Privacy Policy — taskinvo

Effective date: May 12, 2026 · Last updated: May 12, 2026

This Privacy Policy explains what personal information the taskinvo mobile application (referred to below as "the app") collects, how it is used, where it is stored, and the rights you have over your data.

taskinvo is operated by Andrei Ponomarev (the "data controller"). For privacy requests, contact info@taskinvo.com.

Contents

Data we collect
Data we do not collect
How we use your data
Where data is stored
Third-party services
Data retention & deletion
Your rights (GDPR / CCPA)
Children
Changes to this policy
Contact

1. Data we collect

Category	What is collected
Account data	Email address, optional display name, and a password (hashed and managed by Firebase Authentication — we never see your plaintext password).
Business data	Information you choose to record inside the app: clients (name, optional email, phone, address, notes), projects, invoices and estimates (line items, totals, due dates), receipts, price lists, and business settings (currency, tax rate, business name and contact details).
Photos	Photos of receipts and project progress that you upload from your camera or photo library. These are stored in Firebase Storage under `users/{your_uid}/`.
Diagnostics	Crash reports and anonymized error logs (collected by Sentry) so we can fix bugs. Logs do not include the contents of your invoices or photos.
Optional OCR	If you use the "scan receipt" feature, the photo is sent to OCR.space (a third-party OCR service) to extract text. The extracted text is then stored as part of your receipt record.
Google Calendar (disabled in v1)	The app contains code for Google Calendar two-way sync, but this feature is disabled in the current release. No Google Calendar data is read or written.

2. Data we do not collect

Precise device location.
Your contacts, SMS messages, or call history.
Photos or files from your device beyond the ones you explicitly attach in the app.
Advertising identifiers. The app contains no advertising or third-party tracking SDKs.
Microphone or audio recordings.

3. How we use your data

We process your data only to:

Provide the core functionality of the app (creating and storing invoices, estimates, receipts, etc.).
Sign you in and keep your session secure.
Synchronize your data across your devices.
Diagnose and fix crashes (Sentry).
Comply with legal obligations.

We do not sell or rent your data, and we do not use it for advertising.

4. Where data is stored

Your data is stored in Google Firebase (Cloud Firestore, Firebase Storage, Firebase Authentication). The project is hosted in the us-central1 region by default. Firebase is operated by Google LLC; their privacy practices are described at firebase.google.com/support/privacy.

5. Third-party services

Service	Purpose & data shared
Google Firebase	Authentication, database (Firestore), file storage. Receives all account and business data described above.
Sentry	Crash and error reporting. Receives anonymized stack traces, device model, OS version, and your Firebase user ID for support purposes.
OCR.space	Optional. Only used when you tap "scan receipt". The photo is transmitted to OCR.space and the recognized text is returned.
Expo Updates	Delivers over-the-air JavaScript updates. Receives the app's runtime version and channel; no personal data.

6. Data retention & deletion

We keep your data as long as your account exists. You can delete your account at any time:

Inside the app: open Settings → Delete Account. The account is then marked for deletion and permanently removed after 30 days. During the 30-day grace period you can restore it simply by signing in again.
From the web: use the form at /delete-account.
By email: write to info@taskinvo.com from the email address tied to your account.

After the 30-day grace period a scheduled job permanently deletes your Firestore documents, Firebase Storage files, and Firebase Authentication identity. Backups, if any, are rotated within 30 days and contain only encrypted Firebase exports.

7. Your rights (GDPR / CCPA)

Subject to your local laws, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data — you can edit most of it directly inside the app.
Request deletion (see section 6).
Object to or restrict processing.
Receive a portable copy of your data.
Lodge a complaint with your local data protection authority.

For California residents (CCPA): we do not sell personal information.

To exercise any of these rights, email info@taskinvo.com.

8. Children

taskinvo is intended for adults (small-business owners and freelancers). It is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact info@taskinvo.com and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced inside the app or by email. Continued use of the app after the effective date constitutes acceptance of the updated policy.

10. Contact

Data controller: Andrei Ponomarev
Email: info@taskinvo.com