OFSYRA Invoice for Android: Privacy Policy

This policy explains how OFSYRA LTD (“OFSYRA”, “we”, “us”) handles information in connection with the OFSYRA Invoice app for Android (the “App”). It describes what the App actually does. Questions: privacy@ofsyra.com.

The short version

Your invoices stay on your phone and in a private area of your own Google Drive. OFSYRA does not receive, store or look at your invoices, customers or business details. The App displays no adverts. Optional Meta and TikTok advertising measurement, where available, is off unless you choose to allow it; see section 7.

1. Who we are

OFSYRA LTD, 66 Paul Street, London, EC2A 4NA, United Kingdom. Company number 17464477. OFSYRA Invoice is an invoicing app for sole traders, contractors and limited companies.

2. What is kept on your phone

The optional sample demo needs no sign-in or payment. It uses a temporary workspace, does not sync sample data to Google Drive or unlock a real Pro subscription, and discards sample changes when you exit. Sample PDFs are watermarked. If you choose to share a sample PDF, Android opens its share sheet so you can choose the receiving app.

Your business details, customers, invoices, line items, notes, attachments, logo and saved PDF copies of sent invoices are stored in the App’s private storage on your phone, where other apps cannot read them. The App also keeps your Google account email address, so that it can tell which account your data belongs to, and uses short-lived Google access tokens in memory to reach your Drive. The App does not save these tokens to its database or sync them to Drive. Android’s own device backup is switched off for the App, so Google Drive (below) is the only backup.

3. Google sign-in and backup to your Google Drive

The App asks you to continue with Google. On first connection it requests access to your Google account email address to identify the account, and permission to use the private “app data” folder in your own Google Drive. Once your account is known, subsequent authorisation requests ask only for the Drive permission. This lets the App see only the files it creates in that hidden folder; it cannot read your other Drive files. Your data is copied there so that it can be restored and kept in step between your own phones and tablets signed in to the same Google account.

This happens between your phone and Google. OFSYRA does not receive your invoices, your Drive files, your Google access tokens or your email address through this process, and our purchase-checking service does not receive your invoicing data. OFSYRA does not add its own encryption on top of Google’s. Google processes the data under its own terms and privacy policy.

4. Sending invoices

When you choose to send an invoice, the App opens your chosen email app, or the Android share sheet, with the invoice PDF attached. The App never sends email itself and never sees your email password. What happens next is between you, your email provider and your customer. The App asks you to confirm that you sent the invoice before it is marked as sent.

5. Photos, attachments and scanning

You can attach photos and files that you choose, and add a logo, using Android’s own picker; the App sees only what you select. You can scan paper documents with Google’s document scanner, which runs inside Google Play services and returns the scan to the App. Google’s ML Kit, which provides it, collects technical diagnostic information (such as device model and Android version, the App’s package name and version, performance measurements and installation identifiers) as described in Google’s ML Kit data disclosure. Attachments and scans are kept on your phone and, if sync is on, in your private Drive folder.

6. OFSYRA Invoice Pro and Google Play

Pro is a monthly subscription bought through Google Play, currently £5.99 per month in the UK. Google processes the payment and manages the subscription; OFSYRA does not receive your full card details. Google Play provides the developer with sales and subscription reports through Play Console.

To check Pro, the App sends its Google Play purchase token, the App’s package name and a fresh request identifier over an encrypted connection to OFSYRA’s purchase-checking service, hosted by Cloudflare. The service asks Google for the subscription’s status, product and expiry time and returns a signed answer. It does not receive your invoices, customers, Drive files, Google sign-in access tokens or email address. The purchase token is processed in memory for the check; we do not keep a purchase-token database or enable request logging in this service. Cloudflare processes network information, including the connecting IP address, to provide and protect its service.

We process subscription information to provide the Pro service you buy and to protect it against fraudulent access. The App remembers the last confirmed answer and check time on your phone. If a check cannot be completed, a recent “yes” is honoured for at most three days from the last successful confirmation; failed checks never extend that period. After that, Pro stays off until it can be confirmed again, and the App says it could not confirm your subscription. Your existing invoices, customers, attachments and saved PDFs remain available. Losing Pro only limits new sends under the free plan.

Pro never depends on a privacy or advertising choice, and it is never read from your synced data. Manage or cancel the subscription in Google Play (profile picture, then Payments & subscriptions, then Subscriptions). Deleting your OFSYRA data does not cancel the subscription.

