Legal

Privacy Policy

Effective date: 17 September 2026 · Last updated: 17 September 2026

This Privacy Policy explains how OFSYRA LTD (“OFSYRA,” “we,” “us,” or “our”) handles information in connection with the OFSYRA Invoice application (“OFSYRA Invoice,” the “App”). It describes what the App actually does, so that you know exactly what to expect.

OFSYRA Invoice relies on a number of services provided directly by Apple Inc. to operate — including iCloud/CloudKit, Sign in with Apple, the App Store/StoreKit, and the Mail app and iOS's native share sheet. Throughout this Policy, we distinguish between what OFSYRA itself does with your information and what Apple (or, where you choose it, another app you share to) does independently.

If you have questions about this Policy, contact us at privacy@ofsyra.com.

1. Who we are

OFSYRA Invoice is developed and operated by:

OFSYRA LTD
66 Paul Street
London, EC2A 4NA
United Kingdom
Company number: 17464477

OFSYRA Invoice is an invoicing application for iPhone and iPad, designed to help sole traders, contractors, and limited companies create, send, and track invoices.

2. What data OFSYRA Invoice collects

OFSYRA Invoice collects only what is needed to operate your account and the invoicing features you use. Specifically:

When you sign in, using Sign in with Apple, we receive and store a unique identifier for your Apple ID and, if you choose to share it, an email address (which may be a real address or an address Apple generates on your behalf to protect your actual email — see Section 5). We do not request your name.
When you set up your business profile, we store the business details you enter yourself: legal/trading name, address, contact email and phone, company number, VAT registration status and number, default payment terms, and — if you choose to add one — a business logo image. We also store any bank details (sort code, account number, IBAN, BIC/SWIFT) you enter to appear on your invoices.

We do not collect this information from any other source, and we do not collect it automatically in the background — it is only ever what you type into the App or explicitly choose to provide.

3. Invoice, customer and business information

As you use OFSYRA Invoice, it stores the records you create in the ordinary course of invoicing your own customers, including:

Customer records you add: name, contact person, email, phone, address, company number, VAT number, and any payment-terms override.
Invoice records: invoice numbers, dates, status, notes, VAT details, and line items (description, quantity, unit, price, VAT rate).
Email activity: a record of each time you send an invoice through Apple Mail, including the To, CC, and BCC recipient addresses (BCC automatically includes a copy to your own sender address), the subject line, the full message text, the date and time, and the outcome (handed off to Mail, sent, cancelled, or failed). If you instead use the “Share Invoice” option described in Section 7, that is recorded differently, or not at all — see that section.
Attachments: the PDF generated for each invoice, and any supporting documents you choose to attach (such as receipts, timesheets, or scanned documents).

This information is entered by you and relates to your own business and the customers you invoice. You control what is entered and edited, and — as described in Section 16 — what is deleted, including your entire account and all of this data if you choose to.

4. How data is stored and synchronised with iCloud/CloudKit

All the data described in Sections 2 and 3 is stored locally on your device first, and is also synchronised using Apple's CloudKit service to a private database associated with your own iCloud account.

A few important points about this:

OFSYRA does not operate its own servers to store or process this data. There is no separate OFSYRA-run database — your data is held on your device and, via Apple's CloudKit infrastructure, in your own private iCloud storage.
Your private CloudKit database is scoped to your Apple ID. It is not pooled, aggregated, or made visible to other users of the App.
Synchronisation happens automatically between your own devices signed in with the same Apple ID, so your invoices and settings stay up to date across, for example, an iPhone and iPad. The same automatic mechanism is what carries account deletion through to your private CloudKit database — see Section 16.
Apple's own handling of CloudKit data is carried out by Apple as an independent party, under Apple's own privacy policy — not this one.

5. Sign in with Apple

OFSYRA Invoice requires you to sign in using Sign in with Apple before you can use the App. When you do:

We request only your email address. We do not request your name.
If you choose to hide your email from us, Apple provides a private relay address instead, and that is what we store — we cannot see your real email address in that case.
We store the unique identifier Apple assigns to your Apple ID for use with this App, and whichever email address (real or private relay) Apple discloses to us.
We do not receive or store your Apple ID password, or any authentication token or credential — Sign in with Apple is handled entirely by Apple's own systems, and OFSYRA Invoice only ever receives the identifier and email described above.
To check that your sign-in is still valid, the App periodically asks Apple to confirm the status of your Apple ID credential for OFSYRA Invoice. This check sends only the stored identifier to Apple.

