Privacy Policy

Last Updated: October 20, 2026 (Version 2.1)
Effective Date: October 20, 2026 (first published February 11, 2026)

Introduction

KwikInvoice ("we," "our," or "us") is operated by LoggedOn (Pty) Ltd and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use:

  • the KwikInvoice Android app (the "App"); and
  • our website at kwikinvoice.app, including the free web invoice builder at kwikinvoice.app/create-invoice/ (the "Website").

The App and the Website work differently. Where a section applies only to one of them, we say so.

By using KwikInvoice, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

1. Information You Provide Directly

When you use KwikInvoice, you may provide the following information:

Business Information:

  • Business name
  • Business email address
  • Business phone number
  • Business physical address
  • Business logo (optional)

Client Information:

  • Client names
  • Client email addresses
  • Client phone numbers
  • Client physical addresses
  • Client VAT numbers (optional)

Invoice Data:

  • Invoice numbers
  • Invoice amounts and line items
  • Invoice dates (issue date, due date, payment date)
  • Invoice status (draft, unpaid, paid)
  • Invoice notes

Contact Data (Optional):

  • With your explicit permission, we may access your device contacts (READ_CONTACTS) to help you quickly add client information via autocomplete
  • Contacts are NEVER stored in the app or uploaded to any server
  • Contact data is used in-memory only during the autocomplete session and is discarded when you stop typing or close the picker
  • Only clients you manually save are stored locally in the SQLite database
  • This permission is optional and can be denied or revoked at any time

Business & Financial Data:

  • In the App, business name, address, bank details, VAT number, and invoice data are stored locally in SQLite on your device — never transmitted to any server
  • Security note: The local SQLite database is currently unencrypted. Your data is protected by Android's app sandboxing, but may be accessible on rooted devices or via unencrypted device backups. We recommend enabling full-device encryption on your Android device. Database-level encryption is planned for a future update

2. Information Collected Automatically

Analytics Data:

  • Firebase Analytics uses an anonymous, randomly-generated identifier (@invoiceflow_user_id stored in AsyncStorage). This identifier is not linked to your name, email, or any personally identifiable information (PII)
  • Events collected include: app opens, screen views, invoice creation counts, client creation counts, PDF sharing/generation, paywall views and interactions, subscription purchase events, onboarding completion, in-app review prompt responses, client selection methods, invoice status changes, settings changes, error events, and feature usage metrics (20+ distinct event types)
  • Analytics data is transmitted to Google Firebase (USA, Google LLC)
  • Analytics data is not sold to third parties and is used solely for app improvement

Subscription & Purchase Data:

  • RevenueCat, Inc. (US-based) processes subscription management data including: purchase history, device identifiers, transaction data, and entitlement status
  • RevenueCat does not see your payment card details (those are handled exclusively by Google Play Billing)
  • RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

Device Information:

  • Device type and model
  • Operating system version (Android version)
  • App version
  • Anonymous device identifiers (for analytics only)

Local Storage (App):

  • All App invoice, client, and business data is stored locally on your device using SQLite database
  • Analytics events are stored locally in device storage (AsyncStorage) before transmission

3. Information We Do NOT Collect

  • Payment Information: We do not collect or store credit card information or payment details. All payments are processed securely through Google Play Billing
  • Personal Identification Documents: We do not collect ID numbers, passports, or other government-issued identification
  • Location Data: We do not track your physical location
  • Browsing History: The KwikInvoice app does not track your web browsing or other app usage outside of KwikInvoice. Our Website uses Google Analytics 4 and Meta Pixel only if you accept cookies — see "Cookies & Website Tracking" below
  • Biometric Data: We do not collect fingerprints, facial recognition data, or other biometric information

4. The Free Web Invoice Builder (kwikinvoice.app/create-invoice/)

  • Your invoice stays in your browser. The details you type (your business details, client details, items, amounts and bank details) are saved only in your browser's local storage on that device, under the key kwikinvoice:anonymous-invoice-draft, so you can come back to your draft later.
  • The PDF is made on your device. The invoice PDF is generated in your browser. We do not receive, store or see your draft or the PDF.
  • No account is needed and nothing is synced to other devices.
  • How to remove it: select Clear draft in the builder, or clear site data for kwikinvoice.app in your browser settings. On a shared or public computer, clear the draft when you are done.
  • Analytics: if you accept cookies, we record only that builder steps happened (for example "invoice preview ready" or "PDF downloaded"). We never send the content of your invoice, contact details or amounts to Google, Meta or anyone else.

