used to target ads.
• Network state — lets the app check whether the device is online before requesting an ad.
• Advertising ID (AD_ID) — used by the Google AdMob SDK to request, and where you consent personalise, and measure the banner ad. You can reset or delete your Advertising ID, and opt out of personalised ads, at any time in Android Settings → Privacy → Ads.
• Camera (optional) — used to scan a barcode when adding a catalog item, using an on-device model, and to photograph a receipt or other document to attach to a record. Nothing captured through the camera is uploaded anywhere; the app is fully usable if you deny this permission, since the scan/capture button simply hides.
• Contacts (optional) — used only if you tap "Import from contacts" to add a client, and only at that moment. The details you import are copied into the app's own encrypted database and stay on your device; your contacts are never uploaded, and nothing else in the app needs this permission.
• Photo access (via the system photo picker) — to let you add a business logo or signature image, or attach an existing photo to a record. The picker shares only the file you select.
• Notifications (optional) — only if you use the automation features — recurring invoices and payment-due reminders. You can use the entire app without notifications.
• Run at startup — to re-arm your recurring-invoice and reminder automation after the device reboots. Used for nothing else.
• Biometrics (optional) — for the optional app lock, which you switch on in Settings. Android verifies your fingerprint or face itself — the app never sees biometric data.

Invoice contains no analytics SDKs, no crash-reporting services that upload data, and no third-party tracker other than the single advertising SDK it discloses: Google AdMob, covered in detail under "Advertising (Google AdMob)" below. We do not profile you, fingerprint your device, or measure your behaviour, and your billing data — invoices, clients, payments, expenses and reports — is never shared with AdMob and never used to target ads.

Invoice is free and shows one banner ad, served by Google AdMob, to every user; there is no paid ad-free tier. If you are in the EEA, the UK or Switzerland, Invoice shows a consent form built on Google's User Messaging Platform (UMP) before the first ad request, and you can revisit that choice at any time from "Ad privacy & consent" in Settings.

Your data is held in Invoice's private app storage, in a database encrypted with SQLCipher (AES-256) using a random per-install key held in the Android Keystore, and Android additionally sandboxes that storage from every other app on the device. Your billing data is never synced to any server of ours, so there is no developer-side copy to breach. Two things travel over the network: the advertising data described under "Advertising (Google AdMob)", which travels to Google over an encrypted (HTTPS) connection and never includes your billing data; and, only if you connect it, the optional Google Drive backup, which sends your AES-256-GCM-encrypted backup file to your own Google Drive over an encrypted (HTTPS) connection — see "Google Drive Backup" below for exactly what that encryption does and does not protect against.

If you enable the optional app lock, your PIN is stored only as a salted PBKDF2-HMAC-SHA256 hash (120,000 iterations), never in plain text, and biometric checks are verified entirely by Android's own biometric system — the app never sees your fingerprint or face data.

We do not claim a specific security certification such as ISO 27001, and we do not run a formal penetration-testing or third-party security-audit programme — the protection here comes from the app's on-device-only architecture rather than from a security programme wrapped around infrastructure we don't have.

For an extra layer of protection we recommend using your device's screen lock (PIN, pattern or biometrics), which also protects everything inside the app, and keeping Android's full-disk encryption enabled (it is on by default on modern devices).

Invoice's local backup/export produces an encrypted file that you control: created only when you ask, written only where you choose (via Android's file picker), and never uploaded by the developer. Restoring it is likewise a purely local operation. If you copy an export to a cloud drive yourself, that storage provider's policy applies to the copy you made.

The app also offers an optional Google Drive backup; as explained under "Google Drive Backup" below, it is off until you connect it, and once connected it is a second path by which your billing data can leave the device — uploaded, encrypted, to a hidden folder in your own Google Drive.

Standard Android device backups (if you have them enabled in system settings) are not used: Invoice's manifest sets android:allowBackup to false specifically because the database is encrypted with a device-bound key, so a system cloud copy would be unrestorable ciphertext anyway.

Your billing data is retained on your device only for as long as you choose to keep it — there is no server-side copy, so there is nothing the developer retains, and no retention schedule other than the one you set by keeping or deleting your own records.

