FairInvoice · Legal

Privacy Policy

Last updated: 26 September 2026

The short version: FairInvoice has no account and no servers for your data. Every invoice, estimate, receipt, client, and business detail you enter is stored entirely on your device and never transmitted to us. There is no login. Optional iCloud Sync (off by default) keeps a copy in your own iCloud account — never on our servers. What the app does send us is small and anonymous: usage statistics, crash reports, and a device record for our own notification service — never your documents, never anything linked to you, never used to track you. Announcements are opt-in. The only thing that ever leaves your phone with your business on it is a PDF you choose to share, sent to whoever you send it to.

Your business data stays on your device

FairInvoice is a local-first invoice, estimate, and receipt maker. Everything you enter — your business profile, logo, clients, line items, prices, tax rates, payment instructions, and every document you create — is stored on your iPhone or iPad using Apple's SwiftData framework. This data never leaves your device and is never transmitted to us or anyone else. There is no FairInvoice account, no sign-up, no login, and no FairInvoice server. If you turn on iCloud Sync, your data is also stored in your personal iCloud account — see the next section.

iCloud Sync (optional)

iCloud Sync is off by default. If you turn it on (a Pro feature), FairInvoice uses Apple's CloudKit private database to keep your invoices, clients and items identical across your iPhone, iPad and Mac. That data lives in your own iCloud account, encrypted and governed by Apple's iCloud terms. We have no access to it and cannot read it — it is not transmitted to us and we do not consider it collected. Turning iCloud Sync off stops syncing; to remove the iCloud copy, delete FairInvoice's data from iCloud in your device's Settings (Apple ID → iCloud → Manage Storage).

Anonymous diagnostics — the honest disclosure

To understand how the app is used and to catch bugs, FairInvoice sends a small set of anonymous diagnostics using Google's Firebase service, whether or not you allow notifications:

Usage statistics (Firebase Analytics): which screens and features are used — for example "an invoice was created" or "a PDF was exported" — plus coarse, non-identifying app settings and counts: for example your chosen currency code, invoice template, whether notifications or iCloud Sync are on, your plan type, and ranges such as "2–5 invoices". These never contain your documents, client names, amounts, exact numbers or dates, or any text you typed.
Crash reports (Firebase Crashlytics): technical stack traces and device and OS details when the app crashes, so we can find and fix the bug.

Firebase recognizes an installation by identifiers scoped to this app (a Firebase installation ID and Apple's identifier for vendor), and derives an approximate location (country/region/city) from your masked IP address — the app itself never uses Location Services. It never reads your advertising identifier: FairInvoice ships Firebase without Google's advertising-ID and ad-conversion modules. None of this is linked to your identity — there is no account, so we could not link it even if we wanted to — and none of it is used to track you.

Our own notification service (Engagement Center)

What: each time FairInvoice launches, it registers a small device record with our own server at engage.puzzpics.com. The record contains a random identifier the app creates for itself (not your advertising identifier and not Apple's identifier for vendor), the app and iOS version, your device's language and time zone settings, and whether you have turned on App announcements. If you allow notifications, the device's push token is added to it. The app also tells this server when a session starts and when a notification is opened — each with a timestamp and, for a notification, the campaign it belonged to.

When: on every launch, whether or not you allow notifications. The record never contains your clients, invoices, amounts, or anything you typed.

Why: to deliver notifications, to count how many devices use the app, and to choose which devices receive an app announcement — which is marketing, and we say so. Marketing messages are opt-in: you receive announcements only if you choose to — by allowing notifications on the “Hear about what’s new” screen described below, or by turning on Settings → App announcements. Until you do, they are off, and you can switch them off again at any time in Settings.

Not linked to you, not tracking: the record carries no name, email, or account, so we cannot tell who you are from it. It is our own first-party service: we do not sell it, share it with data brokers or ad networks, or combine it with data from other companies' apps or websites.

Notifications and the push token

What: an anonymous device push token (Apple Push Notification service / Firebase Cloud Messaging) — a random identifier your device generates so notifications can be delivered to it. It contains none of your data.

When: only after you allow notifications. The app asks in four places: when you start a Pro free trial; when you switch on payment reminders or quarterly tax reminders in Settings; and, if you use the free version, at most once, after you save your third document — a short screen (“Hear about what’s new”) first explains that these are occasional news about FairInvoice, and you can decline. Because that screen asks whether you want that news, allowing notifications there also turns on App announcements; you can switch them off at any time in Settings. Allowing notifications for a free trial or for payment or tax reminders never turns announcements on. If you never allow notifications, no push token is ever created — but the anonymous diagnostics and the Engagement Center device record described above are still sent.

Why: reminders themselves are created on your device; the token lets us deliver notifications to it, including app announcements if you have turned them on. Notification content never includes your clients, invoices, amounts, or anything you typed.

