Pinvoice Privacy Policy

Updated 8 September 2026

Pinvoice (listed as Invoice Maker Manager On Fly) helps you prepare invoices, estimates and business records. This policy explains the information used by the mobile app and its optional online services.

Records on your device

Business and client details, invoices, estimates, signatures, payments, expenses, projects, work logs, visits and reminders are saved in the app's local storage. Imported photos, PDFs and reviewed page versions are also stored locally. Operating-system protections apply to this storage. Local notification scheduling shares the information needed to display the reminder with your device.

Documents leave the app when you choose to share or export them, use an online payment link, submit selected information to AI, or send a support report. Review the selected contents and recipient before sharing. Other apps, payment services and recipients handle shared data under their own policies. Pinvoice does not automatically send invoices or collect customer payments.

AI assistance

AI features require your review and permission to submit the selected notes, document pages or invoice facts. These can contain the business, client and financial details you include. The app shows the selected sources or describes the invoice fields used before the request. Unselected documents and private invoice notes are not automatically added to an AI request.

The selected content travels over encrypted connections to the Pinvoice service and through OpenRouter to a model provider. The service requests routes eligible for zero-data-retention processing. If an eligible route is unavailable, the request fails rather than silently relaxing that setting. The Pinvoice database does not store the submitted source images, prompts or generated document text as part of ordinary inference. Reviewed results and their sources remain on your device.

The service keeps request identifiers, operation/status, usage and cost records to enforce limits, investigate failures and prevent abuse. Firebase Authentication supplies an anonymous service identity; Firebase App Check and a device-held signing key help verify legitimate app requests. Network services also process connection information needed to deliver and protect requests.

AI suggestions can be inaccurate. You review and correct the result before saving, sharing or taking another action. You can continue with manual entry when AI is unavailable.

Reporting AI content

Report AI content lets you send a selected text excerpt, reason and optional comment to the developer. Remove confidential information you do not want reviewed. The report does not include source photos, files or other records. A request identifier associates it with the generated result and your service installation. Reports help investigate harmful or inaccurate output and improve safeguards.

Report text is available to the developer for review. It is scheduled for deletion after 30 days and is also deleted when you retire that AI identity. It is not added to analytics or sent for another AI generation. An unconfirmed submission remains available on the open report screen for retry.

Subscriptions

Apple or Google processes subscription payments. Pinvoice does not receive your payment-card details. The app and service use store product identifiers, signed transactions or purchase tokens and current subscription status to verify access, restore purchases and share the appropriate AI allowance. Server-held purchase references are encrypted. Canceling renewal does not erase a remaining paid period.

Diagnostics and service providers

Firebase provides app authentication, integrity, analytics and crash-reporting capabilities. Technical diagnostics can include app version, operating system, device characteristics and installation identifiers. Business documents and reported text are not analytics events. Store, hosting, authentication and AI providers process information necessary for their services. Pinvoice does not sell your information.

Your choices and deletion

You can refuse or revoke camera, photo and notification permissions in device settings. You can avoid AI submission and use manual document entry. Local records and source files can be managed in the app; removing the app removes its ordinary local storage subject to your operating system's behavior.

The AI identity control retires the current installation's service authorization, removes its reports and clears the app's signing identity after the server confirms the request. Limited pseudonymous security, purchase and usage records remain for access verification, allowance enforcement and abuse prevention. Retiring an AI identity does not cancel an Apple or Google subscription or delete local invoices. Manage subscriptions through the store that processed the purchase.

Contact and changes

Use Help & support in the app or the support link in its store listing for privacy questions and requests. This policy will be updated when the app's data practices change. The date above identifies this version.