Privacy Policy

This Privacy Policy describes how Benjamin Arnedo (ABN 85178970954) ("Pixel Forge", "we", "us", or "our") handles information when you use Invoicer (the "App"), available on the Apple App Store.

Invoicer has no account and no sign-in. There is no Pixel Forge server behind it. Everything you create in the App is stored on your device, and — if you are signed into iCloud — in your own private iCloud. We do not receive it, and we cannot read it.

We do not run analytics SDKs, we do not use advertising identifiers, we do not track you across other apps or websites, and we have no data to sell.

By downloading or using the App, you agree to the practices described in this policy.

1. Who We Are

• Operator: Benjamin Arnedo, ABN 85178970954
• Trading as: Pixel Forge
• App: Invoicer
• Privacy contact: privacy@thepixelforge.com.au
• Postal address: 264 City Walk, Canberra ACT 2601

2. What Data The App Holds

The App holds the following on your device. None of it is sent to us.

2.1 Profile and Business Data

• Business name, ABN, ACN
• Business address, phone number
• Logo and signature image

Used to render your business identity on every invoice and quote you create.

2.2 Banking Details

• BSB and account number
• Account name
• PayID

Used to display payment instructions on invoices you issue to your clients. See Section 9 for how these are encrypted.

2.3 Client Records

Information you choose to add about your clients:

• Client and contact person names
• Email addresses, phone numbers, postal addresses
• ABNs
• Notes you write about them

See Section 6 for an important explanation of how client records work now that the App has no server.

2.4 Invoice and Quote Content

• Line items, rates, quantities, totals
• Dates and statuses
• Notes and attached file references

This is the working content of the App.

2.5 Diagnostic Logs

Invoicer uses Apple's OSLog system to record technical events on your device (operation IDs, error codes, performance markers). These logs:

• Stay on your device
• Are never transmitted anywhere by the App
• Only leave the device if you voluntarily share a sysdiagnose file with us for support, or with Apple via Feedback Assistant

2.6 What The App Does Not Collect

For clarity, Invoicer does not collect or use:

• Any account details — there is no account, no email address, and no password
• Analytics or telemetry SDKs (no Firebase, no Google Analytics, no Mixpanel, no Amplitude)
• Advertising identifiers (IDFA)
• Location data
• Contacts, photos, microphone, or camera (unless you explicitly upload a logo or signature image)
• Any data used to track you across apps or websites

3. Where Your Data Is Stored

3.1 On Your Device

Your business profile, clients, invoices, and quotes are stored in a SwiftData database on your device. The App works fully offline because that device copy is the real copy.

3.2 In Your Own Private iCloud

If you are signed into iCloud on your device and have iCloud enabled for Invoicer, iOS keeps a copy of that database in your private CloudKit database — the part of iCloud tied to your Apple Account. That copy is governed by your iCloud settings and by Apple's Privacy Policy.

Apple is the only party other than you that ever holds this data. Pixel Forge operates no server, has no account system, and has no technical means of accessing your iCloud data.

If you are not signed into iCloud, or you turn iCloud off for Invoicer, the data stays only on the device.

3.3 Apple Services

Your App Store account and any in-app purchase receipts are handled by Apple, governed by Apple's Privacy Policy.

3.4 Overseas Disclosure (Australian Privacy Principle 8)

We do not collect or disclose your personal information, so we make no overseas disclosure of it. Where you have iCloud enabled, the sync copy is held by Apple under your own Apple Account and Apple's terms, not under any arrangement between you and us.

4. How Your Data Is Used

The App uses the data on your device only to:

• Provide the invoicing service (display, edit, PDF export, share)
• Render your business and banking details on the invoices and quotes you create
• Keep your own iCloud copy up to date, if you have iCloud enabled

Because we never receive your data, we cannot and do not:

• Sell, rent, or share it with third parties for marketing
• Provide it to advertising networks or data brokers
• Use it to train AI or machine learning models
• Profile you for any commercial purpose

5. Third Parties

Invoicer has no sub-processors, because we process nothing. The only other party involved in the App is Apple.

If this ever changes — for example, if we add a service that does require a server — we will update this policy and notify users of the change before it takes effect.

