Privacy Policy

Effective 27 September 2026 · Applies to the Invora mobile app and goinvora.com

The short version. Invora works offline and keeps your invoices, clients and business details on your device. We only receive data you explicitly send us — an email address if you sign in, a cloud backup if you turn on cloud sync as a Pro subscriber, the PDF of an invoice if you share it as a tracked link — plus anonymous crash reports and usage statistics, which you can switch off in Settings. We do not sell data, we do not show ads, and we do not use advertising identifiers.

1. Who we are

Invora is developed and operated by the Invora team (“we”, “us”). Contact: kbteam.app@gmail.com.

2. Data that stays on your device

Everything you create in the app — invoices, estimates, clients, items, expenses, payments, your business profile, logo, signature and attachments — is stored in a local database on your phone. It is never transmitted to us unless you use one of the optional features below. Deleting the app deletes this data unless you have made a backup.

3. Data we process when you use optional features

Account (optional). Signing in uses your email address and a one-time code. We store the address and sign-in timestamps so you can recover your data on a new device. Authentication is provided by Supabase.
Cloud backup & sync (Pro). A copy of your app data (including attachments) is stored in your private cloud folder, protected so that only your account can read or write it. It is used solely to restore and sync your own devices.
Tracked links (Pro). When you share an invoice as a link, its PDF is stored on our servers so your customer can open it. When the link is opened we record the time and the browser type (user agent) to show you a read receipt. Anyone with the link can view that PDF; you can revoke a link at any time from the app.
Client portals (Pro). If you create a portal for a client, a summary of the invoices you issued to that client (numbers, dates, amounts, payment status) plus your business name, contact details and payment link is stored so the client can view it at a private link. We record when the portal was last opened. Anyone with the link can view it; you can turn it off at any time from the app, which deletes the summary.
Purchases. Subscriptions are processed by Apple or Google. We never see your card details. RevenueCat processes purchase receipts on our behalf and we store a record of whether your account has an active Pro entitlement.
Support. If you email us, we keep the correspondence to help you.
Crash reports & usage statistics. To find bugs and understand which features are used, the app sends crash reports (stack trace, device model, OS and app version) and anonymous usage events (for example “invoice created”, “paywall viewed”) to Google Firebase Crashlytics and Google Analytics for Firebase. These are linked to a random account identifier, never to your email, and never contain the contents of your invoices, clients or items. No advertising identifier is collected and ad-personalisation signals are disabled. You can turn this off at any time in Settings → Data & backup → Share crash reports & usage stats.

4. What we do not do

No advertising, no ad networks, no sale or rental of personal data.
No reading of your invoices for marketing or profiling. Cloud backups are used only to serve them back to you.
No advertising SDKs, no advertising identifiers, no cross-app tracking.

5. Service providers

We rely on a small number of providers who process data under our instructions: Supabase (authentication, database, file storage, hosted in the AWS region we selected), RevenueCat (purchase verification), Apple App Store / Google Play (billing), Resend (sending sign-in codes), Google Firebase (crash reporting and anonymous usage statistics) and Cloudflare (hosting this website).

6. Retention and deletion

Cloud data is kept while your account exists. You can delete your account from Settings in the app; this permanently removes your account, cloud backups, tracked-link PDFs and read-receipt events within 30 days. Data on your device is under your control and can be deleted by deleting the app. Tracked-link PDFs are removed when you stop sharing the link or delete the invoice, and automatically 12 months after you last shared them.

7. Security

Data in transit is encrypted with TLS. Cloud data is protected by per-account access rules enforced by the database, and your device data is protected by your device's own security. No method is perfect; if you believe your data has been compromised, contact us immediately.

8. Your rights

You may access, export (Settings → Backup), correct or delete your data at any time from within the app. Depending on where you live you may have additional rights under GDPR, the UK GDPR, the CCPA or India's DPDP Act — email us and we will respond within 30 days.

9. Children

Invora is a business tool and is not directed at children under 16. We do not knowingly collect data from children.

10. Changes

We will post any changes on this page and update the effective date. Material changes will be announced in the app.