Deleting your data is entirely in your hands, at any time and without asking anyone:

• Delete individual invoices, clients, payments, expenses or other records inside the app whenever you like.
• Clear the app's data from Android Settings → Apps → Invoice → Storage, which wipes everything the app stored, including any local backup file saved inside the app's own storage.
• Uninstall the app — everything it stored in private storage is removed from the device along with it. Local backup files you exported elsewhere, or documents you shared through the share sheet, are ordinary files you delete yourself.
• There is no server-side copy of your billing data controlled by the developer — nothing for us to retain or delete on your behalf. If you connected the optional Google Drive backup, an encrypted copy lives in the hidden folder of your own Google Drive until you delete it yourself or disconnect the feature (see "Google Drive Backup"); we cannot see, retain or delete it for you. Data processed by Google AdMob is held by Google under Google's own privacy policy; you can reset or delete your Advertising ID at any time in Android Settings → Privacy → Ads.

Invoice is a business tool for freelancers and small businesses, not directed at children under 13, and Prachi does not knowingly collect personal data from a child through the app — no billing data reaches the developer from any user, child or adult. The app has no chat, no social features and no user-to-user content of any kind.

European Economic Area: under Article 8 GDPR, the age at which a child can give their own consent to an information-society service, rather than needing a parent or guardian to consent, is set by each EU member state and ranges from 13 to 16 — there is no single European age. Invoice does not rely on the app user's consent for anything except the advertising choice described under "Advertising Consent & Choices", and it is not directed at children, so this state-by-state variation does not change how the app is built or operated.

United Kingdom: the age of consent for online services is 13. The app's design is also consistent with the ICO's Age Appropriate Design Code (the Children's Code) even though the app is not aimed at children and does not fall within a children's category on Google Play: it collects no more data than the ad SDK needs to function, builds no profile of any user by default, and shows the same consent and ad-privacy controls to every user, regardless of age, who has not consented to personalised ads.

United States: Invoice is a general-audience business and billing tool. Its subject matter, content and marketing are not directed at children, and Prachi does not have actual knowledge that any user is a child under 13. Under the Children's Online Privacy Protection Act (COPPA), that combination means the app is not treated as "child-directed", so COPPA's parental-consent requirement for collecting a child's personal information does not apply to it. Separately, the app collects no personal information from any user in the first place, because billing data never reaches the developer.

On Google Play, Invoice is submitted with a content rating and Ads declaration reflecting a general-audience business utility, and does not participate in Google Play's Designed for Families program. Google applies its own Families Policy restrictions to the advertising and SDK behaviour it permits based on that rating.

In practice, no personal data reaches the developer from any user, child included. If you are a parent or guardian and believe a child has used the app, deleting the app's data or uninstalling it removes everything the app holds on the device, and resetting the Advertising ID in Android Settings → Privacy → Ads severs the advertising identifier tied to that device.

Privacy laws around the world — the GDPR and UK GDPR, the CCPA as amended by the CPRA, India's DPDP Act and others — give you rights over your personal data. For your billing data the answer is simple: it never leaves your device except through your own choices — an export, a share, or the opt-in Google Drive backup — and Prachi never receives it, whichever route you use. For the advertising data Google collects, the rights below apply in the ordinary way.

• Access (GDPR Art. 15) — open the app; every invoice, client, payment and record it holds is visible there, on your device. We hold none of it to give you.
• Correction (GDPR Art. 16) — edit or replace any record directly in the app.
• Erasure / deletion (GDPR Art. 17) — delete records in the app, clear the app's data, or uninstall (see "Data Retention & Deletion"). If you connected Google Drive backup, disconnect it in Settings and delete the backup file from your own Google Drive at any time. For advertising data held by Google, reset or delete your Advertising ID in Android Settings → Privacy → Ads.
• Portability (GDPR Art. 20) — your PDFs, CSV exports and encrypted backup file — local, or, if you connected it, the one in your own Google Drive — are yours already, in ordinary formats, on your device or in your own Drive.
• Restriction of processing (GDPR Art. 18) — email us and we will act on any request about the advertising data described in this policy.
• Objection (GDPR Art. 21) — the app shows personalised ads where you consent, and personalised advertising is profiling under the GDPR. You have an unconditional right to object to it: decline or withdraw consent from "Ad privacy & consent" in Settings, or turn on "Opt out of Ads Personalisation" in Android Settings. This means non-personalised ads instead of no ads, since there is no ad-free option today.
• Withdraw consent (GDPR Art. 7(3)) — where advertising relies on your consent, you can withdraw it at any time, as easily as you gave it, using the same "Ad privacy & consent" row. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.
• Rights related to automated decision-making (GDPR Art. 22) — the app does not make any decision about you that produces legal or similarly significant effects; ad selection is not this kind of decision, and every total, tax figure and document the app produces is shown to you to review before you send it.
• Complaint (GDPR Art. 77) — see "How Do I Lodge a Complaint?" below.

