Privacy Policy

Effective as of December 14, 2026

This privacy policy is applicable to the Invoiso app (hereinafter referred to as "Application") for mobile devices, which was developed by Deep Saha (hereinafter referred to as "Service Provider") as an Ad Supported service. This service is provided "AS IS".

What information does the Application obtain and how is it used?

What information do users provide to the Application?

The Application acquires the information you supply when you download and register the Application. Registration with the Service Provider is not mandatory. However, bear in mind that you might not be able to utilize some of the features offered by the Application unless you register with them.

The Service Provider may also use the information you provided them to contact you from time to time to provide you with important information, required notices and marketing promotions.

What information does the Application collect automatically?

In addition, the Application may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile devices unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the Application.

Does the Application collect precise real time location information of the device?

This Application does not gather precise information about the location of your mobile device.

Does the Application use Artificial Intelligence (AI) technologies?

The Application uses Artificial Intelligence (AI) technologies to enhance user experience and provide certain features. The AI components may process user data in the following ways:

  • Personalized Content: AI may analyze your usage patterns to deliver content tailored to your preferences and behavior.
  • Recommendations: AI may suggest features, services, or content based on your interactions within the Application.
  • Automated Functionalities: Certain app features may be powered by AI to automate tasks or improve efficiency.
  • Data Protection: All AI processing is performed in accordance with this privacy policy and applicable laws, ensuring your data is handled securely and responsibly.

App Privacy Disclosure (App Store Connect)

In compliance with App Store Guideline 5.1.1, this section clearly identifies what data the Application collects. This disclosure corresponds to the App Privacy (Nutrition Labels) declared in App Store Connect.

Data Collected by Third-Party SDKs

SDK Data Collected Linked to Identity
Supabase Auth Email, name, password, profile picture Yes
Google Sign-In Email, name, profile picture Yes
Facebook SDK Device identifiers (IDFA), usage analytics, purchase events No (analytics) / Yes (if logged in)
PostHog Analytics Screen views, user behavior, device info No (aggregated)
Google Mobile Ads Device identifiers, usage data for ad targeting No
RevenueCat Purchase history, subscription status Yes

Data Categories (App Privacy Labels)

  • Contact Info: Email, name — collected for account creation and authentication (Supabase Auth, Google Sign-In). Linked to identity.
  • Identifiers: Device ID, user ID, IDFA — used for analytics, ad attribution, and app functionality. Device ID: not linked. User ID: linked when signed in.
  • Usage Data: Screen views, user behavior, analytics — used to improve the app and understand usage patterns. Generally not linked to identity.
  • Purchase History: In-app purchase and subscription status — processed by RevenueCat for premium features. Linked to identity.
  • Diagnostics: Crash reports and performance data — used to maintain app stability. May or may not be linked depending on configuration.

Facebook SDK — Data Collection and IDFA

The Application integrates the Facebook SDK, which may collect device identifiers including the Identifier for Advertisers (IDFA) on iOS. The Facebook SDK uses this data for ad attribution, measuring ad performance, and delivering personalized ads. It may also collect usage analytics and purchase events to understand app engagement. IDFA collection follows Apple's App Tracking Transparency (ATT) framework—we will request your permission before tracking across apps and websites. You can manage or revoke this permission in your device Settings at any time.

PostHog Analytics — Data Collection

PostHog Analytics helps us understand how users interact with the Application. It collects screen views, user behavior (such as button clicks and feature usage), and general device information (device type, OS version). This data is used in aggregated form to improve the app, prioritize features, and fix issues. PostHog does not typically link this data to personally identifiable information; analytics are processed in a privacy-preserving manner.

Google Mobile Ads (AdMob) — Data Collection

Google Mobile Ads (AdMob) is used to display advertisements in the Application. AdMob may collect device identifiers and usage data to serve relevant ads, measure ad performance, and prevent fraud. This data is used for ad targeting and is generally not linked to your identity. You can control personalized advertising through your device settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

Do third parties see and/or have access to information obtained by the Application?

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

The Service Provider may disclose User Provided and Automatically Collected Information:

  • as required by law, such as to comply with a subpoena, or similar legal process;
  • when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
  • with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

What are my opt-out rights?

You can halt all collection of information by the Application easily by uninstalling the Application. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

What is the data retention policy and how can you manage your information?

Retention: The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. The Service Provider will retain Automatically Collected information for up to 24 months and thereafter may store it in aggregate form.

Deletion: Third-party analytics and ad data may be retained according to those providers' policies. We will process deletion requests in accordance with applicable law.

How to request data deletion: To request deletion of your personal data (including account data, contact info, or purchase records), email the Service Provider at [email protected] with the subject "Data Deletion Request" and include your registered email or user ID. We will respond within 30 days and, where required by law, complete the deletion. Please note that some data may be retained where necessary for legal compliance, fraud prevention, or to provide services you have requested.

How does the Application address children's privacy?

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider ([email protected]) so that they will be able to take the necessary actions.

Regulatory Compliance (GDPR, CCPA, COPPA)

The Service Provider aims to comply with applicable privacy regulations:

  • GDPR (EU/EEA): If you are in the European Union or European Economic Area, you have rights including access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise these rights, contact us at [email protected]. Our legal basis for processing includes consent, contract performance, and legitimate interests.
  • CCPA (California): California residents may have the right to know what personal information is collected, to delete it, to opt out of sale, and to non-discrimination. We do not sell personal information. To request access or deletion, contact [email protected].
  • COPPA (Children): We do not knowingly collect personal information from children under 13. See the section above on children's privacy.

How is your information kept secure?

The Service Provider are concerned about safeguarding the confidentiality of your information. The Service Provider provide physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop or improve their Application. Please be aware that, although we endeavor to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

How will you be informed of changes to this Privacy Policy?

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

How do you give your consent?

By using the Application, you are giving your consent to the Service Provider's processing of your information as set forth in this Privacy Policy now and as amended by us. "Processing," means using cookies on a computer/hand held device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining and disclosing information.

How can you contact us?

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at [email protected].