Privacy Policy
Local Invoice exists so you can bill your clients without handing their names, emails, and what you charge them to someone else's server. Here is exactly what it does and does not do.
The short version
Your invoices never leave your device. Local Invoice runs entirely in your browser — there is no server, no account, no sign-up, and no sync. There's no usage analytics or ad tracking, and your business details, clients, and invoices are never sent anywhere. The only time Local Invoice touches the network is to buy Pro or confirm an existing Pro unlock, through your payment provider (which may include the provider's own diagnostics) — see Payments below.
Your invoices never leave your device. Local Invoice runs entirely on your device — there is no server, no account, no sign-up, and no sync. There's no usage analytics or ad tracking, and your business details, clients, and invoices are never sent anywhere. To manage Pro, the app checks your purchase status with RevenueCat (and Apple's App Store) using an anonymous identifier, which may include the provider's own diagnostics; nothing you create is ever sent — see Payments below.
What it stores, and where
Everything is stored locally, on your own device:
- On the web, your data lives in your browser's
localStorage, namespaced underlocalinvoice.v1— storage your browser keeps on your machine and never uploads anywhere on its own. - In the app, the same data lives in the app's private on-device storage, sandboxed to Local Invoice the same way any other app's data is.
What's stored: your business ("From") details, your saved clients' names/emails/addresses, and every invoice you create or save — line items, amounts, notes, dates, and status. Nothing is encrypted beyond whatever protection your device already provides (e.g. your phone's passcode/Face ID, or your Mac's disk encryption), because nothing ever needs to travel anywhere in the first place.
If you uninstall the app or clear your browser's site data for Local Invoice, this data is gone — there's no copy anywhere else to restore it from, because we never had one.
What we send anywhere
Your invoice and client data: nothing. Creating, previewing, saving, and exporting an invoice all happen entirely on your device — the PDF is generated locally too, using an open-source library (pdf-lib) that runs in the browser/app itself. None of your business, client, or invoice content is ever transmitted.
The one exception is buying or restoring Pro, which you opt into. If you do, the payment processor (Stripe, via RevenueCat) handles the checkout and an anonymous device identifier / restore code is used to check whether Pro is active. That request carries no invoices, no client details, and no business data — see Payments for exactly what it can see.
The one exception is Pro. On iPhone and iPad, Apple handles the purchase through the App Store, and the app confirms with RevenueCat — at launch and when you buy or restore — whether Pro is active, using an anonymous identifier. That check carries no invoices, no client details, and no business data — see Payments for exactly what it can see.
When you tap Download PDF, the file is handed to your operating system's own share sheet (on iOS) or your browser's own download prompt (on the web) — Local Invoice doesn't choose where it goes next; you do.
Payments
Local Invoice is free to use. If you want the extras (custom logo & branding, payment instructions, and recording partial payments & deposits on every invoice), Pro is a one-time $12.99 purchase — not a subscription. You unlock it once and it's yours.
If you upgrade to Pro, payments are securely processed by Stripe and RevenueCat. You enter your payment details directly with our payment providers — we never see or store your full card number.
To process your purchase, our payment providers share limited information with us, including:
- your email address
- your name (if your payment method provides it)
- the amount paid
- your card's brand and last four digits
We use this information only to send receipts, process refunds, and provide customer support. Your payment information is never linked to your data inside the app, never used for marketing, and never sold or shared.
Stripe and RevenueCat process your payment and retain their own transaction records under their respective privacy policies. See Stripe's Privacy Policy and RevenueCat's Privacy Policy.
30-day money-back guarantee. If Pro isn't for you, email support@localinvoiceapp.com within 30 days of purchase for a full refund.
On iPhone and iPad, Pro is sold through the App Store using Apple's In-App Purchase. Apple handles the entire checkout — you pay with your Apple Account. We never see or handle your card, and we never receive your name or email.
After a purchase, all we receive is anonymized sales totals from Apple (how many, not who) and a random identifier from RevenueCat that the app uses to check whether Pro is active on your device. It isn't tied to your Apple Account, your name, or anything you create in the app — and it's never used for marketing, never sold, and never shared.
Your receipt comes from Apple, and any refund is handled by Apple, not by us. To request a refund, use Apple's own process at reportaproblem.apple.com. RevenueCat verifies your purchase on our behalf under its Privacy Policy.
Permissions, explained
The app requests no special device permissions — no contacts, no photos, no location, no camera, no microphone, no notifications. The only system interaction is the standard share sheet (iOS) or file download (web) used to hand your exported PDF to another app of your choosing, such as Mail or Files — the same mechanism any app uses to let you save or share a file, and one you control each time it happens.
Changes
If this policy ever changes, the updated version will be posted here with a new "Last updated" date.
Contact
Questions can be sent to: support@localinvoiceapp.com