Timastra Invoice Maker - Privacy policy

This privacy policy explains how Timastra Invoice Maker (Android package com.timastra.mobile_invoicemaker) and its connected service handle your information. It covers local business records, optional account and cloud features, and the service providers used by the app.

Business records on your device

The app stores business details, customer names and contact details, estimates, invoices, line items, notes, payment records, expenses, receipt images and other attachments in app-private storage. It also keeps unfinished forms for recovery. These records support document creation, reporting and record keeping. Local invoicing works without an account; each signed-in account has a separate device workspace.

Camera, photo and file pickers let you choose images or files to add. The Android contact picker returns the phone record you select; the app does not request your entire address book. Optional owner reminders are local notifications with generic text and do not message customers. Keyboard dictation is handled by your chosen keyboard provider.

Accounts and authentication

Google sign-in through Firebase Authentication processes your name, email address, profile picture, user identifier and authentication information. Google/Firebase also process technical connection information, including IP addresses, to operate and protect authentication. The cloud service verifies your identity and account validity with Google. Timastra Invoice Maker does not receive your Google password. Session details use Android secure storage and Firebase's native authentication storage.

Existing Timastra sign-ins remain supported for older versions and verified migration. The Timastra identity service handles that sign-in. Linking requires fresh verification of both identities; it preserves the existing workspace and purchase identifier.

Cloud sync and customer documents

When you choose to synchronize, the app sends business records, customer contact details, financial records and attached images to its Cloudflare-hosted service and database. We use them to save and restore your workspace and provide the connected features you select. We also store account/workspace identifiers, sync versions and operation records, and feature-use counters to control access, reconcile updates and limit misuse.

Creating a customer link makes the frozen issued document available to anyone who has the complete link until it expires or you revoke it. It can include your business details, the customer's details, items, amounts and notes. The service records link-view events and typed customer decisions, including name, decision, optional reason, consent terms, document version and time. Share these links only with intended recipients.

Email and recurring delivery

When you send a customer email, or enable and confirm automatic recurring delivery, Resend processes the recipient address and email content, including the document number and customer link. The service stores delivery settings, recipient addresses and delivery-status records to send messages and handle retries. Provider acceptance does not establish delivery or that a customer read a message. You can disable automatic delivery in the app; customer links also offer an automatic-email opt-out.

Receipt recognition and AI suggestions

Google ML Kit recognizes receipt text on your device. It does not send receipt images or recognized text to Google. Its SDK sends performance and usage diagnostics, including device/app information, an installation identifier, API configuration, event/error information and input/output sizes. Google uses these metrics to maintain and improve its APIs and detect abuse. Scanning is optional; manual entry remains available. A receipt you separately synchronize is uploaded as described above.

Choosing AI suggestions sends the description you enter to Cloudflare Workers AI to generate draft invoice items. Only include information needed for that request and review the suggestions before saving. The service does not send your whole workspace for this feature.

Purchases and payments

Optional Pro subscriptions use Google Play and RevenueCat for purchases, plan verification and restoration. While signed in, the app checks your plan at startup, when accounts change and when you open plans. RevenueCat receives a pseudonymous account identifier, purchase history and app/device metadata. Invoice contents, customer records and attachments are not sent to RevenueCat. Google Play handles store payment information.

Public app releases do not offer online card collection. Restricted payment testing uses Stripe sandbox accounts. In that test flow, Stripe processes merchant/account identifiers, invoice references, amounts, currency and checkout details; card-entry information goes to Stripe. This does not enable live payments.

Sharing, support and security

You choose when to share or print a PDF, report, receipt archive or backup. The selected app, print service or recipient then handles that copy under its own practices. Portable backups are unencrypted; keep them in a trusted private location. If you contact support, we receive the address and information you include to respond to your request.

Connected services use HTTPS. Cloud workspace access requires verified account credentials; customer links use a separate secret and can be revoked. The backend does not log authorization tokens, link secrets or financial payloads. Hosting and SDK providers process connection and service diagnostics as described in their policies. This app does not include advertising SDKs, Firebase Analytics or Firebase Crashlytics.

Retention and your choices

Local records and recovery copies remain until removed from the device. Cloud snapshots, completed uploads and related service records remain until you delete the cloud workspace or account; replacing a snapshot or archiving a document does not by itself erase earlier cloud copies. Incomplete uploads older than 24 hours are removed during scheduled maintenance. Feature-use counters older than seven days are removed during maintenance. Temporary export copies are removed after 24 hours when the app next starts; exported copies outside the app remain under your control.

You can use local invoicing without signing in, choose whether to sync, revoke customer links and disable recurring delivery or local reminders. Signing out or canceling a subscription does not delete business records. Provider-held authentication, diagnostics, billing and backup records follow the applicable provider's retention policy; we do not promise a single deletion deadline for those separate systems.

Delete your account or cloud records

In Timastra Invoice Maker, open More → Cloud account.

Delete cloud workspace removes this app's live cloud workspace, uploaded images, document links, customer decisions and link events, messages, usage records, recurring-delivery settings and records, and app-side payment and subscription records. A fresh sign-in and typing DELETE are required.
Delete account and cloud records also deletes this app's Firebase Authentication account after fresh Google verification. This does not delete your Google account.

Both choices preserve the separate local device copy. Account deletion also saves a complete local recovery copy, including attachments, available without sign-in under More → Account recovery copies. These copies remain on your device until you remove the app's stored data or uninstall it. Export anything you want to keep first. Copies you exported or sent to other people are not erased by cloud deletion.

Minimal identity-binding records are retained to prevent previous workspaces from being reassigned. They contain the sign-in provider, its user identifier, the workspace identifier and creation time; they do not contain invoices or attachments and currently have no automatic expiry. Provider event identifiers and hashes used to prevent duplicate event processing are also retained, without the original event payload. Provider backups and billing records can outlast deletion from the live app database under the providers' own retention policies.

Deletion does not cancel store subscriptions. Manage or cancel them in Google Play. It does not delete your Google account, your shared Timastra identity or accounts in other Timastra products. Legacy shared identities can be managed separately at Timastra account settings.

Request deletion without the app

Email hello@timastra.com from your registered address with the subject Timastra Invoice Maker account deletion. Tell us whether you want the app account and cloud records deleted, or only the cloud workspace. We verify account ownership before acting. Do not send your password, sign-in codes or invoice attachments. You can use this address for privacy questions and access or correction requests too.

Provider privacy information

Policy updates

We will publish changes to this policy at this address and update the date above. Contact hello@timastra.com with questions about the policy or your information.