Scale Invoice Privacy Policy

Effective 9 November 2026 · App: Scale Invoice for Android (com.rohansurve.scale.invoice), version 1.6.0 · Developer: Rohan Janardan Surve, Room No 2 Ganesh Krupa, Mumbai Pune Road, Kalwa, Thane, Maharashtra 400605, India

1. What you enter, and where it stays

To make invoices you enter information about your business and the people you sell to. All of it is saved in a database on your phone:

• Your business: name, address, state, GSTIN, PAN (worked out from the GSTIN), turnover band, UPI ID, bank details, and your logo and signature if you add them. In Australia and New Zealand: name, address, phone number, whether you are registered for GST, your ABN or New Zealand GST number, bank details (BSB and account number in Australia, bank account number in New Zealand), and your logo and signature if you add them.
• Your customers and suppliers: names, phone numbers, GSTINs, addresses, opening balances. In Australia and New Zealand: ABNs or GST numbers instead of GSTINs, and email addresses.
• Your items, invoices, estimates, bills, payments and stock, and the invoice design you choose.

The app does not send this information to us, to Google AdMob, to Meta, or to anyone else. We cannot see it, and we cannot recover it for you if it is lost.

App lock

If you turn on app lock, your PIN is stored only as a one-way hash in your phone's secure storage. Fingerprint and face unlock are handled by Android; the app never receives your fingerprint or face data. The PIN is never backed up and never leaves the phone.

When you share

An invoice, estimate, statement, sales report, backup file or payment reminder leaves your phone only when you tap Share, Print or Copy and choose where it goes (for example WhatsApp, email, SMS, Google Drive or a printer). What happens next is governed by the app or service you chose.

In Australia and New Zealand, Email opens your phone's own email app with the invoice attached and your customer's saved email address filled in, and SMS opens your phone's messages app with a short text. You send them from that app. Scale Invoice itself sends no email or text, and has no server to send them from.

Android backup

If Android backup is on for your phone, Android may back up the app's database and your logo and signature to your own Google account, so they come back on a new phone. This backup is run by Google under your Google account, not by us. Your app-lock PIN and your subscription status are never included. You can turn backup off in your phone's settings.

Google Drive backup

Google Drive backup is optional. When you tap Back up to Google Drive (or turn on Daily backup with Growth), the app asks you to sign in with your Google account and to let it use Google Drive. It then:

• puts the backup file (everything listed above: your business, customers, items, invoices, payments, logo and signature) in a folder called Scale Invoice backups in your own Google Drive;
• keeps your 7 newest backups from each phone and one a month for 3 months, and moves older ones to your Drive's bin;
• lists and downloads those backups when you restore, for example on a new phone.

The file goes directly from your phone to Google. We never receive, see or store it, and we have no server. The app asks only for Google's drive.file permission, which lets it see and change only the files it made itself, not anything else in your Drive. The app keeps your Google account's email address on your phone, to know where to back up; it is not sent to us. Your app-lock PIN and your subscription status are never in a backup.

Google stores the backups under your Google account, its terms and its privacy policy (policies.google.com/privacy). They count towards your Google storage. You can see, download or delete them in Google Drive at any time.

Scale Invoice's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The app uses Google Drive only to save and restore your own backup; the data is never used for ads, never sold, never shared with anyone, and never read by people.

2. Ads on the Free plan (Google AdMob)

On the Free plan the app shows ads from Google AdMob, a Google service, in a few places: banners on the main lists, at most an occasional full-screen ad after saving an invoice or when you come back to the app, and short video ads you choose to watch to use a Growth feature free for 24 hours. To choose and measure ads, prevent fraud and fix problems, the AdMob software in the app collects and sends to Google:

• your device's advertising ID;
• your IP address, from which Google may estimate an approximate location (city or region, not GPS);
• device information: model, Android version, language and the app's version;
• how you interact with ads: which ads were shown and whether you tapped them;
• diagnostics about the ads software, such as crashes.

AdMob never receives your invoices, customers, amounts or any other record you enter. Where the law requires your consent (for example in the EEA, the UK and some US states), the app asks first, through Google's consent form, and you can change your choice later in Menu → Privacy & ads. You can reset or delete your advertising ID, or opt out of personalised ads, in your phone's Settings → Google → Ads.

Google's use of this information is described in its privacy policy (policies.google.com/privacy) and in how Google uses information from sites or apps that use its services.

With the Growth subscription, the ads software is not started at all, so AdMob collects none of this. Install measurement (section 3) still runs.

3. Measuring installs from our ads (Meta)

We advertise Scale Invoice on Facebook and Instagram. To learn which of those ads lead to installs, the app includes Meta's software (the Meta SDK). It tells Meta when the app is installed, and each time it is opened and closed. With these events the Meta SDK collects and sends to Meta:

• your device's advertising ID;
• your IP address, from which Meta may estimate an approximate location (city or region, not GPS);
• device information: model, Android version, language, time zone, mobile network and the app's version;
• the install referrer from Google Play: which ad or link, if any, led to the install;
• when the app was opened and closed;
• diagnostics about the Meta SDK itself, such as its own crashes.