Not linked to you: FairInvoice has no accounts, so the token is not tied to your name, email, or identity — we could not look you up by it if we wanted to.

Opting out: turn off App announcements in FairInvoice's Settings to stop marketing messages, or turn off notifications for FairInvoice in iOS Settings to stop all notifications. Everything else in the app works identically without them.

If you cancel Pro: one optional question

From version 1.5, if you turn off FairInvoice Pro's renewal (during a free trial or later), the next time you open the app it asks once why — five one-tap answers, and for "It didn't do what I needed" or "Something else" an optional short note you can type. You can close it without answering, and it never asks about the same subscription twice.

What is sent: the answer you chose, your note if you wrote one, whether it was a free trial, which Pro plan, how many whole days since it started, whether your access has ended yet, the app version, whether it came from a test build, and your language and region setting (for example en_US). It goes to our own feedback database (Google Firebase Firestore) and is not linked to you: no name, no email, no Apple ID, no purchase or transaction ID, no device identifier. The chosen answer (not your note) is also counted in the anonymous usage statistics. Please leave names and other personal details out of the note.

When version 1.5 is released, the App Store privacy label will also list User Content — Other User Content (Analytics) for this optional note.

What the App Store privacy label says

FairInvoice's App Store privacy label lists exactly this, every item not linked to your identity and not used for tracking:

Identifiers — Device ID: App Functionality, Analytics, Developer's Advertising or Marketing.
Usage Data — Product Interaction: Analytics, Developer's Advertising or Marketing.
Diagnostics — Crash Data: App Functionality.
Diagnostics — Other Diagnostic Data: App Functionality, Analytics.
Purchases — Purchase History: App Functionality, Analytics (see Purchases below).
Location — Coarse Location: Analytics. The app never uses Location Services; Google Analytics derives an approximate location (country/region/city) from your masked IP address.
Other Data — Other Data Types: Analytics (message-delivery statistics from Firebase Cloud Messaging).

"Developer's Advertising or Marketing" on Device ID and Product Interaction is the opt-in app announcements described above — our own messages about FairInvoice, never third-party ads. If a future version ever transmits anything more, we will update this policy first and describe exactly what it sends.

Sharing a PDF is up to you

When you share an invoice, estimate, or receipt, the app generates a PDF on your device and hands it to the standard iOS share sheet. Where it goes from there — email, messages, files — is your choice and happens through the app you pick. Any payment instructions you type (bank details, payment handles) are rendered as plain text on your own PDF; FairInvoice never processes or transmits payments.

What FairInvoice does not do

To be explicit:

We do not transmit your invoices, clients, prices, or business details to any server.
We do not use the advertising identifier (IDFA).
We do not track you across apps, websites, or companies, and we do not use Apple's App Tracking Transparency framework because there is no tracking of any kind.
We show no ads and contain no advertising SDK.
We do not access your contacts or calendar, and the app never uses Location Services. Google Analytics derives an approximate location (country/region/city) from your masked IP address. Importing a logo uses Apple's picker, which hands the app only the single image you choose — the app never gets access to your photo library.
We do not sell or share any data, and your business data never reaches us in the first place.

Purchases

Any optional purchase in FairInvoice (FairInvoice Pro) is processed by Apple through the App Store using StoreKit. FairInvoice never sees your payment method, Apple ID, or billing details — Apple processes the payment and we never receive card data. Apple's privacy policy governs that transaction. To confirm your Pro access, the app shares the App Store purchase record (which product, when, and an anonymous app user ID) with our subscription service, RevenueCat — never your name, email, or payment method. Firebase Analytics also records an anonymous in-app purchase event (which product and its price) so we can see how the app is doing; it is not linked to you.

No account required

FairInvoice requires no sign-up, no email address, no phone number, and no social login to work. There is no FairInvoice account and no FairInvoice server that stores your identity, your clients, or your paperwork.

Children

FairInvoice is a business utility, is not directed at children under 13, and collects no personal data from anyone of any age.

Data breach risk

Because your invoices and clients are stored only on your device and are never uploaded, there is no FairInvoice database of your business to breach. If your device is compromised, that is governed by Apple's device security model — we recommend using a strong passcode and Face ID / Touch ID.

Retention

Your documents, clients, items, and business profile live only on your device and are deleted when you delete FairInvoice or delete them yourself. Unless you turn on iCloud Sync there is no cloud copy, so we recommend using Settings → Back up to export a backup file of anything important.

Changes to this policy

If this policy ever changes we will update the date at the top of this page. Material changes will be noted in the App Store release notes. Continued use of FairInvoice after a change constitutes acceptance of the updated terms.

Contact

Questions about this privacy policy? Email kenz@kenzapps.com. We aim to reply within two business days.