Privacy Policy

Effective 7 September 2026

The short version. Invoicee is an invoice and expense tracker. Your receipt images and PDFs are stored on your device and in your own Google Drive — never on our servers. We store the figures typed or scanned from those receipts (supplier, amounts, dates) so they sync between your devices. We run no analytics, no advertising, and no tracking, and we do not sell or share your data with anyone.

What stays only on your device

The following never leaves your iPhone:

Receipt and invoice images and PDFs — the file contents themselves
Your local invoice archive
Preferences such as upload image quality and your invoice categories
Your Google sign-in tokens and the display name and picture from your Google profile, held in the iOS Keychain

What goes to your own Google Drive

When you link a Google account, Invoicee uploads each invoice's image or PDF to a folder named Invoicee in your Drive, organised by year and month. CSV exports go to the same place.

Invoicee requests the drive.file permission, which is the narrowest Drive scope Google offers: the app can only see and manage files it created itself. It cannot read anything else in your Drive. These files are yours — you can open, move, or delete them without using Invoicee, and deleting the app does not remove them.

What we store on our servers

Invoice and revenue records — not the attachments — are stored in Google Cloud Firestore in a project we operate, so your data survives reinstalling the app and syncs across your devices. Specifically:

For each invoice

Supplier name, category, and payment method
Total, your share of the total, and GST
Invoice date and last-edited time
Line items: description, quantity, unit price, line total
The file name of the attachment in your Drive, and whether an image or PDF exists — never the file itself

For each revenue entry

The date, and the name and amount of each revenue stream

To identify the owner

Your Firebase user ID and your Google account ID

Access is enforced on the server: records are readable and writable only by the signed-in account that owns them.

Camera and photo library

Invoicee asks for camera access so you can scan a receipt, and photo library access so you can attach an image you already have. Text is recognised on your device. The resulting images follow the rules above — device and your own Drive, nowhere else.

What we don't do

No analytics or usage-tracking SDKs are built into the app
No advertising, and no advertising identifiers
No tracking across other apps or websites
No selling, renting, or sharing of your data with third parties
No access to your Drive beyond the files Invoicee itself created

Who else handles your data

Google LLC processes data on our behalf, and only to make the app work:

Firebase Authentication — verifies your Google sign-in
Cloud Firestore — stores the invoice and revenue records listed above
Google Drive API — stores your attachments in your own Drive

Your use of Google's services is also governed by Google's Privacy Policy.

Keeping and deleting your data

Records are kept while your account is linked, so your history is there when you come back.

To remove data from your device, use Unlink Google Drive in the Profile tab. This deletes the locally stored invoices and your saved sign-in.

To delete the records held on our servers, email the address below from the Google account you linked, and we will delete them. Files already in your own Google Drive are under your control and can be deleted directly from Drive at any time.

Children

Invoicee is a business tool and is not directed at children. We do not knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes materially, the effective date above will change and the current version will always be published at this address.

Contact

Questions, or a deletion request: nembun1008@gmail.com