Privacy Policy

The short version

Invoice and quote data, your business profile, logo, photos and signatures are stored locally by the app. You do not need a Billuxe account. We receive pseudonymous usage and crash telemetry, which you can switch off, and — only if you choose to use them — optional cloud sync and hosted invoice links. Billuxe has no ads and does not sell data.

Billuxe is not yet on the App Store or Google Play, and the current app does not create live user accounts. This policy describes the app as designed and the pre-release services already deployed for it.

What stays on your device

Invoices, quotes, customers, catalog items, business details, payment records, preferences, logos, job photos and drawn signatures are stored in the app's local storage on your phone or tablet. The app is designed so that creating an invoice, calculating totals and generating a PDF does not require an account or an internet connection.

If you delete the app or clear its data without making a backup, that local data is gone. Export a ZIP backup if you want a copy you control.

Anonymous usage and crash telemetry

Billuxe sends a limited set of product events to telemetry.cyberboon.app. On first launch the app creates a random install ID. It is not your name, email address or account, and it rotates every 90 days. A random session ID is created for each session. We treat this as pseudonymous usage data, not as an anonymous guarantee.

Events come from a fixed allowlist and cover things such as app opens, screen views, paywall views and outcomes, and whether key features were used. Each event may include the install ID, session ID, a sequence number, a timestamp, the app version, operating system and version, device locale, and a coarse country derived by Cloudflare from the network request. The telemetry database records the country, not your IP address.

Crash reports contain the error message and a stack trace, capped in length, plus the app version and platform. They are used to find and fix faults. Telemetry is designed not to include invoice contents, customer names, amounts or your email address.

You are in control. Telemetry is on by default so we can see whether the app is healthy. You can turn it off in the app's settings. When it is off, the app clears its pending queue and sends no further events or crash reports. The server can also switch telemetry off remotely if needed.

Raw telemetry is kept for a short period — currently about 10 days — and is then aggregated or deleted. Aggregated counts that cannot identify an installation may be kept longer to understand reliability.

Optional cloud sync and media storage

Cloud sync is an optional, planned Premium feature. It is off by default. When it is enabled, invoice and customer records sync through our invoice-api service, and attached media such as photos and signatures is stored in a private Cloudflare R2 bucket. Sync is designed for files up to 5 MB in JPEG or PNG format.

Cloud data is not end-to-end encrypted. CyberBoon and our infrastructure provider, Cloudflare, can access it in order to operate, secure and support the service. A copy of your data remains on your device, and sync only runs when you sign in and turn it on. Apple and Google sign-in are not live yet, so cloud sync is not currently available.

Optional hosted invoice links

If you create a hosted invoice link, our invoice-api stores a summary so your client can open the invoice in a browser. That summary can include the business name, customer name, invoice number, amount, currency, due date, status, locale, a payment link you pasted, a random link token, a view count and the time of the last view. The page is marked noindex and does not process payments.

Links expire after 30 days by default and can be set for up to 90 days. Anyone who has the link can view the summary, so share it only with the intended recipient. Email us if you need a link removed sooner.

Accounts and sign-in

Billuxe does not require an account, and accounts are not live in the current app. When optional sync becomes available, you will be able to sign in with Apple or Google. The account is keyed to the provider's stable subject identifier; we may receive and store the email address the provider shares, and a 30-day session token is used to keep you signed in. We do not receive your Apple or Google password.

You will be able to delete a cloud account in the app, or ask us to delete it by email. See Delete your account for the exact steps and what is removed.

What we do not do

• No advertising SDKs, advertising identifier or cross-app tracking.
• No sale, rent or trade of your data.
• No collection of invoice contents, customer names or amounts in telemetry.
• No account or email sign-up to create an invoice.
• No access to your photo library beyond the images you explicitly pick.

This website

This site sets no cookies and runs no analytics or advertising scripts. It loads fonts, styles, icons and images from its own files only; there are no third-party CDNs or tracking pixels. Our hosting provider may keep standard security and access logs, such as IP address and user agent, to run and protect the site.

Service providers and international processing

We use Cloudflare for website hosting and for the Workers, D1 databases and R2 storage behind telemetry, invoice links and optional sync. Email you send to support is handled by our email provider and by us. If you later buy Premium through the App Store or Google Play, the store processes the purchase as merchant of record under its own privacy policy.

These providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers. We choose providers that support common contractual data-protection terms.

Retention and deletion

• Local app data: kept until you delete it in the app or remove the app.
• Telemetry: raw records about 10 days, then aggregated or deleted; the install ID rotates every 90 days.
• Hosted invoice links: 30 days by default, up to 90 days if you choose a longer expiry.
• Cloud account and sync data: kept while the account exists; removed when you delete the account, with backup copies purged within 30 days.
• Support email: kept until the conversation is resolved and you ask us to delete it, unless we must keep it for a legal or security reason.
• Hosting logs: kept for the short period set by our hosting provider's security configuration.

Your choices and rights

You can turn telemetry off at any time in the app, delete local data by removing it in the app, and delete a cloud account in the app or by email. Depending on where you live, you may also have the right to access, correct, export, restrict or object to the processing of your personal data, and to lodge a complaint with a supervisory authority.

Because most Billuxe data never leaves your device, we cannot access or correct it for you. Write to support@cyberboon.app for anything that is on our servers, and we will help.

Children

Billuxe is a business tool and is not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Material changes will be described on this page before they take effect.