5. Website Hosting (Cloudflare)

  • Our Website is hosted on Cloudflare (Cloudflare Pages and Workers). Cloudflare, Inc. acts as our operator (service provider) under POPIA.
  • When you visit the Website, Cloudflare processes technical information needed to deliver and protect it, such as your IP address, browser type, the pages requested and the time of the request. This is used for delivery, security and abuse prevention, and short-term operational logs.
  • Cloudflare serves the Website from data centres around the world, including in South Africa, so this information may be processed outside South Africa.
  • Cloudflare is bound by a Data Processing Addendum with us that includes security obligations and the EU Standard Contractual Clauses. Cloudflare DPA · Cloudflare Privacy Policy

How We Use Your Information

We use the collected information for the following purposes:

1. Core App Functionality

  • Create, store, and manage your invoices and client information
  • Generate PDF invoices for sharing
  • Track invoice payment status
  • Provide client autocomplete suggestions

2. App Improvement

  • Analyze usage patterns to improve features and user experience
  • Identify and fix bugs and technical issues
  • Measure app performance and stability

3. Subscription Management

  • Manage your subscription status (free vs. Pro)
  • Track invoice count for freemium limits
  • Process subscription upgrades through Google Play Billing

4. Customer Support

  • Respond to your inquiries and support requests
  • Troubleshoot technical issues

5. Legal Compliance

  • Comply with applicable laws and regulations
  • Enforce our Terms of Service
  • Protect our rights and prevent fraud

Data Storage and Security

Local Storage (Android App)

  • In the App, all your invoice and client data is stored LOCALLY on your device
  • We do NOT store your App invoices, clients, or business information on our servers
  • Your App data remains on your device and is under your control
  • If you uninstall the App, all local App data is deleted
  • The web invoice builder also keeps your draft only in your browser — see "The Free Web Invoice Builder" above

Security Measures

We implement industry-standard security measures to protect your information:

  • App Sandboxing: All data is stored in app-specific directories protected by Android's app sandboxing
  • Data Integrity: SQLite database uses Write-Ahead Logging (WAL) mode for data integrity
  • No Cloud Backup (App): App invoice and client data is not transmitted to external servers
  • Secure Communications: Any network requests use HTTPS encryption
  • Important Security Disclosure: The local SQLite database is currently unencrypted. While protected by Android's app sandboxing, data may be accessible on rooted devices or through unencrypted device backups. We strongly recommend enabling full-device encryption in your Android settings. Database-level encryption is planned for a future update

Data Retention

  • Invoice Data (App): Retained locally on your device until you delete it
  • Web Builder Draft: Retained in your browser until you select Clear draft or clear your browser data
  • Analytics Data: Retained locally for up to 30 days or until flushed, then deleted
  • Account Data: If you delete the app, all data is removed from your device

Data Sharing and Third Parties

We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Third-Party Services We Use

The following table summarises the third-party services used by KwikInvoice:

Service Purpose Data Processed Location Privacy Policy
Google Firebase Analytics (App only) App usage analytics Anonymous user ID (@invoiceflow_user_id), usage events USA (Google LLC) policies.google.com/privacy
RevenueCat Subscription management Purchase history, device IDs, transaction data USA (RevenueCat, Inc.) revenuecat.com/privacy
Google Play Billing Payment processing Subscription status only USA (Google LLC) policies.google.com/privacy
Google Play In-App Review API In-app review prompt No personal data collected by us; review content goes directly to Google Play USA (Google LLC) policies.google.com/privacy
Expo (Development Framework) App framework and development tools Basic device and app version information (in development mode only) USA Expo Privacy Policy
Meta Pixel (Website, with consent) Website advertising & analytics IP address, browsing behaviour, device info USA (Meta Platforms, Inc.) Meta Privacy Policy
Google Analytics 4 (Website, with consent) Website usage measurement Cookie identifiers (_ga, _ga_*), pages visited, builder step events, device and browser info, IP address (used by Google to deliver the service and estimate general location) USA (Google LLC) policies.google.com/privacy
Cloudflare (Website hosting) Hosting, security, delivery IP address, request details, technical logs Global network incl. South Africa (Cloudflare, Inc., USA) cloudflare.com/privacypolicy