My Invoice and Bill Maker is developed by Prachi and published by elevatedevco, and is distributed on Google Play under the Android package com.elevatedev.invoiceforge.

For the advertising data this app involves, elevatedevco is the data controller within the meaning of the GDPR and the UK GDPR, and the Data Fiduciary within the meaning of India's Digital Personal Data Protection Act 2023. Google acts as an independent controller for the advertising data its SDK collects. The app has no in-app purchase, so no payment processor is involved.

elevatedevco is not a processor of your billing data either: a processor handles personal data on a controller's behalf, and your invoices, clients and finances are never sent to us to handle in the first place.

You can reach us about anything in this policy — including a request to exercise your rights, or a grievance — by email at support@elevatedev.co.in. We answer privacy requests within 30 days, and usually much sooner.

No. Invoice contains no AI model and no machine-learning model of any kind, and sends no invoice, client record, document or photo anywhere the developer, or any other party, can reach. This is a structural fact, not a promise: there is no network path, server or account through which your billing data could reach us, so there is nothing for the developer — or any third party — to access, analyse, review, index, or train an AI model with. There are two exceptions to "nothing leaves the device": the advertising data described under Advertising (Google AdMob), and, only if you connect it, the encrypted Google Drive backup described under "Google Drive Backup" below. Neither puts your billing data in the developer's hands — the advertising data never includes it, and the Drive backup goes only to your own Google account, never to us.

If a future version ever added an AI feature that required sending data to a server, it would be off by default, need your explicit, separate consent to turn on, and this policy would be updated first, with a new date, before that version shipped.

Invoice is free for everyone, and it is funded by advertising: the app shows a single anchored banner ad, served through Google AdMob (an advertising service provided by Google), docked above the bottom navigation bar on the app's top-level tabs. There is no paid tier and no purchase that removes it. The banner is hidden on every full-screen flow — the invoice editor, document detail, preview and any chooser screen — so it never competes with the invoice you're working on. Invoice shows no interstitial ad, no rewarded video and no native ad; the banner is the only ad format in the app.

To serve and measure that ad, AdMob and its advertising partners may collect and process data from your device, including:

• The Android Advertising ID — a resettable, user-controllable identifier used for advertising.
• Device and app information, such as device model, operating system version, app version, language, mobile network information and IP address.
• Coarse (approximate) location derived from your IP address, where permitted. The app itself does not request any location permission.
• Ad-interaction data, such as which ad was shown and whether you viewed or tapped it — used for measurement, frequency capping and fraud prevention.
• Personalised vs non-personalised ads: ads may be personalised (selected by Google based on interests inferred from your activity across apps and sites) or non-personalised (based only on context). Non-personalised ads still use the Advertising ID for frequency capping and fraud prevention.
• AdMob is the only advertising or tracking SDK in Invoice, and your billing data — invoices, clients, payments, expenses and reports — is never shared with it or used to target ads.
• How Google uses this data is described in "How Google uses information from sites or apps that use our services" (policies.google.com/technologies/partner-sites), in Google's privacy policy (policies.google.com/privacy) and in the Google AdMob and Google Ads policies (support.google.com/admob).

Settings includes a "Connect Google Drive" backup option so you can move to a new phone without losing your invoices and clients. It is off by default and uploads nothing until you tap it and grant Google Drive access yourself. Once connected, the app uploads a single file — invoiceforge-backup.json.enc — containing the same data as the local export: your invoices, estimates, clients, payments, expenses and business profiles. That file is written to a hidden, app-only folder in your own Google Drive (Drive's appDataFolder scope), which is not visible in the regular Google Drive app or website, is not browsable by any other app on your device or in your account, and is never seen, received or held by the developer — we have no server, and no access to your Google account or your Drive.

The backup file is encrypted with AES-256-GCM before it is uploaded. This protection is account-protected, not end-to-end encrypted: the encryption key is fixed and built into the app, rather than derived from a secret only you hold, so any Invoice install signed into the same Google account you used to connect can decrypt the backup. It is not zero-knowledge, and we do not overstate it as such. If you want a backup that only you can ever open, use the local encrypted export/backup described under "Backups & Exports" above instead, or in addition to Drive — it works entirely offline and never touches Google Drive.

