Privacy Policy

Last updated: October 3, 2026

TapBill is an invoice and estimate maker for iPhone and Android. This policy explains what stays on your phone, what the app sends and why, and the choices you have. “We” and “us” mean the developer of TapBill.

What stays on your phone

Everything you enter is saved in the app’s private storage on your device and is never sent to us:

• your business details: name, contact details, address, tax ID, logo, signature, payment instructions and payment link;
• your clients’ names, email addresses, phone numbers, addresses and notes;
• your items, invoices, estimates, payments, recurring invoices and reminders;
• photos and files you add to invoices and estimates;
• your expenses and the pictures of their receipts;
• your settings.

Sending documents. When you send an invoice, an estimate or a reminder, the app opens your phone’s Messages or email app with your client’s number or address filled in, or the share sheet to pick another app, and hands it the PDF and the message. We don’t receive a copy, and the app never sends anything to your clients on its own.

Backups and exports. A backup or a spreadsheet export is a file made on your phone, and it goes only where you send it. If device backup is on in your phone’s settings, Apple (iCloud or computer backups) or Google (Android backup) may include the app’s data in your device backup, under your account and their privacy policies. We can’t access those backups.

Camera and photos. The app uses your camera or photo library only when you choose a logo, add photos or files to an invoice, or scan a receipt, and only what you choose is saved, inside the app. Photos print on the invoice, and files go with it, only when you send it yourself.

Receipts. When you scan a receipt, the app finds its edges and reads the total, date and store on your phone. On iPhone this uses Apple’s document camera and text recognition. On Android it uses Google’s ML Kit document scanner and text recognition, which run on your phone through Google Play services. The pictures aren’t sent to us or to Google, though Google may receive information about how these features perform, as described in ML Kit’s terms.

Contacts. If you import a client from your contacts, the app opens your phone’s contact picker and reads only the contact you choose, then saves it as a client on your phone. On Android, reading a contact’s email, phone and address needs the contacts permission, which the app asks for only when you tap Import. Nothing from your contacts is sent to us.

Voice entry. If you create an invoice by voice, the app uses the microphone and your phone’s built-in speech recognition, set to run on the phone itself, to turn what you say into text. The app then reads that text on the phone to fill in the invoice. The recording and the text are not saved or sent to us or anyone else. Apple’s permission prompt says speech may be sent to Apple; that applies to server-based recognition, which TapBill doesn’t use. On Android, voice entry works only where the phone offers on-device recognition.

Notifications. Reminders about overdue and recurring invoices are scheduled on your phone, and their content isn’t sent anywhere.

Payment links. If you add a payment link from a service such as PayPal, Venmo, Cash App, Stripe or Square, the app puts it on your invoices as a link and a QR code. Your clients pay you through that service, under its own terms and privacy policy. TapBill doesn’t process or see payments.

Ratings. When the app asks for a rating, the rating prompt comes from Apple or Google, and we don’t learn who you are from it.

What the app sends, and why

Whenever the app connects to the internet, the service it connects to sees your device’s IP address, as with any internet connection. Requests to our server pass through Cloudflare, which delivers and protects our site, and our server records each one in an access log (the IP address, the time, the address requested and technical details the request carries). We use these logs only for security and to fix problems, and they’re deleted automatically after a limited period. The app connects for these reasons only.

1. Settings check (our server)

When the app opens, and when you come back to it (at most every 15 minutes), it asks our server whether an update is available or required and which features are turned on. The request contains only the platform (iOS or Android) and the app version.

2. Feedback you choose to send

If you answer “Not really” when the app asks “Do you like TapBill?”, you can send us feedback: a reason you pick and an optional message. The app sends it with a random ID made for that message, the platform, the app and operating system versions, your device’s language and region setting, and the time you wrote it. It contains no name, email address or device identifier, so we can’t tell who sent it. With the feedback we store only a keyed hash of your IP address (a scrambled value that limits how many messages one address can send per day), never the address itself. Please don’t include personal information in your message. If your phone is offline, the feedback waits on the phone until our server confirms it has been stored.

3. Crash reports (Google Firebase Crashlytics)

If the app crashes or runs into certain errors, it sends a crash report to Firebase Crashlytics, a Google service, so we can find and fix the problem. A report contains technical details: where in the app’s code the problem happened, the app version, the device model, the operating system, free memory and storage, whether the device is jailbroken or rooted, and random identifiers that Firebase creates for your installation of the app. It doesn’t contain your invoices, clients or business details.

So that we can see how often the app runs without crashing, Firebase also records each time the app opens, and again when you come back to it after about half an hour. This session note contains the same random installation identifiers, a random identifier for the session and its time, the app and operating system versions, and the device model, nothing you enter in the app. When the app opens, Firebase also checks its settings with Google.

Google keeps crash reports for 90 days and processes all of this under the Firebase privacy and security terms and Google’s Privacy Policy.

4. Usage statistics (Google Analytics for Firebase)

To learn how people get from installing TapBill to sending invoices and getting paid, the app counts a few moments with Google Analytics for Firebase, a Google service: which setup screens you see and finishing setup; creating an invoice or estimate (new, a copy, from an estimate or a repeat); sending one, how (text message, email or another app), with which app when it’s one of a short list of well-known messaging, email and file apps such as WhatsApp or Gmail (any other app counts only as “other”), and how many the phone has sent so far, or stopping before it goes; sending a reminder; recording a payment and whether it pays the invoice off; adding a payment link (only which service, such as PayPal, never the link); your answers to the app’s questions about rating it and about notifications; and sending feedback. It also notes which currency your business uses. Firebase also records the first time the app opens, each time it’s used, app and operating system updates and, on Android, the app’s removal. Each of these comes with a random identifier Firebase creates for your installation of the app, the time, the app and operating system versions, the device model, your device’s language setting and an approximate location (country and region) that Google works out from your IP address. Apart from the currency, they never contain your business details, and never your clients, items, amounts or anything you type, and they aren’t linked to your name, email address or any account.