Cross-Border Data Transfer (POPIA Section 72): Some of our service providers process information outside South Africa. We transfer personal information only where POPIA section 72 allows it:

  • Website analytics and advertising (Google Analytics 4, Meta Pixel): only if you select "Accept" on our cookie banner. Your choice is your consent to this transfer to the USA (s72(1)(b)). You can withdraw it at any time via "Cookie Settings" in the footer.
  • Website hosting (Cloudflare): Cloudflare is bound by a data processing agreement with the EU Standard Contractual Clauses, which gives protection substantially similar to POPIA (s72(1)(a)).
  • App analytics and subscriptions (Google Firebase, RevenueCat, Google Play): we have accepted the data processing terms of Google (for Firebase) and RevenueCat, which bind them to protect your information in a way substantially similar to POPIA (s72(1)(a)). Subscription processing is also needed to provide the Pro plan you buy (s72(1)(c)).

1. Google Play Billing

2. Firebase Analytics (Active)

  • Purpose: Track app usage and feature adoption for product improvement
  • Data Shared:
    • Anonymous user ID (@invoiceflow_user_id — randomly generated, not linked to PII)
    • Event names (e.g., "invoice_created", "pdf_generated", "paywall_displayed", "onboarding_completed")
    • App version and OS version
    • Event properties (e.g., invoice count, feature usage)
  • No PII Shared: Invoice content, client names, and business data NOT transmitted
  • Privacy Policy: Firebase Privacy Policy
  • Opt-Out: Currently not available in v1.0.x (planned for future release)

3. RevenueCat (Subscription Management)

  • Purpose: Manage subscription status and entitlements
  • Data Shared:
    • Subscription status (Free/Pro)
    • Purchase events
    • Device identifiers (for entitlement sync)
  • No Financial Data: RevenueCat does not see payment details (handled by Google Play)
  • Note: RevenueCat is a US-based company. We have accepted RevenueCat's data processing terms, which provide protection substantially similar to POPIA (Section 72(1)(a)), and the transfer is needed to provide the Pro subscription you buy (Section 72(1)(c))
  • Privacy Policy: RevenueCat Privacy Policy

4. Google Play In-App Review API

  • Purpose: Prompt users to rate and review the app within the app experience
  • Data Shared: No personal data is collected by KwikInvoice through this API. Review content is submitted directly to Google Play by the user
  • Privacy Policy: Google Privacy Policy

5. Expo (Development Framework)

  • Purpose: App framework and development tools
  • Data Shared: Basic device and app version information (in development mode only)
  • Privacy Policy: Expo Privacy Policy

6. Meta (Facebook) Pixel — Website Only

  • Purpose: Measure advertising effectiveness on kwikinvoice.app, show relevant ads on Facebook/Instagram, and improve marketing
  • Data Shared:
    • IP address and browser type
    • Pages visited on kwikinvoice.app
    • Actions taken (e.g., download button clicks)
    • Device information
  • Cookies Used: _fbp (browser identifier), _fbc (click identifier)
  • Consent Required: Yes — Meta Pixel only loads after you accept cookies via the consent banner on our website
  • Note: Meta Platforms, Inc. is a US-based company. Under POPIA Section 72, cross-border transfers require consent or adequate protection. By accepting cookies on our website, you consent to this transfer of website browsing data to Meta's US-based servers
  • Privacy Policy: Meta Privacy Policy

Data Sharing Scenarios

We may share your information only in the following limited circumstances:

1. With Your Consent

  • When you explicitly share invoices (PDF) via email, WhatsApp, or other apps
  • When you grant permission to access device contacts

2. Legal Requirements

  • To comply with applicable laws, regulations, or legal processes
  • To respond to lawful requests from public authorities
  • To protect our rights, privacy, safety, or property

3. Business Transfers

  • In the event of a merger, acquisition, or sale of assets, your information may be transferred
  • You will be notified via email and/or prominent notice in the app

Cookies & Website Tracking (kwikinvoice.app)

The KwikInvoice app does not show advertisements and stores your invoice data locally on your device. We use Firebase Analytics in the app. On our Website we use Google Analytics 4 and Meta Pixel, but only after you select "Accept" on the cookie banner. If you select "Reject", neither is loaded.

