Security Policy

Last Updated: [LAST UPDATED]

1. Data Storage and Protection

1.1 iOS Device Security

Your data benefits from Apple's industry-leading device security:

• Encryption at Rest: Data is encrypted on your device using iOS file-level encryption
• Passcode Protection: When you lock your device with a passcode/Face ID/Touch ID, app data is protected
• Secure Enclave: iOS uses dedicated hardware security for cryptographic operations
• App Sandboxing: InvoiceMaker cannot access data from other apps, and other apps cannot access InvoiceMaker data

1.2 PDF Export Security

When you export invoices as PDF files:

• PDFs are generated locally on your device
• You control where PDFs are saved (Files app, email, AirDrop, etc.)
• PDFs are standard documents without DRM or tracking
• We recommend password-protecting sensitive PDFs before sharing (use Files app or third-party PDF tools)

2. Network Security

2.1 Minimal Network Access

InvoiceMaker has limited network usage:

• No backend servers: The app does not communicate with our servers for data storage or sync
• Third-party services: Network access is only used for:
  • Google AdMob (free users only) - ad delivery
  • Apple StoreKit - subscription verification

2.2 Third-Party Service Security

3. Permissions and Access

3.1 Required Permissions

InvoiceMaker requests minimal permissions:

• Contacts (Optional):
  • When requested: Only when you tap "Import from Contacts" to add a client
  • What we access: Only the specific contact you select
  • What we do: Copy name, email, phone, address to InvoiceMaker client record
  • Data storage: Contact data is stored locally and never synced back to Contacts
  • Your control: Deny this permission and manually enter client details instead

• App Tracking Transparency / IDFA (Optional):
  • When requested: On first app launch (iOS 14.5+)
  • What it does: Allows Google AdMob to show personalized ads across apps
  • Free users: Denying this permission shows non-personalized ads instead
  • Pro users: Not requested (no ads shown)
  • Your control: Change anytime in Settings → Privacy & Security → Tracking

3.2 Data Access by Third Parties

InvoiceMaker does not share your invoice, client, or business data with any third parties.

The only data shared with third parties is:

• Google AdMob: Device identifiers, ad interaction metrics (free users only, if tracking allowed)
• Apple: Subscription purchase receipts (all users who subscribe)

Your business data (invoices, clients, estimates, financial information) remains 100% local and private.

4. Security Best Practices

4.1 Recommendations for Users

To maximize the security of your data:

1. Enable Device Passcode: Use a strong passcode, Face ID, or Touch ID to lock your device
2. Keep iOS Updated: Install security updates promptly (Settings → General → Software Update)
3. Enable Find My iPhone: Allows remote wipe if device is lost or stolen
4. Export Backups: Regularly export important invoices as PDFs and store securely (iCloud, encrypted USB drive)
5. Password-Protect PDFs: Use Files app or third-party tools to encrypt sensitive PDFs before sharing
6. Review Sharing: When sharing invoices via email/AirDrop, verify recipient before sending
7. Secure Email: Use secure email providers when emailing invoices containing financial data

4.2 What We Do to Protect You

• No account system: No passwords to leak, no login credentials to steal
• No cloud storage: No centralized database that could be hacked
• Minimal third-party SDKs: Only AdMob and StoreKit (both from trusted vendors)
• Code security: Regular security reviews and updates
• App Store distribution: Code-signed and verified by Apple
• Sandboxed environment: Isolated from other apps by iOS security

5. Data Retention and Deletion

5.1 How Long We Keep Data

On Your Device:

• Data persists until you manually delete it (swipe to delete items) or uninstall the app
• No automatic expiration or deletion

On Our Servers:

• We do not store your invoices, clients, or business data on any servers
• Exception: Apple stores subscription receipts per their standard policy

5.2 How to Delete Your Data

Delete Individual Items:

1. Swipe left on any invoice, estimate, or client
2. Tap "Delete"
3. Confirm deletion (permanent and irreversible)

Delete All Data:

1. Open iPhone/iPad Settings
2. Scroll to "InvoiceMaker"
3. Tap "Delete App"
4. All app data is permanently removed from your device

6. Security Incident Response

6.1 Vulnerability Disclosure

If you discover a security vulnerability in InvoiceMaker, we encourage responsible disclosure:

1. Email us: [YOUR EMAIL] with subject line "Security Vulnerability"
2. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if applicable)
3. Give us time: Allow us reasonable time (typically 90 days) to address the issue before public disclosure
4. Do not: Publicly disclose the vulnerability before we've had a chance to fix it

6.2 Breach Notification

Current Architecture: Given our local-first design with no cloud storage:

• There is no centralized database that could be breached
• Your data security depends primarily on your device security
• If your device is lost, stolen, or compromised, follow Apple's Find My iPhone procedures

If We Discover a Vulnerability:

• We will release an app update to fix the issue as soon as possible
• We will notify users via App Store update notes
• For critical vulnerabilities, we may also send notifications within the app
• We will provide clear instructions on any actions users should take

7. Children's Privacy and Security

InvoiceMaker is not directed at children under 13. We do not knowingly collect data from children.

• No account creation (no age verification needed)
• Local-only storage (no data collection)
• If you believe a child has used the app, simply delete it from their device

8. International Security Standards

8.1 GDPR Compliance (European Users)

InvoiceMaker respects GDPR principles:

• Data Minimization: We collect minimal data (only what's stored locally by you)
• Purpose Limitation: Data is used only for app functionality
• Storage Limitation: Data persists only as long as you choose to keep it
• Right to Erasure: Delete the app anytime to remove all data
• Data Portability: Export invoices as standard PDFs

8.2 CCPA Compliance (California Users)

Under the California Consumer Privacy Act:

• No data sale: We do not sell your personal information
• Transparency: This policy discloses all data practices
• Right to delete: Uninstall the app to delete all local data
• Right to opt-out: Disable tracking via iOS ATT settings

9. Updates to This Policy

We may update this Security Policy to reflect:

• Changes to the app's features or functionality
• New security measures or best practices
• Legal or regulatory requirements
• User feedback and recommendations

When we update this policy:

• We will update the "Last Updated" date at the top
• Significant changes will be noted in app update release notes
• The latest version is always available at [YOUR WEBSITE]/security-policy.html