You can disconnect Google Drive backup at any time from Settings; disconnecting stops all future uploads immediately. You can also delete the backup file itself at any time, whether or not you disconnect first, directly from your own Google Drive account — neither action touches the billing data already stored on your device.

If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR requires us to state the legal basis for each purpose personal data is processed for. Your billing data is never transmitted to us (see "Data We Collect" above), so no legal basis applies to it at all — there is no processing by us to justify. The purposes below are the only processing that does happen, each with its own basis:

• Serving a non-personalised advertisement (shown by default, before consent is given or where consent is declined). The legal basis for this is the developer's legitimate interest in funding a free app (Article 6 para. 1(f) GDPR), limited to the minimum ad-request data Google AdMob (Google LLC) needs to serve and measure one ad.
• Serving a personalised advertisement. The legal basis for this is your consent (Article 6 para. 1(a) GDPR), collected through Google's User Messaging Platform (UMP), built on the IAB Transparency & Consent Framework, and shown before the first ad request in a region where consent is required. You may withdraw your consent at any time from the "Ad privacy & consent" row in Settings; withdrawal deactivates personalised advertising and stops further ad-personalisation data sharing with Google AdMob going forward.
• Storing or accessing an identifier on your device for advertising purposes (for example, the AdMob SDK reading or setting your Advertising ID). This is separately governed by the consent requirement in Article 5(3) of the ePrivacy Directive — implemented in Germany as §25 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, the law formerly known as the TTDSG) and in the UK as PECR. The same consent prompt and withdrawal mechanism described above cover this.
• The optional Google Drive backup. The legal basis is your consent (Article 6 para. 1(a) GDPR): the feature is off by default, and processing occurs only once you explicitly connect your Google account to it. You can withdraw that consent at any time (Article 7(3) GDPR) by disconnecting Google Drive backup in Settings, which stops all further uploads immediately; withdrawal does not affect the lawfulness of processing carried out before you withdrew, and you can also delete the backup already made, at any time, directly from your own Google Drive.

In the EEA, the UK and Switzerland the app shows a consent prompt, built on Google's User Messaging Platform (UMP), before the first ad request the app makes — no ad, personalised or not, is requested in these regions until that prompt has been shown. The prompt discloses Google AdMob (Google LLC) as the advertising SDK involved and links to Google's privacy policy at policies.google.com/privacy. You may accept or decline, and declining does not restrict any feature of the app.

You can change your mind at any time from the persistent "Ad privacy & consent" row in the app's Settings, which reopens the same consent choices. Withdrawing consent there deactivates personalised advertising and stops further ad-personalisation data sharing with Google AdMob going forward; it is as easy as giving consent, and takes effect immediately for future ad requests. You can also reset or delete your Advertising ID entirely in Android Settings → Privacy → Ads — the app continues to work normally either way.

If you would prefer not to receive personalised ads, decline or withdraw consent as described above; you will still see non-personalised ads, which fund the app.

Your billing data is never transferred anywhere by the developer; the app has no server. Two things can cross a border: the advertising data described above, which Google's ad service sends to Google and processes on Google's servers, including in the United States; and, only if you connect the optional Google Drive backup, your encrypted backup file, which is stored on Google's infrastructure under your own Google account and may be processed or stored outside your country, including in the United States.

For transfers out of the EEA, Google is a certified participant in the EU-U.S. Data Privacy Framework; for transfers out of the UK, Google relies on the UK Extension to that framework; for transfers out of Switzerland, the Swiss-U.S. Data Privacy Framework applies. Where a transfer falls outside those frameworks, Google relies on the European Commission's Standard Contractual Clauses. The safeguards Google applies are set out in Google's own privacy policy and its data transfer documentation at business.safety.google.

If you believe your data has been handled unlawfully, please contact us first at support@elevatedev.co.in — we would rather fix a problem than have you go elsewhere with it.

You also have the right to lodge a complaint with a data protection supervisory authority, and you do not need our agreement to do so. In the EEA this is the authority in the country where you live, work, or where you believe the infringement occurred; the full list is published at edpb.europa.eu. In the UK it is the Information Commissioner's Office at ico.org.uk. In Switzerland it is the Federal Data Protection and Information Commissioner at edoeb.admin.ch.

