Privacy Policy
Effective 27 July 2026 · Artifition Tech Private Limited (“we”)
The short version. Inboice runs entirely on your device. We operate no servers and we receive no data from the app — not your email, not your invoices, not analytics, not crash reports. Nothing you do in Inboice is transmitted to us, because there is nowhere for it to go.
The only computer the app talks to is Google’s — your own Gmail account, over Gmail’s standard IMAP and SMTP services.
What the app does with your mail
When you connect a Gmail account, Inboice signs in to Gmail directly from your device using a Google App Password that you generate in your own Google account.
- Reading is read-only. The app opens your mailbox in IMAP read-only mode and fetches messages without marking them as read. It does not delete, modify, move, label, or send-on-behalf-of anything in your mailbox while fetching.
- Scope is what you choose. It searches only for the merchant or sender and date range you specify.
- Attachments and rendered PDFs are saved on your device, in the app’s private storage area. They are not uploaded anywhere.
What the app does when you send an invoice
Invoices are created and rendered to PDF on your device. When you press Send, the app connects to Gmail’s SMTP service over TLS and sends the message from your own account, exactly as any mail app would. The message goes to the recipient you typed. A copy lands in your own Gmail “Sent” folder, because Gmail puts it there — not because we copy it anywhere.
What is stored, and where
All of it stays on your device. Nothing is synced to us.
In the iOS Keychain (encrypted by the operating system):
- your Gmail address(es) and App Password(s)
- your business profile, including any tax registration and bank details you enter
- your saved clients
- your invoice numbering series and its counter
- your record of invoices you have issued
- merchants you have added yourself
In the app’s private storage area: invoice attachments and PDFs you have fetched or generated. This area is not shared with other apps and is not exposed in the Files app.
If your device is backed up (iCloud or encrypted local backup), that backup is made by Apple under Apple’s terms and may include this data. We have no access to it.
What we do not do
- We do not collect, transmit, sell, or share any of your data.
- We do not use analytics, advertising, tracking, or crash-reporting SDKs. The app contains no third-party SDKs of that kind.
- We do not track you across apps or websites.
- We do not read your mail on a server. There is no server.
Your App Password
The App Password is stored only in your device’s Keychain and is sent only to Google, only to authenticate to Gmail. It is never displayed after entry, never written to logs, and never transmitted to us.
You can revoke it at any time from your Google Account (Security → App passwords), which immediately cuts the app’s access. Signing out inside Inboice deletes the stored password from your device.
Deleting your data
- Sign out removes that account’s stored credential.
- Deleting the app removes its stored data from your device.
- Because we hold nothing, there is no account for you to close with us and no data for us to delete on your behalf. Requests about data held by Google should go to Google.
Children
Inboice is a business tool and is not directed at children.
Changes
If this policy changes, the updated version will be posted at this URL with a new effective date.
Contact
Questions about this policy: hello@artifition.com