Privacy Policy

Information you create

Invoices stores invoices, estimates, clients, payments, photos, signatures, stamps, business settings, and related document data locally on your device. If iCloud sync is enabled, Apple may also store this data in your private CloudKit account. BitForge does not receive your complete local database merely because you use iCloud sync.

Account and online features

Supabase provides authentication and backend features. It may process your account identifier, session information, settings, subscription status, security records, and limited operational data needed to provide those features.

If you use Shared Invoice, the private PDF revision you choose to publish, limited display information, participant identifiers, and access activity are stored so the selected participant can view it. Shared Invoice does not upload your complete local invoice database or create a public link.

AI Import

AI Import runs only when you select a PDF or image and confirm that it may be shared for analysis. The selected document is sent through a Supabase Edge Function to OpenAI to propose invoice or estimate fields.

The request uses store=false. Our backend does not intentionally save the source document to Supabase Storage or log its raw contents. OpenAI may retain limited API content for abuse monitoring for up to 30 days under its API data controls. We do not use AI Import documents to train our own models or intentionally opt them in to provider model training.

AI results are editable suggestions and may be wrong. Review them before saving or sharing a document.

Purchases, app activity, and support

Apple processes App Store payments. RevenueCat processes product and entitlement information needed to unlock subscriptions and restore purchases. BitForge does not receive your full payment-card details.

Invoices may process limited app events and Apple Search Ads attribution to understand feature reliability, onboarding, and purchases. Third-party Sentry crash reporting is not active in the current production configuration.

If you contact support, AppTriage processes the message, the reply address you provide, and ordinary browser or device information needed to deliver and protect the support service. The website host may process standard request and security logs.

Exports and service providers

When you export a file, it is sent only to the destination you choose, such as iCloud Drive, Google Drive, Dropbox, OneDrive, or the iOS share sheet.

Providers used for relevant features may include Apple, Supabase, OpenAI, RevenueCat, AppTriage, the website host, and a cloud destination you select. Their services are also governed by their own privacy terms.

Provider information: Apple Privacy, Supabase Privacy, OpenAI API data controls, RevenueCat Privacy, and AppTriage Privacy.

No sale or advertising tracking

BitForge does not sell your personal information and does not use third-party advertising SDKs to track you across other companies' apps or websites.

Retention, deletion, and your choices

• Local and iCloud data remains until you delete it or remove it through your device or Apple account.
• Account and service records remain while needed to provide the account and are deleted or de-identified after a valid deletion request, except for limited security, fraud-prevention, purchase, or legally required records.
• Shared Invoice data remains until access is revoked, an involved account is deleted, or it is no longer needed for the feature.
• AI Import source data is used for the requested analysis; provider abuse-monitoring retention is described above.

You can decline optional permissions, stop using AI Import, revoke Shared Invoice access, delete local documents, or delete your account in the app. You may also use the support form to request access, correction, or deletion of account data.

Deleting your Invoices account removes the supported backend account and user-owned server records, but it does not automatically delete local device data, private iCloud data, files exported elsewhere, or App Store purchase history. Deleting the app or account does not cancel an Apple subscription.

Security and children

We use encrypted transport, authenticated requests, and access controls designed to protect information. No service can guarantee absolute security.

Invoices is a business tool and is not directed to children under 13.

Changes and contact

We may update this policy when the app or its data practices change. The effective date above will be updated. For privacy questions or requests, contact BitForge through the private support form.