Privacy Policy

InvoiceUltra is an iPhone app for creating and managing invoices. This policy explains, in plain English, what information the app handles and how your privacy is protected.

Who we are

InvoiceUltra is provided and operated by RED LINE SECURITY LIMITED (“we”, “us”, “our”), a private limited company registered in England and Wales under company number 15419410, with its registered office at Regent88, 210 Church Road, Leyton, London, E10 7JQ, United Kingdom.

We are the data controller only for the limited personal data we actually receive and process — in practice, the support correspondence you choose to send us, and any personal data processed through this website as described in the “This website” section below.

We are not the controller of the invoice, client and payment records you create in the app. That information is stored on your own device. Invoice, client and payment data is not transmitted to us automatically — we receive it only if you deliberately include it in a support email or attachment, for example by attaching an invoice PDF or a screenshot to illustrate a problem. Otherwise we do not hold it or have any means of accessing it.

Your data stays on your device

Today, InvoiceUltra stores your business information locally on your iPhone. Your invoices, clients and payments are not uploaded to our servers. There is no account to create and no sign-in — the app works entirely on your device.

What the app stores on your device

The information you enter is saved in the app's private storage on your iPhone, including:

• Your business profile — name, logo, address, VAT number, company number, payment instructions and bank details.
• Clients — names and the contact and address details you add.
• Invoices, estimates and their line items.
• Payments you record, and your recurring invoice schedules.
• Your work log, saved services and app settings.

What we do not collect

• We do not automatically receive your invoices, client records or payment records. We receive such information only if you deliberately include it in support correspondence.
• We do not require an email address or account to use the app.
• We do not track you, show advertising, or run advertising analytics inside the app.
• We do not sell your data, and we do not use your financial data for advertising.

Exporting and sharing invoices

When you export or send an invoice, InvoiceUltra creates a PDF on your device. You choose how to share it — for example by email, message, or by saving it to Files — using your iPhone's standard sharing options. That sharing happens through the apps and services you select; the invoice is not routed through our servers.

Support

If you contact us for support, you may choose to share information (such as a description of a problem) so we can help. Anything you send is initiated by you. You can reach us at support@invoiceultra.com.

This website

The InvoiceUltra website does not require an account, sets no cookies, and runs no advertising or analytics trackers. There are no forms on this site — the contact links open your own email app.

However, like any website, it cannot be delivered without some technical data being processed. Our hosting and content-delivery provider processes, on our behalf, the information your browser necessarily sends when it requests a page:

• your IP address;
• basic browser and device information (the “user agent” your browser sends);
• the URL you requested and the time of the request; and
• related request and security logs.

These are operational logs, used to serve the site, keep it available and protect it from abuse such as denial-of-service attacks. They are not analytics, not advertising, and are not used to build a profile of you or to track you across sites. If we ever add analytics, we will update this policy to describe it and any choices you have before it goes live.

Purposes and lawful bases

Under UK data protection law we must tell you why we process personal data and on what lawful basis. In practice there are only three activities:

• Responding to support requests — the correspondence you send us and our reply. Lawful basis: our legitimate interests in answering a request you chose to make. Where your message concerns an InvoiceUltra Pro subscription, we may also rely on performance of a contract.
• Operating, securing and troubleshooting the website — the technical logs described above. Lawful basis: our legitimate interests in keeping the site available, working and protected from abuse.
• Meeting legal obligations, where one applies — for example retaining records we are required to keep, or responding to a lawful request. Lawful basis: compliance with a legal obligation.

We do not ask you for consent for any of the above, because we do not set cookies or run tracking that would require it. If that ever changes, we will ask first.

Who else is involved

We keep the number of third parties to a minimum. Those that are involved receive only what they need to provide their service:

• Vercel — hosts this website and delivers it through its content-delivery network. It processes the technical data described above as our processor.
• Namecheap — provides email forwarding for our @invoiceultra.com address, so a support message you send passes through its forwarding service on its way to our inbox.
• Apple — processes InvoiceUltra Pro purchases and payments through the App Store under Apple's own terms and privacy policy. We do not receive your name, address or payment details from Apple, and we cannot identify individual purchasers. Subscription status is verified on your device using StoreKit, and App Store reporting available to us is aggregated.

We do not sell personal data, and we do not share it for advertising.

How long information is kept

We do not hold much, and we do not keep it longer than we need to. We have not set arbitrary fixed periods; instead:

• Support correspondence is kept for as long as needed to resolve your request, plus a reasonable period to handle any follow-up, to keep records we genuinely need, and to meet any legal obligation. It is deleted when none of those still apply.
• Website technical logs are short-lived and retained by our hosting provider for a limited period under its own retention schedule, for security and troubleshooting. We do not keep our own separate copy.
• Your invoice, client and payment records are kept for as long as you keep them, on your device. We hold no copy, so we cannot retain or delete them.

Transfers outside the UK

Our hosting and email-forwarding providers are US-based organisations that operate global infrastructure, so the limited technical and support data described above may be processed outside the United Kingdom.

Where that happens, the transfer is covered by the data-protection terms we have with those providers, which are required to include a transfer mechanism recognised under UK data protection law. The specific safeguards each provider relies on are set out in its own data-processing documentation. If you would like to know which applies to a particular provider, email us and we will point you to it.

Your rights

Under UK data protection law you have rights over personal data we hold about you. Which ones apply depends on the processing and the lawful basis, but they include the right to:

• ask for a copy of your personal data (access);
• have inaccurate data corrected (rectification);
• ask for data to be deleted (erasure);
• ask us to restrict how we use it (restriction);
• object to processing carried out on the basis of legitimate interests (objection); and
• receive certain data in a portable format (portability), where that right applies.

In practice, the personal data we hold about you is likely to be limited to support correspondence. We cannot act on a request concerning records stored only on your device because we do not receive or control them. You can manage or delete those records on your device, export individual invoices and documents, and use Settings → Export a backup to export a complete backup of the data stored by InvoiceUltra.

To exercise any of these rights, email support@invoiceultra.com. We will not charge you, and we will respond within the time limit set by law.

If you are unhappy with how we have handled your personal data, you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first, but you can go to the ICO at any time.

Children

InvoiceUltra is a business tool intended for adults running or working in a business. It is not directed at children.

Changes to this policy

We may update this policy as InvoiceUltra develops. When we do, we will change the “last updated” date above.

Contact

Questions about privacy, or want to exercise your data-protection rights over the personal data we hold? Email support@invoiceultra.com and it will reach RED LINE SECURITY LIMITED.

We handle personal data in accordance with applicable United Kingdom data protection law, including the UK GDPR and the Data Protection Act 2018. If you are located elsewhere, you keep any rights available to you under the data protection law of your own country.