Privacy policy

1. Who we are

Invoice Swift is operated by STANDARD CITY SERVICES LIMITED, company number 17356784. For account and service administration, we are responsible for deciding how personal information is used.

Email: support@invoiceswift.app.

Businesses using Invoice Swift are responsible for the client information they enter and the documents they share. If your information appears on an invoice or estimate issued by a business, contact that business about its use of your information. You can also contact us about information held by the service.

2. Information we process

• Accounts: email address, account identifier, display name where provided, and sign-in information handled through Firebase Authentication. Google sign-in provides the profile information permitted by the sign-in flow; it does not give Invoice Swift general access to your Gmail messages, photo library or Google password.
• Business and client details: names, phone numbers, email and postal addresses, business identifiers and other details entered into profiles, client records and documents.
• Financial and document records: invoices, estimates, items, expenses, prices, discounts, tax, payments, deposits, balances and payment instructions, including bank account information you choose to include.
• Content you provide: descriptions, notes, terms, signatures, document customisation and images selected for logos, signatures or receipts. Image files or their references may be stored with the records, depending on platform and feature.
• Support: emails, our responses and attachments included in a support conversation.
• Technical and security information: service providers process network requests, IP addresses and authentication/security information when you use online features. Google states that Firebase Authentication retains logged IP addresses for a few weeks.

The app does not need your whole address book or photo library to create a document. Only provide information and permissions needed for the features you choose.

3. How and why information is used

We use information to authenticate and secure accounts; save and synchronise records; create, export, print and share documents; record approvals and payment status; provide requested reminders; answer support requests; and prevent misuse.

For account and service delivery, our basis is performance of our contract with you. For security and necessary support administration, we rely on legitimate interests in protecting and operating the service. We rely on legal obligations where retention or disclosure is required by law. Where an optional use relies on consent, you can withdraw that consent.

Invoice Swift is not designed to sell personal information or use it for cross-app advertising tracking. The app code reviewed for this policy does not include an advertising SDK, Google Analytics or Firebase Crashlytics.

4. Storage, sharing and service providers

Records and preferences are stored locally on your device. Signed-in users’ records and settings are synchronised with Google Firebase. Signing in may migrate existing local records into the account. Guest mode does not require a Firebase account, but online features and shared links still make network requests.

Sharing an invoice or estimate creates a hosted record containing its document details and any included client, business and bank information. Anyone with the link may view it and use the supported confirmation or approval controls. A recipient can forward the link or retain a copy. Share links only with intended recipients.

• Google Firebase: authentication, cloud database and hosted document services. See Firebase privacy information.
• Google Gmail: support email conversations. See Google’s privacy policy.
• Cloudflare: the public support and privacy website and the requests needed to deliver and protect it. See Cloudflare’s privacy policy.

When you choose another app or service to send, print or save a document, that service handles the information under its own terms. Information may also be disclosed where required by law or necessary to establish or defend legal claims.

5. Where information is processed

The default Firestore database is hosted in Google’s europe-west2 region, London. This does not mean all processing stays in the UK: authentication, support email, website hosting and provider security operations may involve other countries. Provider privacy information linked above explains their international operations. Contact us for information about the transfer arrangements applicable to your data.

6. Retention and deletion

We retain active account records to provide the service until they are removed or the account is deleted, unless a legal or security need requires particular information to be retained.

• Delete account: the in-app process removes the login, associated business records and the account’s hosted shared documents. Once deletion completes, those shared links should no longer serve the documents. Identity verification and a working connection may be needed. If an error is shown, deletion may not have completed; contact support.
• Delete guest data: clears the guest’s local business records and settings. A document-usage allowance counter is retained to enforce the free-use limit; deleting guest data is not a quota reset.
• Support emails: our retention policy is to delete the conversation, responses and attachments 12 months after the request is resolved, unless needed for a dispute or legal obligation. This is a support-handling policy, not a promise that Gmail automatically deletes messages on that date.
• Logs and recovery copies: provider security logs and any internal recovery copies follow the providers’ applicable retention processes. We do not promise immediate erasure from every provider log. We do not currently maintain manual Firebase database exports.

Account deletion cannot remove files already downloaded, printed or saved by recipients, or information held independently by another business. Deleting an account does not cancel an Apple subscription; manage any subscription separately in your Apple account settings.

7. Your choices and rights

You can edit records, use the app’s export and deletion tools, and control camera, photo and notification permissions through device settings. Account information is needed for signed-in features; you do not have to provide optional document fields. Without a requested permission, the related optional feature may not work.

Depending on applicable law, you may request access, correction, erasure, restriction, portability, or object to processing. Contact support@invoiceswift.app. We may need to verify your identity and consider applicable exceptions. We do not use the app to make automated decisions with legal or similarly significant effects about you.

You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/, or to your local data-protection authority.

8. Keeping information safe

We use authentication and database access controls to manage access to account records. No system guarantees absolute security. Protect your device and sign-in credentials, and avoid sharing document links publicly. Never send support your password, verification codes or full payment-card details.

9. Changes to this policy

We will update this page when practices change and revise its date. Material changes will be communicated through an appropriate service channel.