This works without advertising identifiers, and personalized ads are turned off. If you installed TapBill after tapping one of our ads on Google, Google tells our Google Ads account that the install went on to open the app and send invoices, so we can see which of our ads bring people who use it. Google keeps these statistics for up to 14 months, under the Firebase privacy and security terms and Google’s Privacy Policy.

5. Subscriptions (Apple, Google and Adapty)

TapBill may offer an optional TapBill Pro subscription. You buy it with your Apple ID or Google Play account; Apple or Google charges you and handles your payment details, which we never see.

Once subscriptions are offered, the app uses Adapty to show plans and prices, check whether you have an active subscription and restore purchases. For that, Adapty receives a random profile ID it creates for your installation, your purchase and subscription history (products, prices, dates, renewal status and transaction IDs), a device identifier that isn’t an advertising identifier, your IP address, and device and app details such as the device model, operating system, app version and language. This happens each time the app starts, whether or not you subscribe. Adapty processes this information for us as a service provider.

If you installed TapBill after tapping one of our ads in the App Store, Apple’s AdServices framework tells us, through Adapty, which ad campaign and search keyword led to the install. It works without an advertising identifier, and we use it only to measure our own ads.

What we don’t collect

• No account and no sign-in.
• No invoices, estimates, clients, items or business details on our servers.
• No location, no photos or files (your logo, the ones you add to invoices and your receipts stay on your phone), and no contacts, apart from the ones you import as clients, which also stay on your phone.
• No expenses: what you spend is recorded only on your phone.
• No voice recordings: voice entry is processed on your phone.
• No advertising identifiers (Apple’s IDFA or the Android advertising ID) and no ads in the app. Apart from seeing which of our own ads led to an install, as described above, no tracking across other companies’ apps or websites.
• We don’t sell or rent personal information, and we don’t share it for advertising.

How we use information

• To run the app: update checks, feature switches, subscriptions and restoring purchases.
• To keep it working: finding and fixing crashes and errors, and protecting our server from abuse.
• To improve it, using the feedback you send and the usage statistics, such as how many people create and send invoices.
• To see which of our ads, in the App Store and on Google, bring people who use the app and subscribe.

Who processes it

We use these service providers, only for the purposes above:

• Cloudflare, which delivers and protects our site and server;
• DigitalOcean, which hosts our server;
• Google Firebase, for crash reports and usage statistics;
• Adapty, for subscriptions once they’re offered;
• Apple and Google, which distribute the app and handle purchases, rating prompts and, if you turn them on, device backups. On Android, Google also provides the receipt scanner and text recognition described above.

We may also disclose information when the law requires it, or to protect the rights and safety of our users or others.

How long we keep it

• On your phone: until you delete it or delete the app. Deleting the app removes its data from the phone, but not your device backups or files you’ve exported.
• Feedback: for as long as it helps us improve the app. Database backups that contain it are deleted after 30 days.
• Server access logs: for a limited period, then deleted automatically.
• Crash reports: 90 days.
• Usage statistics: up to 14 months.
• Subscription records: kept by Adapty, Apple and Google for as long as they’re needed to provide the subscription and to meet tax and accounting rules.

Security

The app connects to our server over HTTPS, and our server’s admin functions can’t be reached from the internet. The data on your phone is protected by your device’s own security, so use a passcode.

Your choices and rights

• Deleting your data. Delete invoices, clients or items in the app, or delete the app to remove everything from your phone. To delete a feedback message, email us the date you sent it and roughly what it said. To delete the subscription information Adapty holds, email us the order number from your App Store or Google Play receipt.
• Notifications can be turned off at any time in your phone’s settings.
• Crash reports and usage statistics can’t be turned off in the app. They contain no invoice or client information, and deleting the app stops them.
• Your rights. Depending on where you live, for example in California, the European Economic Area or the United Kingdom, you may have the right to access, correct or delete your personal information, to get a copy of it, to object to or restrict how we use it, and to complain to your local data protection authority. Because the app has no accounts, we usually can’t link server data to you, but we’ll help with any request. Email us, and we’ll reply within 30 days. We won’t treat you differently for using these rights.
• California. We don’t sell or share personal information, as the California Consumer Privacy Act defines those terms, and we don’t use sensitive personal information.
• Legal bases (EEA and UK). We rely on our legitimate interests for the settings check, access logs, crash reports, usage statistics and measuring our ads; on our contract with you for subscriptions; and on your consent for feedback, which you choose to send.

Children

TapBill is a business tool and isn’t directed at children under 13. We don’t knowingly collect personal information from children. If you believe a child has sent us information, contact us and we’ll delete it.

Where information is processed

Our server and our service providers may process information in the United States and in other countries, whose data protection laws may differ from those where you live.

Changes to this policy

If our data practices change, we’ll update this page and the date at the top before the change reaches the app. For significant changes, we’ll also tell you in the app or in its store listing.

Contact

Questions or requests about privacy: info@offerit.co