The app sends Meta nothing else. Your invoices, customers, items, amounts, purchases and anything you type never go to Meta, and the app logs no other events. Meta may combine this information with other information it has, and use it to measure and improve our ads, to show ads (including on Facebook and Instagram) and to keep its services secure, as described in Meta's Privacy Policy (facebook.com/privacy/policy). Install measurement runs on the Free plan and with Growth, because it measures our own advertising, not ads in the app. It runs in every country where the app is available: India, Australia and New Zealand.

To limit it: reset or delete your advertising ID in your phone's Settings → Google → Ads, so Meta can't link the app to it. If you use Facebook or Instagram, you can see and disconnect what Meta receives from apps in Accounts Centre → Your information and permissions → Your activity off Meta technologies.

4. Anonymous usage data (PostHog)

To learn which parts of Scale Invoice help businesses and where people get stuck, the app sends us a small number of anonymous usage events through PostHog (PostHog Inc., servers in the United States), which processes them for us. The events are things like: a setup screen was shown or finished, a bill was started, saved or shared, the app was opened, the plans screen was opened, a report was downloaded, and, on the Free plan, an ad was asked for, loaded, didn't load or was shown. With them the app sends only:

• counts and yes/no answers, such as how many bills have been made, how many items were on a bill, whether it was the first bill, how many days since the app was last opened, whether the business is GST-registered, and the business type you picked (retail, wholesale, manufacturing, services or other);
• the business's country (India, Australia or New Zealand) when the app is opened, and, in Australia and New Zealand, with each setup step;
• whether the phone could reach the internet when the app was opened (yes or no: the app briefly connects to PostHog's server to find out, and only while this setting is on);
• for ads on the Free plan: the type of ad (banner, full-screen, app-open or video) and, when one didn't load, a one-word reason (no internet, no ad available, or other). Never which ad it was, who it was from, or anything about it;
• a random ID made by the app on your phone, which is not your advertising ID and is not linked to your name or Google account;
• how the app was installed (from Google Play, or not) and whether the phone is one of Google's own test phones (used for Google Play's pre-launch checks), so our counts can leave out test phones as Google AdMob's reports do;
• the app's version, and device information that PostHog's software adds: phone make, model and model code, Android version, language, time zone, screen size, whether the phone is on Wi-Fi or mobile data and the mobile network's name (for example Jio), and a session number that changes each time you use the app.

The events never include your business name, GSTIN, ABN, GST number, address or phone number, your customers, items, amounts, bill numbers, or anything you type. We don't use them to identify you, we don't build a profile of you, and we don't sell them or share them with anyone else. The app asks PostHog not to work out a location from your internet (IP) address, and our PostHog project is set to discard the IP address, so it is not stored with the events. PostHog keeps the events for 1 year.

While this setting is on, the app also asks PostHog for our current ad settings each time it opens (how often ads may show, such as the minutes between two full-screen ads), sending the same random ID and the app's version, and keeps the answer on the phone. Nothing is sent to PostHog to get them beyond what is listed above.

It is on unless you turn it off: Menu → Share anonymous usage data. While it is off, the app sends nothing and uses its built-in ad settings. Events made while offline wait on your phone and are sent later. Because the events carry only a random ID, we cannot find one person's events; turning the switch off stops them for good on that phone.

5. The Growth subscription (Google Play Billing)

Growth is an optional subscription sold through Google Play. Google Play handles the purchase, the payment and cancellations under your Google account and Google's terms. We never receive your card, UPI, bank or other payment details.

Google Play tells the app whether your subscription is active. The app keeps, on your phone only, which plan you have and when Google Play last confirmed it, so Growth keeps working for a while if you are offline. Each purchase carries a random code made on your phone for Google's fraud checks; it does not identify you, and we cannot link it to you. As for every app on Google Play, Google gives us order records for sales (such as the order number, plan, price, date, and the buyer's country and state for tax). We use them only for our accounts and to help you if you contact us about a purchase.

6. What we collect

Google Play may give us anonymous, aggregated crash and performance statistics (Android vitals) if you have allowed your phone to share usage and diagnostics with app developers. These never include your records.

We do not sell data, and we do not build a profile of you. What Google and Meta do with the information their software collects is set out in their own privacy policies.

7. Permissions the app asks for

• Internet and network state: only to load ads on the Free plan, to check your subscription with Google Play, to tell Meta about installs and app opens (section 3), for anonymous usage counts (section 4), and for Google Drive backup if you use it. Everything else works offline.
• Advertising ID: used by Google AdMob on the Free plan (section 2), and by Meta to measure installs (section 3).
• Install referrer: lets Google Play tell the app which ad or link, if any, led to the install (section 3).
• Google Play billing: to buy and check the Growth subscription.
• Fingerprint / face unlock: only if you turn on app lock.
• Photos: only when you choose a logo or signature image, through Android's photo picker. The app sees only the picture you pick.

