Privacy Policy — Avo
Avo — the Avo app for iPhone and the website avoinvoice.com — is operated by DEDUSHKA DEVELOPMENT - FZCO ("we", "us"), DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates, Trade Licence No. 63879 (Dubai Integrated Economic Zones Authority), the entity responsible for your information under this policy.
Your invoices are yours. Everything you create — invoices, estimates, receipts, clients, items and your business details — stays on your device and in your own iCloud account. We have no copy and cannot read it. There is no account to create with us.
To learn what works and what breaks, the app sends us a small amount of usage and crash information. It never includes the content of your documents. It is not tied to your name, email or Apple Account, it does not use the advertising identifier (IDFA), it is not used to track you across other companies' apps or websites, and we never sell it.
The short version
| What | What happens to it |
|---|---|
| Your documents, clients and business details | On your device and in your private iCloud. Never sent to us. |
| Which features get used (e.g. "a document was created", "a paywall was shown") | Collected, without content, through Google Firebase and our own server |
| Crash reports | Collected through Google Firebase Crashlytics |
| Subscription status and purchase history | Handled by Apple and RevenueCat |
| Your name, email, phone, address, contacts, photos, precise location | Not collected |
| Advertising identifier (IDFA), tracking prompt, ads inside the app | None |
| Selling or renting your data | Never |
Your documents: what is stored, and where
The following is saved on your device:
- Invoices, estimates and receipts, including line items, deposits and totals
- Clients you add, and their contact details
- Your saved items and prices, and the templates you pick
- Your business profile — name, address, contact details, payment details and logo
None of this is sent to us or to any of the service providers named below.
iCloud sync
So that a lost or replaced phone doesn't take your invoices with it, Avo keeps this data in sync through Apple's iCloud, using the private database of your own iCloud account. That means it moves between your devices and is backed up by Apple — but it is stored under your Apple Account, not ours. We cannot read it. The developer of an app has no access to a user's private CloudKit database, by design. Avo also keeps a count of documents you have created in your device's keychain and in your iCloud, so the free document limit survives reinstalling; that count is a number, not a document.
If you would rather not use iCloud, turn it off for Avo in Settings → your name → iCloud. The app keeps working; your data simply stays on the one device. Apple's handling of iCloud data is covered by Apple's Privacy Policy.
What the app collects
The app collects four kinds of information. None of it contains the content of your documents.
1. Usage events. When you do something in the app, it records that it happened — for example: onboarding finished, a document created, a document shared, an invoice marked paid, an estimate converted, a receipt issued, a template picked, a paywall shown, a purchase started or restored, a CSV exported, a PDF failed to render. Each event carries only short, coarse details such as the document type, the template or trade you picked, the document's currency code, whether it has tax, how many lines it has as a range ("2–3", "7+"), how many days it took to be paid as a range, and which kind of app you shared it with (Mail, Messages, AirDrop, Files and so on). Along with events the app records a few settings that describe the installation: your trade, whether Premium is active, a range for how many documents you have made, the app and document language, and your App Store country.
What events never contain: client or business names, addresses, email addresses, phone numbers, document numbers, line-item text, notes, logos, and money amounts.
2. Crash and diagnostic information. If the app crashes or hits an error, a report is sent with the technical state at that moment: the stack trace, device model, iOS version, app version, free memory and disk space, and the last few usage events before the crash (the same events described above, so the report shows which screen and action led to it).
3. Purchase information. If you subscribe to Avo Premium, the app and our subscription provider record which plan you chose, its price and currency, whether a free trial was used, and later renewals, cancellations, billing problems and expirations. This is used to unlock Premium on your devices and to understand which plans people choose.
4. Pseudonymous identifiers. To count installations rather than events, and to connect a purchase to the installation it came from, the app uses random identifiers that are created for this app on this device:
- the Firebase app instance ID, created by Google Firebase;
- Apple's identifier for vendor (IDFV), which Firebase uses when no advertising identifier is available — and in Avo it never is;
- the RevenueCat anonymous app user ID, created by RevenueCat when the app first starts;
- an install ID created by Avo itself, used only for statistics on our own server.
These identifiers identify an installation, not a person: we have no account, name or email to attach them to. Deleting the app removes them from the device; a new installation gets new ones.
Device and approximate location. Like any internet service, our providers receive your device's IP address when the app connects to them. Google Analytics uses it to derive an approximate region (country, region, city) and then does not store the IP address itself. Device model, iOS version, language and app version are also collected. Avo does not ask for or use your device's location.
What the app does not do
- It does not use the advertising identifier (IDFA) and never shows the "Allow app to track your activity" prompt.
- It does not track you across other companies' apps or websites, and does not share your data with data brokers.
- It does not show ads.
- It does not sell or rent your information to anyone.
- It does not read your address book or photo library as a whole (see below).
Why we collect it
- To make the app work: to unlock Premium, restore purchases on a new device, and enforce the free document limit.
- To fix it: crash reports tell us what broke and on which iOS version.
- To improve it: usage events tell us, in aggregate, which features are used, where people get stuck and which plans they choose.
- To measure our own advertising: we advertise Avo through Google Ads. Firebase lets Google Ads count, in aggregate, how many installations and subscriptions came from our ads, so we know which ads are worth paying for. This does not use the advertising identifier and does not show you ads anywhere.