7. Analytics, advertising and tracking

Revenue charts are calculated on your phone from your own invoices. The App displays no adverts. Versions offering optional TikTok install measurement keep it off by default. If you choose “Allow measurement” after setup or turn on “Help measure TikTok installs” in Settings, TikTok receives a first consented app-open event, app/device information and installation-referrer information to measure advertising. Google advertising-ID collection and SDK monitor metrics are disabled. SDK error diagnostics, including SDK crash reports, may also be sent for reliability under the same optional consent. We do not supply invoice or quote contents, customer details, account contact details or purchase events to TikTok; automatic purchase, retention, page and button events are disabled.

You can switch this off in Settings without affecting app access or Pro. Known existing users are sent a first measured launch event rather than a new-install event. New-install events are limited to newly observed installations consenting within 24 hours; this can undercount reinstalls and later consent. SDK events and platform attribution are assessed separately from store-confirmed new downloads. TikTok may process measurement information internationally under its privacy policy. Contact privacy@ofsyra.com about your rights or requests.

Versions offering optional Meta advertising measurement keep it off until you choose “Allow measurement” in the separate Meta choice or enable “Help measure Meta ads” in Settings. TikTok consent does not enable Meta. Meta receives consented app opens and, only for newly observed installations consenting within 24 hours of installation, an install signal. Meta’s SDK also supplies technical app/device information, an SDK-generated installation identifier, network information (including the internet address, from which Meta may infer an approximate location) and available installation-referrer information for advertising measurement. The App does not request device location permission or supply precise GPS location to Meta. Google advertising-ID collection, automatic screen and button metadata, automatic purchases and product-improvement collection are disabled. We do not supply invoice or quote contents, customer details, account contact details or purchases to Meta.

You can switch Meta measurement off in Settings without affecting app access or Pro. This stops new app-initiated event submissions and does not recall information already transmitted. Meta may combine measurement information with its other services to measure and deliver advertising. Its international processing and handling are described in its Privacy Policy and Business Tools Terms. SDK activity and ad attribution are not independently proof of a new Google Play download. Contact privacy@ofsyra.com about rights or deletion requests.

If you have chosen to share usage and diagnostic data from your Android device with developers, Google may provide OFSYRA with anonymised crash and performance reports through Google Play Console.

8. Contacting support

“Report a Problem” opens your email app with a draft containing the App name and version, your device model and your Android version, which you can edit or delete before sending. Your invoices, customers and business details are never added. Messages you send reach our mailbox, provided by Microsoft. We keep them while needed to resolve your enquiry, handle follow-up or complaints, or meet legal obligations, and review and delete them periodically. Email privacy@ofsyra.com to ask us to delete yours.

9. Security

Your data is held in the App’s private storage and travels to Google Drive over encrypted connections. Anyone who can unlock your phone can open the App, so use a screen lock. Protect your Google account with a strong password and two-step verification, because it controls access to your backup.

10. Keeping and deleting your data

We apply no automatic expiry to your invoicing data; you decide. You can delete a draft invoice at any time. You can delete everything from the More tab (the Settings screen) with Delete Account. Signing out does not delete anything. Full instructions, including what to do if you no longer have the App, are on our Delete your data page.

11. Sharing and third parties

We do not sell your personal information. Your invoice data travels directly between your devices, Google Drive and the recipients you choose. Cloudflare hosts the purchase-checking service described in section 6. Optional Meta and TikTok measurement is described in section 7. Support messages you send to us are handled through our email provider as described above. Google (sign-in, Drive, Google Play, ML Kit) and your own email provider handle information when you use them, under their own terms and privacy policies.

12. International processing

Google, Cloudflare, Meta and TikTok operate internationally and may process information outside the UK. Google’s transfer arrangements apply to data you choose to store in Google Drive. Cloudflare’s data-processing and international-transfer terms apply to its processing for our purchase-checking service; see Cloudflare’s Data Processing Addendum.

13. Children

The App is for people running a business and is not directed at children.

14. Your rights

Under UK data protection law you can ask about, correct and delete your information and object to its use. Because OFSYRA does not hold your invoicing data, you exercise most of these rights yourself in the App and in your Google account. For anything we do hold, such as support emails, contact privacy@ofsyra.com. You can complain to the Information Commissioner’s Office.

15. Changes

If this policy changes we will post the new version here and change the effective date.

16. Contact

OFSYRA LTD, 66 Paul Street, London, EC2A 4NA. privacy@ofsyra.com.