goInvoicer ("we," "us," "the app") is an invoicing and bookkeeping app for freelancers and small businesses, operated by Prism Apps LLC, 5900 Balcones Drive STE 100, Austin, TX 78731, USA — the data controller responsible for your information under this policy. This policy explains what information goInvoicer collects, why, and how you can control or delete it.
If you have questions about this policy, or want to exercise a data access or deletion request, contact us at support@goinvoicer.com.
goInvoicer is local-first: your data lives on your device by default. If you turn on cloud sync (an optional sign-in), the same data is also stored securely so it can sync across your devices. Specifically:
| Category | Examples | Why |
|---|---|---|
| Account information | Email address, password (hashed) | To create and secure your account, if you choose to sign in for cloud sync |
| Business profile | Business name, your name, email, phone, address, tax ID, logo | Printed on the invoices and estimates you create |
| Client data you enter | Client names, emails, phone numbers, addresses, notes | So you can bill your own clients |
| Invoices, estimates, items, expenses | Line items, amounts, dates, payment status, receipt photos | The core function of the app |
| Payment configuration | A payment QR code image you upload, bank transfer instructions you type, and — if you connect it — your Stripe account ID | Shown to your clients so they can pay you; we never see your bank details or card numbers |
| Photos you choose to use | Business card scans, receipt photos, logo images | To auto-fill client details or expense records using AI, and to display your logo |
| Voice dictation | The spoken audio when you use the microphone to dictate an invoice | Converted to text by your device's speech recognition so AI can draft an invoice from what you said. We don't record, store, or transmit the raw audio ourselves — see Section 2 for how speech is handled. |
| Device permissions | Camera, Photo Library, Microphone, Speech Recognition, Face ID | Only used when you actively scan a card/receipt, pick a photo, dictate by voice, or unlock the app with Face ID — each is requested at the moment you use that feature. Importing a contact uses the system contact picker, which needs no contacts permission and returns only the one contact you tap. |
We do not collect location data, browsing history, or advertising identifiers. We don't run ads, and this version of goInvoicer runs no third-party analytics, attribution, or crash-reporting service — nothing in the app profiles you or tracks you across other apps or websites. If we ever turn on crash reporting to diagnose bugs, we'll list the provider in the table below and update our App Store and Google Play privacy disclosures before doing so.
Anonymous AI-usage identifier. When you use an AI feature (such as drafting an invoice) without signing in, the app creates an anonymous identifier so we can fairly count AI usage and prevent abuse of the service. This identifier is not linked to your name, email, or any personal data, and is not used to sync or upload your invoices, clients, or other content — that only ever happens after you deliberately sign in. Unused anonymous identifiers are automatically deleted after a period of inactivity, and you can avoid creating one entirely by not using the AI features.
goInvoicer relies on a small number of service providers to function. We don't sell your data to anyone, and these providers only receive what's needed to provide their specific service to you.
| Provider | What it handles | What it receives |
|---|---|---|
| Supabase | Account authentication, cloud database, and file storage (when cloud sync is enabled) | Your email, and your business/client/invoice/expense data — encrypted in transit and at rest |
| Anthropic (Claude) | AI-assisted features: drafting/polishing invoice text, scanning business cards, and scanning receipt photos for expense entry | The text or photo you submit for that specific action, sent at the moment you tap the AI feature. A business-card or receipt scan may contain another person's or business's details (name, email, phone) — only the image you choose to scan is sent, and only for that one action. Anthropic does not use API data like this to train its models. |
| Render | Hosts the goInvoicer backend server that your app connects to for cloud sync, AI features, the public payment pages, and account deletion | The requests your app makes pass through this server. As part of normal operation and abuse-prevention, the server processes your IP address and standard request/server logs. It does not permanently store your invoice content itself — that lives in Supabase. |
| Stripe (Stripe Connect) | Optional: lets you accept card payments from your own clients directly through your own Stripe account | If you connect Stripe, your connected-account ID is stored so we can generate checkout links on your behalf. Your clients' card details go directly to Stripe — we never see or store them. Money settles directly to your Stripe account, not ours. |
| Apple / Google (speech recognition) | Converting your voice to text when you dictate an invoice, using the operating system's built-in speech recognition | The spoken audio is handled by your device's Apple or Google speech-recognition service under their own privacy policies. Depending on your device and OS settings this may be processed on-device or on Apple/Google servers. goInvoicer only receives the resulting text. |
| Apple / Google (billing) | App subscription billing, if and when paid plans are offered, via the App Store or Google Play | The current version of goInvoicer is free and does not sell subscriptions in the app. If paid plans are introduced, your purchase/subscription status will be handled by Apple or Google under their own privacy policies, and we would only receive confirmation of which plan is active. |
If you upload a "scan to pay" QR code or type in bank transfer instructions, these are stored so they can be displayed on your invoices and on the public payment page you share with clients. goInvoicer never processes these payments itself — you're responsible for confirming you've actually been paid via "Record payment."
When you send an invoice, goInvoicer can generate a shareable web link so your client can view and pay it without an account. Anyone with that link can view the invoice it points to — don't share it publicly. You can revoke a link at any time by voiding or deleting the invoice.
That page records when it is first opened, and — if your client taps “I’ve paid this invoice” — when they said they paid, so you can follow up and confirm the payment. These are timestamps recorded against your invoice only. We do not collect your client's name, email, IP address, or any payment details from that page; card payments are handled entirely by Stripe.
Your data is kept for as long as your account exists. You can:
One exception, so you know about it. When you delete your account we keep a one-way cryptographic hash of your email address — not the address itself, and not anything we can read or reverse back into your email — for up to 180 days. Its only purpose is to stop the same address from repeatedly deleting and re-registering to farm unlimited free trials. It is never used to contact you, is not linked to any of your deleted content, and is automatically erased after 180 days.
Data stored in the cloud is protected with row-level security, meaning your account's data is only ever readable by you (or, if you invite a team member, by that team member — never by other unrelated accounts). Data is encrypted in transit (HTTPS/TLS). We use service-level credentials only on our own server, never inside the app itself.
If you invite a team member, they gain access to your business's clients, invoices, items, and expenses, but not your billing/payment configuration. You can remove a team member's access at any time from Settings → Team members.
goInvoicer is a business tool and is not directed at, or intended for use by, children. We do not knowingly collect information from anyone under 13 (or under 16 where applicable local law requires).
If we change what we collect or how we use it, we'll update this page and the "Last updated" date above, and reflect any material changes in the app's privacy disclosures on the App Store and Google Play.
Prism Apps LLC, 5900 Balcones Drive STE 100, Austin, TX 78731, USA
Questions, deletion requests, or concerns: support@goinvoicer.com