The app does not ask for location, contacts, camera, microphone or phone permissions.

8. Children

Scale Invoice is a business tool for adults. It is not directed at children, and it is intended for people aged 18 and over.

9. Your choices and deleting your data

• Delete everything: use Menu → Delete all data, uninstall the app, or clear its storage in Settings → Apps → Scale Invoice → Storage. This removes all your records from the phone. We hold no copy.
• Ads and install measurement: reset or delete your advertising ID in Settings → Google → Ads; take the Growth subscription, which turns ads off; and manage what Meta receives from apps in Facebook or Instagram's Accounts Centre (section 3).
• Anonymous usage data: turn it off in Menu → Share anonymous usage data (section 4).
• Subscription: cancel any time in Google Play → Payments & subscriptions → Subscriptions. Your records stay yours whether you subscribe or not.
• Backup copy: remove it from your Google account's backups (Google Drive → Backups) if you don't want it restored.
• Google Drive backups: turn off Daily backup in Menu → Daily backup; delete backups in the "Scale Invoice backups" folder in Google Drive; and remove the app's access to your Drive at myaccount.google.com → Security → Your connections to third-party apps & services. Menu → Delete all data signs the app out of Google Drive on this phone but leaves your backups in your Drive.

Because we hold none of your records, you access, correct and delete them yourself, in the app. Your rights under India's Digital Personal Data Protection Act, 2023, and under the privacy laws of Australia and New Zealand (section 12), are not limited by this policy.

10. Security

Your records are protected by Android's app sandbox, and by app lock if you turn it on. Anyone who can unlock your phone and open the app can see your records, so we recommend a screen lock and app lock.

11. Changes to this policy

If anything above changes, we will update this page and the effective date before the change reaches you. On 9 November 2026 we added section 12 (Australia and New Zealand), the business's country in usage data (section 4), and the details an Australian or New Zealand business enters (section 1). Version 1.5.1 added anonymous usage data through PostHog, with a switch to turn it off (section 4). Version 1.4 added optional backup to your own Google Drive (section 1). Version 1.1.1 added install measurement with Meta (section 3). Version 1.1 (3 October 2026) added ads on the Free plan and the Growth subscription; version 1.0 had neither.

12. Australia and New Zealand

We follow the Australian Privacy Principles (Australia's Privacy Act 1988) and the information privacy principles of New Zealand's Privacy Act 2020, whether or not a small-business exemption would apply to us. For users in Australia and New Zealand:

• Who we are: Rohan Janardan Surve, Room No 2 Ganesh Krupa, Mumbai Pune Road, Kalwa, Thane, Maharashtra 400605, India (rohan.surve5@gmail.com).
• What is collected, how, and why: we hold none of your business records or your customers' details; they stay on your phone (section 1). What leaves your phone is collected automatically by software in the app: by Google AdMob on the Free plan, to show and measure ads and prevent fraud (section 2); by Meta, to measure installs from our own ads (section 3); by us through PostHog, anonymous usage counts to improve the app (section 4); and by Google Play, for the Growth subscription (section 5).
• Your customers' details: the names, ABNs or GST numbers, addresses, phone numbers and email addresses you enter stay on your phone, in the backups you choose, and in the invoices you send. We never receive them. You are responsible for how you use them.
• If you'd rather not: none of this is needed to make invoices. You can turn off usage data, reset your advertising ID, or take Growth to turn ads off (section 9). Ads and install measurement need the information listed in sections 2 and 3 to work.
• Overseas: what is collected goes outside Australia and New Zealand: to PostHog Inc. (United States), Google (Google LLC, United States) and Meta (Meta Platforms, Inc., United States). Google and Meta may also process it in other countries where they operate.
• Access and correction: your records are on your phone, where you see, correct and delete them yourself. To ask about anything we hold through PostHog, write to us; because the events carry only a random ID, we will tell you what we can find. For AdMob, Meta and Google Play, use the tools in sections 2, 3 and 5, or ask those companies.
• Complaints: please write to us first at rohan.surve5@gmail.com; we will reply within 30 days. If you are not satisfied, or we haven't replied within 30 days, you can complain in Australia to the Office of the Australian Information Commissioner (oaic.gov.au) and in New Zealand to the Privacy Commissioner (privacy.org.nz).
• Privacy breaches: if a breach of information we hold is likely to cause serious harm, we will tell the people affected and the regulator, as the law requires.

13. Contact

Questions about privacy: rohan.surve5@gmail.com · Rohan Janardan Surve, Room No 2 Ganesh Krupa, Mumbai Pune Road, Kalwa, Thane, Maharashtra 400605, India.

This policy is published at https://rohansurve.in/scale-invoice/privacy.