Privacy Policy

The short version: your data never reaches us.

Invoice Vault has no user accounts and no server that stores your business records. Everything you enter stays in a database on your own device. This page explains that in full.

Last updated 17 August 2026 · Khattak Digital Media, Melbourne, Australia

What we collect: nothing

We do not operate an account system, an analytics service or a server that receives your invoices, customers, transactions, receipt photos or business details. We cannot read your data, hand it to anyone, or lose it in a breach, because we never receive it.

Where your data lives

All app data — businesses, customers, products, quotes, invoices, credit notes, income and expense entries, receipt and line-item photos, time entries, signatures and your settings — is stored in a local database inside the app’s private storage on your device, protected by your operating system’s app sandbox.

If you enable the app lock, unlocking uses your device’s own biometric or passcode check. We never see the result and no PIN or biometric data leaves the device.

Backups you control

You can export a backup archive of your data. Where it goes is your choice — your own iCloud Drive or Google Drive, another cloud folder, a computer, or the phone’s own Files app. It travels from your device to the destination you pick and never passes through us.

Those copies are then governed by that provider’s terms, and deleting the app does not delete them. Restoring simply reads the archive back into the app.

Device permissions

  • Camera and photo library — only when you attach a receipt, a line-item photo or a logo. Images stay on the device.
  • Receipt scanning — text is read from the photo on the device itself. The picture is never uploaded for processing.
  • Contacts — when you import a customer, the system contact picker hands the app only the single entry you chose. The app does not read your address book.
  • Notifications — payment reminders are scheduled locally on the device. No push server is involved.

When you send a document

Sharing an invoice, quote or report hands the file to your operating system’s share sheet, and you choose the destination — email, WhatsApp, SMS, AirDrop, a printer or Files. The document goes directly from your device to that app or service, under its own privacy terms.

Subscriptions and payments

Subscriptions are billed by Apple’s App Store or Google Play. They process the payment and tell the app only whether a subscription is active. We never receive or store your card number, billing address or store account details. Their privacy policies cover that transaction.

If you set up a Stripe, PayPal Business or Square payment link so customers can pay an invoice by card, that link belongs to your own account with that processor. Your customer’s card details go to them, never to us — and never into the app.

No tracking, no ads, no data sales

The app contains no advertising SDKs, no third-party analytics and no cross-app tracking identifiers. We do not sell, rent or share personal information, because we hold none.

This website and emailing us

This site sets no advertising or tracking cookies. Fonts are loaded from Google Fonts, which receives the request as an ordinary web request from your browser.

If you use the contact form or email us, we receive what you send — your name, your email address and your message — and use it only to reply and to keep a record of the exchange. We don’t add you to a mailing list without asking, and you can ask us to delete the correspondence at any time.

Your rights, and deleting your data

Because your records are on your device, you already hold them. You can export them at any time as a PDF, a CSV or a backup archive, and deleting the app removes the local database and everything in it — so please take a backup first if you want to keep it.

For any correspondence you’ve had with us, you can ask for a copy or ask us to erase it — send the request through the contact form.

Children

Invoice Vault is a business tool and is not directed at children under 13. We do not knowingly collect information from them — or, in fact, from anyone.

Changes to this policy

If this policy changes we will update the date at the top of the page, and note anything material in the app’s release notes. Continuing to use the app after a change means you accept the updated policy.

Contact

Khattak Digital Media — Melbourne, Australia.

Privacy questions and data requests: use the contact form and we’ll reply by email.

Invoice Vault

Local-first invoicing and bookkeeping for iOS and Android. Developed by Khattak Digital Media, Melbourne, Australia.

© 2026 Khattak Digital Media. Coming soon to iOS and Android.