6. Client Records: You Are the Controller

This is important if you store client information in the App.

When you add a client to Invoicer, you are the data controller for that person's information. You decide what to collect, what to store, and how long to keep it. Pixel Forge is not a processor of it: the record is written to your device and, if you use iCloud, to your own iCloud. We never receive it.

You are responsible for:

• Having a lawful basis to store your clients' contact details (typically legitimate business interest or contract performance under GDPR, or a permitted purpose under the APPs)
• Responding to any access, correction, or deletion requests your clients make about their data
• Complying with any privacy laws that apply to you as a business

If a client of yours contacts us about their data, we will refer them to you, because we do not hold it and cannot act on it.

7. Data Retention

Retention is entirely under your control. We hold nothing, so there is nothing on our side to retain or delete.

• On the device: your records stay until you remove them. Settings → Erase All Data wipes everything the App holds. Deleting the App removes its on-device data.
• In your iCloud: copies are removed through your own iCloud settings (Settings → your name → iCloud → Manage Account Storage), or by turning iCloud off for Invoicer. Apple's own retention timing for deleted iCloud data applies.
• Your exports: any JSON backups or PDFs you generate are files you own, stored wherever you saved them.

Export your data before you erase it. Once it is gone from your device and your iCloud, we cannot recover it, because we never had a copy.

8. Your Privacy Rights

You have rights under the Australian Privacy Principles (APPs), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), where applicable.

In practice, we hold no personal information about you, so there is nothing for us to give you, correct, or erase. You exercise these rights directly in the App:

• Access: the in-app JSON export gives you a machine-readable copy of everything the App holds.
• Correction: edit any of your data directly in the App at any time.
• Deletion: Settings → Erase All Data, or delete the App. iCloud copies are removed through your iCloud settings (Section 7).
• Portability: the JSON export is your portable copy.
• Object or restrict: there is no processing by us to object to or restrict.

We do not sell or share personal information for cross-context behavioural advertising under the CCPA/CPRA.

If you want to ask us anything about this policy, email privacy@thepixelforge.com.au. We respond within 30 days.

Complaints

• Australia: Office of the Australian Information Commissioner (OAIC), oaic.gov.au
• EEA / UK: your local data protection authority

9. Security

• Banking details: bank account numbers are encrypted with AES-GCM (Apple CryptoKit) before they are stored, so the number is never written in the clear — not to the device database, and not to your iCloud copy. The encryption key is held in your device Keychain (WhenUnlockedThisDeviceOnly) and never leaves that device, which means the encrypted number in your iCloud copy is unreadable to anyone but the device that wrote it.
• Device protection: the rest of the App's data is protected by iOS Data Protection, which is tied to your device passcode.
• iCloud: if you use iCloud, that copy is protected by Apple's iCloud security, including Advanced Data Protection if you have it enabled on your Apple Account.
• No server surface: there is no login, no API of ours, and no database of ours, so there is no account of yours to breach.

No method of storage is completely secure. Keep your device locked, use a passcode, and keep iOS updated.

10. App Tracking Transparency

Invoicer does not track you across other apps or websites owned by other companies, and we do not request permission to do so under Apple's App Tracking Transparency framework.

11. App Store Privacy Disclosures

Invoicer's App Store privacy label is Data Not Collected. The App transmits no data to us, and Apple's label reflects that. Any future change to this policy will be reflected in the App Store listing.

12. Children's Privacy

Invoicer is a business tool intended for adult freelancers and businesses. It is not directed to children under 13 (US COPPA) or under 16 (GDPR). We do not knowingly collect personal information from children — we do not collect personal information from anyone. If you believe a child has provided us with information, contact privacy@thepixelforge.com.au.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last updated" date at the top
• Display an in-app notice for material changes

We have no email address for you, so we cannot notify you by email. Continued use of the App after a change means you accept the updated policy. If you do not accept it, you can erase your data and delete the App at any time.

14. Contact Us

For any privacy-related questions, requests, or complaints:

• Email: privacy@thepixelforge.com.au
• Postal: 264 City Walk, Canberra ACT 2601
• Developer (App Store): Pixel Forge