Privacy Policy
The short version: TapBill stores the business profile, clients, documents, photos and signatures you create, so they sync across your devices and reach your clients. We use them to run the app and for nothing else. We do not sell data, we do not run ads, and you can delete everything from inside the app.
1. Who we are
TapBill is an invoicing app for iPhone, operated by Or Barda, a sole proprietor based in Israel ("TapBill", "we"). We are the data controller for the information described here. You can reach us at [email protected].
2. What we collect
Account
You sign in with Apple. Apple gives us a stable user identifier and, if you allow it, your name and email address (or Apple's private relay address). We use the email to identify your account and to answer support requests. We never see your Apple password.
Business profile
The business name, address, phone, email, tax ID (for example EIN, ABN or VAT number), licence number, logo, signature, template and brand colour, country, currency and tax rate. Everything here is printed on the documents you send, which is why we ask for it.
Clients
Names, emails, phone numbers, addresses and notes for the people you bill, typed by you or imported from the contacts you select on your iPhone. See section 4.
Documents
Estimates, invoices and receipts: line items, prices, taxes, discounts, notes, job titles, dates, numbers, payment status, and the activity timeline (created, sent, viewed, reminded, paid, voided). The PDFs we render from them.
Photos and signatures
Job photos you attach, and the signature images your clients draw on your phone together with the signer's name and the time of signing.
Purchases
If you subscribe to TapBill Pro, Apple processes the payment. We receive the subscription status (product, start, expiry, renewal, cancellation) and an anonymous transaction identifier, never your card details.
Usage and device
App events such as "invoice sent" or "paywall shown", the app version, iOS version, device model, language and a random installation identifier. We use them to understand which features work and where people get stuck. See section 8.
Support
Whatever you choose to send us by email, and our replies.
3. How we use it
- To run the app: render documents, number them, sync them between your devices, and send them to your clients when you ask.
- To email documents on your behalf from [email protected], with replies directed to your business email.
- To send the automatic reminders you turn on for an unpaid invoice.
- To count free invoices and unlock TapBill Pro features.
- To fix bugs, understand usage and improve the product.
- To answer support requests and to notify you about changes that affect your account.
- To comply with the law, and to protect TapBill and its users from abuse.
Where the GDPR or UK GDPR applies, our legal bases are performance of the contract with you (running the app), our legitimate interests (security, analytics, improving the product), your consent where we ask for it (device permissions), and legal obligations.
4. Your clients' information
When you add a client, you are sharing another person's contact details with us so that we can address documents to them. For that information you are the controller and TapBill is your processor: we only store it, show it to you, and put it on the documents you choose to send. We do not contact your clients except to deliver the documents and reminders you send, and we never use their details for marketing.
You are responsible for having a lawful basis to use your clients' details, which for an invoice you issue to them is normally the contract between you. If a client asks you to delete their details, remove them from TapBill and the deletion syncs to our servers.
5. Service providers
We use a small number of providers to run TapBill. Each one only receives what it needs for its job and is bound by a data-processing agreement.
| Provider | Purpose | What it handles | Location |
|---|---|---|---|
| Apple | Sign in with Apple, App Store payments | Account identifier, subscription receipts | Apple's infrastructure |
| Supabase | Database, file storage and server functions | All synced app data, PDFs, photos, signatures, logos | United States (AWS us-east-1) |
| Resend | Sending the emails you ask us to send | Recipient address, subject, message, the PDF attachment | United States |
| RevenueCat | Subscription management | Account identifier, subscription status, anonymised receipt | United States |
| PostHog | Product analytics | App events, device and app version, installation identifier | United States |
| Cloudflare | This website, domain and email routing for support@ | Web requests, support emails | Global network |
Transfers from the EEA, UK or Switzerland to these providers rely on the EU Standard Contractual Clauses and the UK Addendum, or on the provider's Data Privacy Framework certification.
We do not sell personal information and we do not share it with data brokers or advertising networks. We may disclose information if the law requires it, to enforce our terms, or as part of a sale or merger of TapBill, in which case this policy continues to apply.
6. Where data lives, and for how long
Your data is stored on your iPhone first, so the app works without a signal, and synced to our servers in the United States. We keep it for as long as your account exists. Tax rules in most countries require businesses to retain invoices for several years, so we do not expire old documents on our own; you decide when to delete them.
- Documents, clients and the business profile: until you delete them or your account.
- PDFs, photos and signatures: until the document they belong to is deleted.
- Analytics events: 12 months, then aggregated or deleted.
- Email delivery logs at our email provider: 30 days.
- Subscription records: 7 years, as required for accounting.
- Server backups: rolled over within 30 days of a deletion.
7. Device permissions
- Contacts — only when you tap "Import from iPhone contacts". iOS shows you a picker; we receive just the contacts you select, and only their name, email, phone and address.
- Camera and photo library — only when you add a photo or logo. We receive the photos you take or choose, nothing else from your library.
You can revoke each permission at any time in iOS Settings. TapBill does not access your location, microphone or health data, and does not track you across other apps or websites.
8. Analytics, no advertising
We use PostHog to record which features are used and where errors happen, under a random installation identifier linked to your account. These events do not contain your documents, your clients' details or the content of anything you send. We do not use advertising SDKs, do not show ads, and do not request the iOS tracking permission. If you would like analytics switched off for your account, email us and we will do it.
9. Your rights and choices
Depending on where you live you may have the right to access, correct, export, restrict or delete your personal information, to object to certain processing, and to lodge a complaint with your data-protection authority. Most of this you can do yourself: the app shows you everything we hold, lets you edit it, exports your documents as PDF and CSV, and deletes your account on request. For anything else, email [email protected]; we respond within 30 days and we never discriminate against you for exercising a right.
California residents: we do not "sell" or "share" personal information as the CCPA defines those terms, and we do not use sensitive personal information to infer characteristics about you. You may request the categories and specific pieces of information we hold, request deletion, and designate an agent to act for you.
10. Deleting your account
In the app, open More → Help, privacy and restore → Delete account. This removes your business, clients, documents, PDFs, photos, signatures and subscription records from our servers right away, and from our backups within 30 days. Your App Store subscription is managed by Apple: cancel it in Settings → Apple ID → Subscriptions, since deleting the account does not stop Apple from billing. Copies of documents you already sent remain with your clients, as they would with a paper invoice.
11. Children
TapBill is a business tool and is not directed to children under 16. We do not knowingly collect information from them; if you believe a child has created an account, contact us and we will delete it.
12. Security
Data travels over TLS and is stored encrypted at rest. Access on our servers is enforced per business with row-level security, so one account can never read another's data. Signatures and photos are stored in private buckets reachable only through signed, expiring links. Access to production systems is limited to the operator and protected by multi-factor authentication. No system is perfectly secure; if a breach affects you we will notify you and the relevant authority as the law requires.
13. Changes
If we change this policy in a way that matters, we will show a notice in the app or email you before the change takes effect. The effective date at the top always tells you the current version.
14. Contact
TapBill · Or Barda · Israel
Email: [email protected]