6. Keychain/sign-in information

OFSYRA Invoice stores one small piece of information in your device's Keychain: a flag recording that you are signed in, referenced by your Apple ID identifier. This entry:

Is stored only on the device you are using — it is explicitly configured not to sync via iCloud Keychain and not to transfer to any other device.
Contains no password, token, or credential of any kind.
Is deleted from that device when you sign out (Section 16), and is also deleted, as the final step, once an in-app account deletion has completed successfully (Section 16).

7. Emailing invoices through Apple Mail, and sharing when Mail isn't available

When you send an invoice, OFSYRA Invoice's primary method is unchanged: it prepares the email (recipients, subject, message, and attachments) using the information you've entered, and hands it to Apple's built-in Mail composer.

OFSYRA Invoice does not send the email itself and does not operate or contact any mail server. Once you tap Send inside the Mail composer, delivery is handled by iOS Mail, using whichever email account you have configured on your device (which may be Gmail, Outlook, iCloud Mail, or another provider of your choosing).
A copy of every invoice email is automatically sent to your own declared sender address (a “self-BCC”), so you have a record in your own inbox.
Because OFSYRA Invoice hands the message to the system Mail composer, it can only record whether the message was handed off, sent, cancelled, or reported as failed by that composer — it cannot confirm actual delivery to, or receipt by, your customer.

If Apple Mail isn't set up on your device, OFSYRA Invoice offers a “Share Invoice” option instead of a dead end. This opens Apple's native iOS share sheet, from which you can send the invoice PDF and any supporting attachments to any destination available on your device — for example Messages, AirDrop, Files, Mail (if you open it that way), or a third-party app you have installed.

A share is not treated as an email send. It is not recorded in your invoice's email activity log the way a Mail send is, and it never changes an invoice's status to reflect a confirmed send.
OFSYRA Invoice cannot confirm what happens after you share — whether the file was actually delivered, opened, or received by anyone — in exactly the same way, and for the same reason, that it cannot confirm delivery of an emailed invoice.
OFSYRA does not operate, control, or have a relationship with whichever destination you pick from the share sheet. The share sheet itself is provided by Apple; which app or service receives your file is entirely your own choice at the moment you share it, the same way choosing which email provider to send through is your choice, not ours.

8. Attachments and invoice PDFs

Invoice PDFs are generated entirely on your device, from the invoice and business information described in Sections 2–3. No external service is contacted to generate a PDF.

Any files you choose to attach to a send — a receipt, a timesheet, a photo, or a scanned document — are stored by the App in the same way as your other invoice data (Section 4): locally, and synchronised via your private CloudKit database. These are the same PDF and attachment files offered through Apple Mail or the “Share Invoice” fallback described in Section 7.

9. Subscriptions and payments through Apple

OFSYRA Invoice offers a free tier and an optional paid subscription (“Pro”), processed entirely through Apple's App Store (StoreKit):

OFSYRA does not see or store your payment card details. All purchases are handled directly by Apple's App Store, independently of OFSYRA.
We do not maintain our own record of your purchase history. The App checks your subscription status directly with Apple each time it needs to, and does not independently store a separate copy of your transaction or billing history.
Apple's own handling of your payment information and purchase history is carried out under Apple's own privacy policy and Media & Purchase terms.
Deleting your account does not cancel or affect an active subscription. Because your subscription is managed entirely by Apple and not by OFSYRA, account deletion within the App has no effect on it — see Section 16.

10. Analytics, advertising and tracking

OFSYRA Invoice does not use any analytics, advertising, or tracking software. Specifically:

The App contains no third-party analytics, crash-reporting, advertising, or telemetry software.
The App does not use advertising identifiers and does not build advertising profiles.
Charts and summaries you see in the App (such as revenue totals) are calculated entirely on your device from your own invoice data, and are never transmitted anywhere for this purpose.

11. Data security

We take a number of technical measures to help protect your information:

Your data is stored on your device using file protection that keeps it encrypted while your device is locked and has not yet been unlocked since it was last restarted.
Your data syncs to a private CloudKit database tied to your own Apple ID, rather than to a shared or publicly accessible database.
Your sign-in Keychain entry is stored using device-only accessibility, and is never synced or backed up off your device.
We do not store your Apple ID password, authentication tokens, or payment card details at any point.

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

12. Data retention

OFSYRA Invoice does not apply any automatic expiry or deletion period to your data. Your business, customer, invoice, and email-activity records are retained for as long as you continue to use the App with your account.