When you visit our website, we may use the following with your consent:

Google Analytics 4

  • Purpose: Understand how visitors use the Website and the invoice builder (for example which pages are visited and whether a PDF was downloaded), so we can improve it and measure our marketing
  • Data collected: pages visited, builder step events (event names only — never invoice content, contact details or amounts), device and browser type, approximate location derived from IP address, and a random cookie identifier
  • Cookies: _ga (distinguishes visitors, up to 2 years) and _ga_* (keeps session state, up to 2 years)
  • Data recipient: Google LLC (USA)
  • Consent: Required. Google Analytics only loads after you accept cookies
  • Retention: Google Analytics keeps event-level data (such as page views and builder steps) for 2 months. User-level data linked to the analytics cookie identifier is kept for up to 14 months, and this period restarts each time you visit again
  • Opt out: use "Cookie Settings" in the footer, or install the Google Analytics opt-out browser add-on
  • Google's Privacy Policy: policies.google.com/privacy · How Google uses information from sites that use its services

Meta (Facebook) Pixel

  • Purpose: Measure advertising effectiveness, show relevant ads on Facebook/Instagram, and improve our marketing
  • Data collected: IP address, browser type, pages visited, actions taken (e.g., download clicks)
  • Cookies: _fbp (browser identifier), _fbc (click identifier)
  • Data recipient: Meta Platforms, Inc. (USA)
  • Your control: You can accept or reject tracking cookies via the banner on our website. You can change your preference at any time via "Cookie Settings" in the footer.
  • Meta's Privacy Policy: https://www.facebook.com/privacy/policy/

Essential Storage

  • cookie_consent (browser local storage): remembers whether you accepted or rejected cookies. No personal data
  • kwikinvoice:anonymous-invoice-draft (browser local storage): keeps your web invoice builder draft on your device. We cannot read it

How to Opt Out

Your Rights and Choices

Access and Control Your Data

1. Access Your Data

  • All your App data is stored locally on your device, and your web builder draft is stored in your browser
  • You can view and edit all invoice, client, and business information within the app

2. Delete Your Data

  • Delete Individual Items: Delete specific invoices or clients within the app
  • Delete All Data: Uninstall the app to remove all local data from your device
  • Web Builder Draft: Select Clear draft in the builder, or clear site data for kwikinvoice.app in your browser
  • Analytics Data: Stored locally and automatically deleted after 30 days

3. Export Your Data

  • You can export invoices as PDF files
  • You can share invoices via email, WhatsApp, or save to device storage

4. Revoke Permissions

  • Contacts Access: Revoke in Android Settings → Apps → KwikInvoice → Permissions
  • Storage Access: Revoke in Android Settings (note: this will prevent PDF generation)

Subscription and Billing

1. Cancel Subscription

  • Cancel anytime through Google Play Store → Subscriptions
  • Access to Pro features continues until the end of the billing period

2. Refunds

  • Refund requests are handled through Google Play Store
  • Subject to Google Play's refund policies

Children's Privacy

KwikInvoice is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at kwikinvoice@loggedon.co.za, and we will delete such information.

International Users

KwikInvoice is designed primarily for users in South Africa, but may be used internationally.

Data Transfer:

  • App invoice and client data, and web builder drafts, are stored locally on your device or browser
  • Website visit data (Cloudflare) and, if you accept cookies, analytics and advertising data (Google, Meta) are processed outside South Africa — see "Cross-Border Data Transfer" above
  • If we add cloud features, we will update this policy before they go live

GDPR (European Users): If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

  • Right to access your data
  • Right to rectification (correct inaccurate data)
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing

To exercise these rights, contact us at kwikinvoice@loggedon.co.za.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

Notification of Changes:

  • We will notify you of any material changes by:
    • Updating the "Last Updated" date at the top of this policy
    • Displaying a prominent notice in the app
    • Sending an email notification (if you have provided an email)

Your Continued Use:

  • Your continued use of KwikInvoice after changes indicates your acceptance of the updated Privacy Policy
  • If you do not agree with changes, please discontinue use of the app

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: kwikinvoice@loggedon.co.za
Responsible Party: LoggedOn (Pty) Ltd, trading as KwikInvoice
Developer: KwikInvoice Development Team
Information Officer (POPIA): Siya Mchunu — kwikinvoice@loggedon.co.za
Business Structure: Virtual business (no physical office location)

Response Time: We aim to respond to all inquiries within 7 business days.