A supervisory-authority complaint is not your only option. Under GDPR Article 79 (and the equivalent UK GDPR provision) you may instead, or in addition, bring your claim directly before a competent court.

Invoice is used across the United States, where privacy is governed by a growing patchwork of state laws rather than one federal statute. This section explains how those laws apply to an app that keeps your billing data on-device and shows one advertising-funded banner.

California (CCPA, as amended by the CPRA): the personal information the app is involved with, from our side, is the advertising identifier and related ad-request data described under "Advertising (Google AdMob)" — your invoices, clients and financial records are not personal information we collect, because we never receive them. Showing you a personalised ad counts as "sharing" personal information for cross-context behavioural advertising under the CCPA/CPRA, even though no money changes hands; Invoice does not sell personal information for money. You have the right to know, delete, correct, limit use of sensitive personal information, and opt out of that sharing — decline personalised ads in the consent prompt, or reset your Advertising ID in Android Settings → Privacy → Ads.

Most other US states have now enacted a comprehensive consumer privacy law of their own, and the list continues to grow. These laws differ in wording but share a common core: the right to know, access, correct, delete and export the personal data a business holds about you, and to opt out of targeted advertising and of "sale" or "sharing." If you live in a state with such a law, these rights apply to you the same way as under the CCPA above — the personal data they reach is the same advertising identifier and ad-request data, since that is the only personal data that leaves your device. Exercise them by declining or withdrawing ad consent in the app, or resetting your Advertising ID in Android settings.

Sensitive personal information: several state laws single out categories such as financial account numbers and government identification numbers for extra protection. If you choose to, Invoice lets you store a client's tax ID and your own business's bank account number, IFSC, IBAN, SWIFT, routing number or UPI ID, so you can print them on your documents — but that information is entered and read entirely on your device, is not collected, transmitted or seen by the developer, and is never sent to Google AdMob or anyone else. The only data the app sends anywhere is the advertising identifier and ad-request data described above, including a coarse, IP-derived location that is not precise geolocation.

To exercise any of the rights on this page, email us at support@elevatedev.co.in. We will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised a privacy right.

On Google Play this app's store listing is localized, so the name you see depends on your device language. Every listing describes the SAME single app -- Android package com.elevatedev.invoiceforge, published by elevatedevco -- and this privacy policy applies to all of them, in every language and country.

The name on your home screen after installing is always Invoice. The Play Store listing name, however, is written afresh for each market in that market's own language, so the name in the store will often not match the one on your device. That is expected, and the table below is the complete current list, kept in step with the store listings.

Your invoices, clients and finances are the heart of your business. That is why Invoice keeps all of it on your device in a SQLCipher-encrypted database: there is no account, no cloud database and no server of ours, so there is no copy of your books on our side to be breached, sold or demanded from us. We could not hand over your data even if asked — we simply do not have it.

Invoice calculates totals, taxes and GST/VAT figures for you, and generates the PDF you send to a client. It is software, and software can have bugs — a rounding edge case, a tax rule that doesn't match your specific situation, a currency or locale quirk we haven't caught yet. We test the app carefully, but we cannot promise every invoice, every total and every exported document will always be correct in every scenario.

Before you send a document to a client or rely on it for your own records, look it over: check the totals, check the tax amount, and check that the numbers match what you expect. You are responsible for what you send to your clients and for your own tax compliance — Invoice is a tool that helps you produce and organise your documents, not an accountant, tax adviser or guarantee that a figure is correct. If something looks off, verify it by hand or with your accountant before you rely on it.

Keep backups. Because your data lives only on your device, it is worth getting into the habit of saving a local export or backup file every so often — especially before a big change, a phone upgrade, or a factory reset — so a lost or damaged device never costs you your invoice history.

If this policy ever changes, the updated version will be published on this page with a new "last updated" date, which is also the date the changes take effect. Material changes — for example, this update, which describes the Google Drive backup becoming functional, or the addition of a new SDK — are described here, with a new date, before or as that change ships.

The core promise stays the same: your invoices, clients and finances are processed on your device by default, any transmission off the device — advertising, an export or share you make, or the opt-in Google Drive backup — is disclosed in this policy, and any future change to that is disclosed here first, not applied silently.

Questions about privacy in Invoice? Email Prachi at support@elevatedev.co.in and you will get a reply from the developer, typically within 1–2 business days.