You control when data stops being retained: you can delete an individual Draft invoice at any time (Section 16), or delete your entire account and all associated data at once using the in-app Delete Account feature described in Section 16. Outside of one of those actions, signing out does not delete anything (see Sections 6 and 16), and data otherwise remains stored on your device and in your private CloudKit database until you sign back in or uninstall the App.

13. Data sharing and third parties

We do not sell your data, and we do not share it with advertisers or data brokers.

The only third party involved in operating OFSYRA Invoice is Apple, through the services described throughout this Policy: CloudKit (data storage and sync), Sign in with Apple (authentication), StoreKit/the App Store (subscriptions), and Apple Push Notification service (used to trigger background sync). We do not use any other third-party processor, vendor, or service to operate the App.

Separately, when you choose to send an invoice — whether by email or by using the “Share Invoice” option (Section 7) — delivery or handling from that point on is carried out by whichever email provider or app you have chosen. That destination is selected by you, not by us, and is not a service we contract with, integrate with, or control. (This is distinct from “Share Invoice” being a feature name — it does not mean OFSYRA itself shares your data with anyone; it means the App hands a file to Apple's own share sheet at your direction.)

14. International data processing

OFSYRA does not itself select or configure the country or region in which your data is stored or processed. Storage and processing via CloudKit, Sign in with Apple, and StoreKit are carried out by Apple, according to Apple's own global infrastructure and the region/country settings associated with your Apple ID and iCloud account.

As a UK company using Apple's global services, your information may be processed outside the United Kingdom as a result. We are not in a position to specify the particular countries or data centres involved, as this is determined by Apple. For details of how and where Apple processes data on our behalf, please refer to Apple's own privacy documentation.

15. Children's privacy

OFSYRA Invoice is a professional invoicing tool intended for business owners, sole traders, contractors, and companies. It is not directed at, and is not intended to be used by, children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@ofsyra.com so we can address it.

16. Your privacy rights

Deleting individual records: OFSYRA Invoice lets you permanently delete a draft invoice (and its line items) before it has been sent. This deletion is immediate and cannot be undone.

Signing out: You can sign out of OFSYRA Invoice at any time from Settings. Signing out removes only the local sign-in flag from your device (Section 6) — it does not delete your business, customer, invoice, or other data, which remains stored on your device and in your private CloudKit database, ready for when you sign back in. Signing out is not the same as deleting your account — if you want your data deleted, use Delete Account, described next.

Account deletion: OFSYRA Invoice provides an in-app Delete Account feature (Settings → Delete Account). Because this permanently removes your data, the App requires you to confirm before anything is deleted. Once confirmed:

The App deletes your invoice records first. Removing an invoice also removes the line items, email activity history, and attachments that belong to it, through the same deletion process the App already uses when you delete an individual draft invoice.
Your customer records, declared sender identity, business profile, and account record are then deleted.
This is carried out as a single local data operation where possible — either the deletion completes in full, or (if something prevents it from completing) none of it is applied, so your data is never left partially deleted.
Only once that local deletion has completed successfully does the App remove the Apple sign-in entry from your device's Keychain (Section 6) and sign you out, returning you to the sign-in screen.
Because your data syncs to your private CloudKit database (Section 4), the same automatic synchronisation that keeps your devices up to date also carries the deletion through to CloudKit once it's committed on your device. This happens through Apple's own infrastructure in the background; we are not able to state a specific time by which that synchronisation completes, or to independently confirm from our side that it has.
Account deletion does not cancel or delete any Apple subscription. Your subscription (if you have one) is managed entirely by Apple through the App Store/StoreKit and is unaffected by deleting your account in OFSYRA Invoice. If you have an active subscription, the App tells you this before you confirm deletion, and you'll need to manage or cancel it separately through your Apple ID's subscription settings if you no longer want it to renew.

Other requests: UK data protection law gives you certain rights over your personal data, including rights to request access to, correction of, deletion of, or a copy of your data, and to object to or restrict certain processing. For any of these — including requesting deletion by a route other than the in-app feature above, for example if you're unable to use the App itself — please contact us at privacy@ofsyra.com. We do not currently have an automated process for requests made this way, so we handle each one manually and respond to you directly.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in the App or in applicable law. If we make changes, we will update the “Last updated” date at the top of this Policy. We encourage you to review this Policy periodically.

18. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Privacy: privacy@ofsyra.com
Support: support@ofsyra.com

Postal address:
OFSYRA LTD
66 Paul Street
London, EC2A 4NA
United Kingdom
Company number: 17464477