POPIA Compliance (South Africa)

KwikInvoice complies with the Protection of Personal Information Act (POPIA), Act 4 of 2013.

Responsible Party & Information Officer (POPIA Section 55)

Legal Name: LoggedOn (Pty) Ltd, trading as KwikInvoice
Email: kwikinvoice@loggedon.co.za
Information Officer: Siya Mchunu, designated in terms of POPIA Section 55

The Information Officer is responsible for processing all requests related to personal information under POPIA.

Your Rights Under POPIA:

  • Right to access your personal information (Section 23)
  • Right to correction of inaccurate personal information (Section 24)
  • Right to deletion of your personal information (Section 24)
  • Right to object to the processing of your personal information (Section 11(3))
  • Right to lodge a complaint with the Information Regulator of South Africa

How to Exercise Your POPIA Rights: Contact our Information Officer, Siya Mchunu, at kwikinvoice@loggedon.co.za with your request. Please include sufficient detail to identify yourself and the nature of your request. We will respond within 30 days as required by POPIA.

Information Regulator South Africa:

  • Website: https://inforegulator.org.za
  • Email: inforeg@justice.gov.za
  • Complaints Hotline: 012 406 4818

Additional Information for Google Play Store

App Permissions Explanation

Contacts Permission (READ_CONTACTS):

  • Why: To help you quickly add client information from your existing contacts via autocomplete
  • Optional: You can decline this permission and manually enter client details
  • Usage: Only accessed when you choose to import a contact from KwikInvoice
  • Important: Contacts are used in-memory only during autocomplete. They are never stored in the app and never uploaded to any server. Only clients you manually save are persisted locally

Storage Permission:

  • Why: To save generated PDF invoices to your device
  • Usage: Only when you choose to "Save to Device" option

Internet Permission:

  • Why: For subscription verification and app updates
  • Data Sent: Subscription status verification only (no invoice or client data)

Data Safety

KwikInvoice follows Google Play's data safety requirements:

  • ✅ Data Encrypted in Transit: Yes (HTTPS)
  • ✅ App Data Stored Locally: Yes (App invoice and client data is not transmitted to servers)
  • ✅ Users Can Request Data Deletion: Yes (uninstall app or delete within app)
  • ✅ Data Used for App Functionality: Yes
  • ❌ Data Sold to Third Parties: No
  • ⚠️ Data Shared for Advertising: The App does not share data for advertising. On our Website, browsing data is shared with Meta for advertising and with Google for analytics, only with your consent.

Legal Basis for Processing (GDPR)

For users in the EEA, our legal basis for processing your personal data:

1. Contract Performance (Art. 6(1)(b) GDPR)

  • Processing necessary to provide KwikInvoice services you requested

2. Legitimate Interests (Art. 6(1)(f) GDPR)

  • Improve app functionality and user experience
  • Prevent fraud and ensure security
  • Analytics for app improvement

3. Consent (Art. 6(1)(a) GDPR)

  • Access to device contacts (you can withdraw consent anytime)
  • Website analytics and advertising cookies (Google Analytics 4, Meta Pixel) — withdraw any time via "Cookie Settings"

California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under CCPA:

1. Right to Know

  • What personal information we collect
  • How we use your personal information
  • Categories of third parties we share data with

2. Right to Delete

  • Request deletion of your personal information
  • Exceptions apply for legal obligations

3. Right to Opt-Out

  • We do not sell your personal information, so no opt-out is necessary

4. Right to Non-Discrimination

  • You will not receive discriminatory treatment for exercising your privacy rights

To exercise these rights, contact us at kwikinvoice@loggedon.co.za.

Consent

By using KwikInvoice, you consent to this Privacy Policy and agree to its terms.

If you do not agree with this Privacy Policy, please do not use the app.

END OF PRIVACY POLICY

Document Version: 2.1 (Website analytics, web invoice builder and hosting disclosures — October 2026)
Last Updated: October 20, 2026
Last Reviewed: October 20, 2026
Next Review Date: April 20, 2027