Privacy Policy — Rapid Invoice

Last updated: 2026-07-03 App: Rapid Invoice Platform: Android (Google Play)

1. Summary

Rapid Invoice is a local-first app: your business records — customers, quotes, invoices, photos, line items, settings — stay on your phone or tablet. We do not operate servers for your business data, we do not sync to the cloud, we do not run analytics on you, and we do not share your data with third parties.

This policy explains what the app does with data and what it does not do.

2. Who we are

The data controller for any personal data this app processes is:

• Name / trading name: Merville Group Ltd, trading as Merville Digital
• Contact email: info@rapidinvoice.co.uk
• Registered office / company number: 128 City Road, London, EC1V 2NX, United Kingdom — Company No. 17111858 (registered in England and Wales)

If you have questions about this policy or about your data, contact us at the email above.

3. Data the app uses

3.1 Data stored on your device

The app stores the following only on your phone or tablet:

• Business details you enter (business name, address, contact details, VAT number, CIS registration flag, bank details for invoices, default labels, terms text).
• Customer details (names, addresses, phone numbers, email addresses, notes).
• Quotes, estimates, and invoices (line items, amounts, VAT/CIS values you enter, dates, notes, photos you attach, status, document numbers).
• Saved items (reusable line items in your library).
• Templates you create.
• Generated PDFs when you save or share them (kept in the app's own storage area on your device; copies go wherever you choose when you share or save them).
• Backup files you create (ZIP packages containing the above, plus optional saved PDFs and a transaction CSV). Backup ZIPs are not encrypted — they contain your business records, including any bank details you have entered for invoices, so store them as carefully as you would paper records.

None of this data is sent to our servers or to third parties as part of the app's normal operation, because the app does not use servers for your business data.

3.2 Data not collected by the app

The app does not:

• Create or use user accounts.
• Sync your data to the cloud or to any of our systems.
• Collect location data.
• Access your contacts (the app does not request the contacts permission).
• Use analytics, crash reporting, or telemetry SDKs that send data off the device.
• Send your quotes, invoices, or customer list to us, to analytics companies, or to advertisers.
• Sell or share your data with third parties for advertising or marketing.
• Participate in Android's automatic device-to-cloud backup. The app explicitly opts out (android:allowBackup="false"), so the operating system does not copy the app's database to your Google account. The only way your records leave the device is when you share, export, or back them up yourself.

3.3 Information collected by Google Play

When you install or purchase the app, Google Play (not us) handles billing, account, and basic install information under its own privacy policy at https://policies.google.com/privacy. We may receive aggregated, anonymous install / purchase statistics from Google Play for accounting purposes. We do not receive your name, email, payment details, or any other personally identifying information from Google Play.

4. How your data is used

• On device: so you can create, edit, and manage quotes, estimates, invoices, customers, line items, templates, and saved items.
• PDFs: generated on your device and shared or opened only when you choose (Share PDF or Open PDF). Sharing uses the Android share sheet — the receiving app (Gmail, Drive, etc.) is governed by its own privacy policy, not ours.
• Backup: when you create a backup ZIP, it is built on your device and saved or shared where you choose. We do not receive or store your backup.
• Restore: when you restore from a backup, the app replaces its local data with the contents of the ZIP you select. That happens entirely on your device.

5. Legal basis for processing (UK GDPR)

Because the app stores your data only on your device and we do not operate servers that hold it, we do not "process" personal data about you in the sense that triggers most data-controller obligations. Where any minimal processing does occur (for example, you contact us by email at the address in §2), the legal basis is your consent (by sending us a message) and, where applicable, our legitimate interest in responding to support enquiries.

6. Your control over your data

Because your data lives on your device, you control it directly through the app:

• Access: view all your records in the app at any time.
• Edit and delete: edit or delete customers, quotes, estimates, invoices, line items, saved items, templates, and photos from within the app.
• Export: create a full backup ZIP, including the optional transaction CSV. You decide where to save or share that file.
• Restore: replace all app data with a previous backup ZIP. Restore is a full replace, not a merge.
• Uninstall: if you uninstall the app, the data stored by the app on the device is removed by Android. Backup files you have saved elsewhere (Downloads, Drive, etc.) remain under your control.

Your rights under UK GDPR (right of access, rectification, erasure, portability, objection, restriction) are exercised through the in-app controls above. If you need help, contact us at the address in §2.

7. Permissions

The app is designed to work with minimal Android permissions. It may use:

• Storage / files: to save and read PDFs, backups, and photos you add. The app writes PDFs and backups to its own app-specific storage area; when you share or save a copy, you choose where it goes.
• Camera / photo library: only if you choose to add a logo or document photos. The app does not access your camera or photos without your explicit action.

The app does not request: contacts, location, microphone, SMS, phone state, calendar, body sensors, or network permissions for its core functionality.

8. Children

The app is not directed at children and is intended for adult business users (tradespeople, sole traders, small businesses). We do not knowingly collect personal data from children. If you believe a child has provided data through the app, contact us and we will help you remove it (e.g. by guiding you to delete or restore data on the device).

9. Data retention

We do not retain any of your business data on our systems because we do not receive any of it. Data you save on your device is retained for as long as you keep it there; you can delete it at any time through the app or by uninstalling.

If you email us at the address in §2, we may retain the contents of that email for as long as needed to handle your enquiry and any related follow-up, and then delete it.

10. Changes to this policy

If we change this privacy policy, we will update the "Last updated" date at the top of the document and, where appropriate, notify you via the Play Store listing or in-app. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests:

• Email: info@rapidinvoice.co.uk

Rapid Invoice is a local-first document and record tool. You keep control of your data; we do not collect or process it on our systems.