This Privacy Policy explains how Arnold Labs (“Arnold Labs”, “we”, “us”) collects, uses, stores, and shares information when you use Invoice Pro (the “Service”).
Contact: arnoldlabs.dev@gmail.com
1. Who is responsible
Arnold Labs is the controller of personal data processed through Invoice Pro, unless a law says otherwise.
2. Information we collect
Account: email address, user ID, authentication data from Firebase Authentication, and password hashes stored by the authentication provider (we do not store your raw password).
Business profile: company name, address, phone, business email, tax number, currency, payment instructions, terms, invoice template choice, logo, and signature images you upload.
Operational data: clients, products, invoices, quotations, recurring templates, payments (amount, method, status, date, reference, notes), expenses, and related documents you create.
Usage and device: app version, crash or diagnostic data if our tools collect it, and theme preference stored on device.
On-device security: PIN (stored as a one-way hash) and biometric preference stay on your device and are not uploaded to our servers.
We do not ask for your bank password or card PAN to process client payments. Payment methods you type (for example “M-Pesa”) are labels in your records only.
3. Why we process data
We process data to:
- create and maintain your account;
- provide invoicing, quotations, payments tracking, expenses, reports, and document sharing;
- sync your data across devices where you sign in;
- secure the Service and prevent abuse;
- communicate about the Service and billing;
- comply with law and enforce our Terms.
Legal bases (where GDPR or similar law applies) include: performance of a contract, legitimate interests (security, product improvement), consent where required, and legal obligation.
4. Where data is stored
Invoice Pro uses Google Firebase (Authentication, Cloud Firestore, Cloud Storage). Data may be stored and processed on servers outside your country, including facilities operated by Google. Google’s processing is subject to their terms and safeguards.
5. Sharing
We do not sell your personal data. We share data only with:
- infrastructure providers needed to run the Service (currently Google Firebase);
- Paddle and/or Paystack if you subscribe on the web (they process the subscription payment);
- app stores if you subscribe through them (they process the purchase, not your invoice contents);
- authorities if required by law;
- a successor if Arnold Labs is involved in a merger or sale, with equivalent protection.
When you share a PDF, WhatsApp message, Gmail, or public view link with a client, you choose the channel. That third party’s terms apply. A public link is accessible to anyone who has the URL.
6. Retention
We keep account and business data while your account is active. If you delete your account in Settings, we delete your Invoice Pro documents and profile we control, then your authentication account, subject to backups and legal holds that may last a short additional period. On-device PIN data is cleared on that device when you delete or sign out according to the app’s design.
7. Your rights
Depending on your country, you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. You can edit company and records inside the app, export report files from Reports, and delete your account in Settings.
To exercise rights or ask a question, email arnoldlabs.dev@gmail.com. You may also lodge a complaint with your local data protection authority.
8. Security
We use signed-in access, tenant-scoped data rules, and hashed device PINs. No method is 100% secure. Protect your password and device.
9. Children
Invoice Pro is for business use. It is not directed at children under 18. We do not knowingly collect data from children.
10. International users
If you access the Service from outside Kenya, you understand that your data may be transferred to and processed in other countries, including those that may have different data-protection laws.
11. Cookies and ads
The Android app does not use advertising cookies. The web app uses cookies or similar storage required for sign-in (Firebase Auth) and may use hosting/CDN cookies. We do not run third-party advertising.
12. Changes
We may update this Policy. The “Last updated” date will change. Material changes may be notified in the app. Continued use means you accept the updated Policy.
13. Contact
Arnold Labs
Invoice Pro
arnoldlabs.dev@gmail.com
14. Additional privacy rights
We do not sell personal information and we do not share it for cross-context behavioural advertising. If a law such as GDPR, UK GDPR, or CCPA/CPRA applies to you, you may request access, correction, deletion, or a copy of personal data we hold, and you may appeal a refusal by emailing arnoldlabs.dev@gmail.com. We will not discriminate against you for exercising those rights.
15. Age
Invoice Pro is intended for people who can form a business contract (generally 18 or older). Do not create an account for a child.