Who receives it
We use a small number of service providers. Each receives only what is described here and processes it under its own privacy policy.
| Provider | What it does for Avo | What it receives | Its policy |
|---|---|---|---|
| Google Firebase (Google LLC) — Google Analytics for Firebase and Firebase Crashlytics | usage statistics, advertising measurement for our Google Ads campaigns, crash reports | usage events, installation settings, crash reports, Firebase app instance ID, IDFV, device information, IP address | Firebase Privacy and Security · Google Privacy Policy · How Google uses information from apps that use its services |
| RevenueCat, Inc. | checks your subscription with Apple and tells the app whether Premium is active; forwards subscription events (trial, purchase, renewal, cancellation) to our Google Firebase project and to our own server | purchase information, RevenueCat anonymous ID, Firebase app instance ID, App Store country and currency, device and app version, IP address | RevenueCat Privacy Policy |
| Apple | App Store payments, iCloud sync, crash and usage reports if you have chosen to share them with app developers in iOS settings | as described in Apple's policy; we never see your card details | Apple Privacy Policy |
| Our own server (avoinvoice.com, operated by us) | our own copy of the usage statistics and subscription events, so we can read them without relying on a third party | the same usage events, the Avo install ID, app version, RevenueCat subscription events with the anonymous ID, IP address in server logs | this policy |
The app also downloads the list of trades and templates from avoinvoice.com at most once a day. That request contains nothing about you beyond what any web request contains (IP address, app version in the user agent), and our server keeps it only in its access log.
We may disclose information if required by law. If the app or the company is ever sold, this policy continues to apply to the information collected under it.
Purchases
Avo Premium is sold through Apple's In-App Purchase. Payment is handled entirely by Apple — we never see or receive your card details. RevenueCat confirms the purchase with Apple on our behalf and tells the app whether a subscription is active, so it can unlock the paid features. You can manage or cancel a subscription in Settings → your name → Subscriptions.
Contacts and photos
If you import a client from your address book, or add a logo or client photo, Avo uses Apple's standard system pickers. Those pickers run outside the app: Avo never gets access to your contact list or photo library as a whole, only the single contact or image you pick. What you pick is then stored on your device like anything else you type in, and is never sent to us.
Sharing a document
When you share an invoice, Avo hands the PDF to the iOS share sheet and you choose where it goes — Mail, Messages, a file, or another app. That destination is your choice and is governed by that app's or service's own privacy policy. Avo does not send the document anywhere on its own. The app records only that a document was shared and the kind of app it went to, never the document or the recipient.
The website
The free invoice generator on avoinvoice.com works in your browser. What you type into it is kept in your browser's local storage so you don't have to retype it, and it is not sent to our server; "Clear" removes it. The generator's fields and the document preview are hidden from session recording (Yandex Metrica's ym-hide-content setting), so Yandex sees only that someone interacted with the form, not what was typed.
To understand how visitors use the site and which of our ads bring them, the website uses:
- Yandex Metrica (YANDEX LLC) — page views, clicks, scrolling and session replays, with cookies. The generator's fields and the document preview are masked in session replays, so they do not contain what you type there; replays are stored by Yandex, not by us. Yandex Privacy Policy · opt out of Yandex Metrica
- Pinterest Tag (Pinterest Europe Ltd. / Pinterest, Inc.) — records page visits, template downloads and clicks on the App Store link, so we can measure our Pinterest ads. Pinterest Privacy Policy
You can block or delete cookies in your browser at any time; the site keeps working without them. Our web server keeps standard access logs (IP address, page requested, browser) for 14 days.
How long it is kept
| Information | Kept for |
|---|---|
| Usage events in Google Analytics for Firebase | up to 14 months, then deleted; aggregated reports without identifiers may be kept longer |
| Crash reports in Firebase Crashlytics | 90 days |
| Subscription records at RevenueCat | for as long as the subscription record for your purchase exists at RevenueCat, under RevenueCat's own retention terms |
| Usage statistics and subscription events on our own server | up to 24 months, then deleted |
| Our web server access logs | 14 days |
| Yandex Metrica and Pinterest data about website visits | as set out in Yandex's and Pinterest's own policies |
| Your documents | on your device and in your iCloud until you delete them; we never hold them |
Your choices and your rights
- Delete your documents: delete any invoice, client or item in the app at any time. Deleting the app removes all of its data from your device. To remove the iCloud copy, go to Settings → your name → iCloud → Manage Storage and delete Avo's data. We cannot delete it for you, because we never had it.
- Stop data collection: deleting the app stops all collection immediately. You can also stop sharing crash and usage data with app developers through Apple in Settings → Privacy & Security → Analytics & Improvements.
- Ask us about your data: you can ask to access or delete the information described here, or object to its use, by writing to support@avoinvoice.com. Because it is not tied to your name or email, we may need your help to find it — for example, the date you installed the app and the date and plan of any purchase, or a screenshot of your purchase receipt. We will answer within 30 days.
- If you live in the European Economic Area, the United Kingdom or another place with data protection law, you also have the right to complain to your local data protection authority. Where that law requires a legal basis, we rely on our legitimate interest in keeping the app working, fixing it and improving it, and on the performance of our contract with you for purchases.
International transfers
Our providers process information in the United States and other countries where they operate; our own server is located in the Netherlands. Where data protection law requires it, these transfers are covered by the providers' standard contractual clauses or equivalent safeguards.
Children
Avo is a business tool and is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect information from children. If you believe a child has used Avo and want the related data removed, write to support@avoinvoice.com.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date at the top. If a change means Avo collects something new, we will say so here before the version of the app that does it is released.
Contact
Questions about this policy or about Avo: support@avoinvoice.com
Operator: DEDUSHKA DEVELOPMENT - FZCO, DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates. Trade Licence No. 63879, Dubai Integrated Economic Zones Authority.