Love Invoicing Ltd respects your privacy and is committed to protecting personal data in accordance with applicable data protection laws.
This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you use our platform.
1. Who we are
Love Invoicing Ltd
Company Number: 16938438
Registered in England and Wales
Email: contact@loveinvoicing.com
For the purposes of data protection laws, we act as:
- Data Controller for account and platform usage data
- Data Processor for customer data that you upload to the platform
2. Scope of this policy
This policy applies to:
- Website visitors
- Account holders
- Users of the Love Invoicing application
- Business customers using our SaaS platform
3. Personal data we collect
3.1 Account information
- Name
- Email address
- Password (encrypted)
- Business name
- Billing details
- Subscription information
3.2 Business & customer data (uploaded by you)
- Customer names, addresses, contact details
- Invoice details, quotes, line items, tax information, notes
- Media files (photos, voice notes)
You remain the controller of this data.
3.3 Transaction & usage data
- Log files, IP address, device information, browser type
- App activity, feature usage
3.4 Location data
The app collects location data in two modes depending on the feature being used:
- Location — When In Use: GPS coordinates are captured on-demand when you record job evidence or delivery records. The coordinates are stamped directly onto the relevant record at the moment of capture. This permission is only active while the app is open and in use.
- Location — Background / Always On: Continuous GPS tracking is used to track field workers and drivers while they are on duty. This permission allows tracking to continue even when the app is running in the background or the device screen is locked, for the duration of an active work session.
Location data is used solely for operational purposes within your business account. We do not share precise location data with third parties for advertising or profiling purposes. You can manage location permissions at any time through your device settings (iOS: Settings → Privacy & Security → Location Services; Android: Settings → Apps → Love Invoicing → Permissions). Revoking location access will disable GPS stamping and worker tracking features.
3.5 Mobile application permissions
In addition to location (see 3.4), our mobile app may request the following device permissions. Each is used only for the feature described, and only after you grant consent through the operating system prompt. You can revoke any permission at any time in your device settings.
- Camera — to capture job evidence, delivery proof, and customer media. We store the photos you take.
- Photos / storage — to attach existing images and to save or share generated PDF documents.
- Push notifications — to deliver job, delivery, invoice, and account alerts. We store your device push token.
- Biometrics (Face ID / fingerprint) — to secure re-entry into the app. The biometric match is handled by your operating system and is never transmitted to or stored by us.
Microphone and Bluetooth permissions may be declared by underlying camera and payment frameworks but are not used to record audio or collect Bluetooth data.
3.6 Device & diagnostic data
- Device identifiers and push notification tokens
- Crash logs and stability diagnostics
- App update metadata
3.7 Payment data
We do not store or process card information. Payments are processed directly by Stripe.
3.8 Cookies & tracking
We may use authentication cookies, functional cookies, and analytics tools. Where required by law, we request consent.
4. Legal basis for processing (UK/EU GDPR)
We process personal data on the following lawful bases:
- Performance of a contract
- Legitimate interests (platform security, service improvement)
- Legal obligation
- Consent (where required, including for background location tracking)
5. How we use your data
We use data to:
- Provide and maintain the platform
- Process subscriptions
- Deliver invoices and communications
- Stamp GPS coordinates on job evidence and delivery records
- Track field workers and drivers during active work sessions
- Provide customer support
- Improve product functionality
- Ensure platform security
- Comply with legal obligations
We do not sell personal data.
6. International data transfers
Your data may be processed in countries outside your country of residence.
Where required, we rely on:
- UK International Data Transfer Agreements (IDTA)
- EU Standard Contractual Clauses
- Adequacy decisions
- Contractual safeguards
7. Data retention
We retain personal data:
- For the duration of your account
- For up to 30 days after account deletion (unless legally required longer)
- As required for legal, tax, or compliance purposes
8. Data security
We implement appropriate technical and organisational measures, including:
- TLS encryption in transit
- AES-256 encryption at rest
- Role-based access controls
- Row Level Security (RLS)
- Secure infrastructure providers
9. Your privacy rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Withdraw consent (including consent to background location tracking)
- Data portability
- Lodge a complaint with a supervisory authority
UK users may complain to the Information Commissioner’s Office (ICO). We do not sell personal information.
To exercise rights, contact: contact@loveinvoicing.com
10. Children’s data
Love Invoicing is not intended for individuals under 18. We do not knowingly collect children’s personal data.
11. Third-party service providers
We may use trusted third-party processors including:
- Stripe (payment processing)
- Supabase (database hosting)
- Resend (email delivery)
- SendGrid (transactional email)
- Firebase Cloud Messaging (push notification delivery — device push token)
- Firebase Crashlytics (crash and stability diagnostics — crash logs, device info)
- Expo / EAS (over-the-air app updates — update metadata)
- MapLibre (map rendering for delivery tracking — map tile requests)
These providers process data under contractual safeguards.
12. Your responsibilities as a business user
If you upload customer data, you are responsible for:
- Obtaining lawful basis to process that data
- Providing privacy notices to your customers, including informing them that their location or job-site data may be recorded
- Complying with local data protection laws
Love Invoicing acts as your data processor for such information.
13. Data deletion
You may:
- Delete individual records in-app
- Request full account deletion
Deletion requests are permanent and irreversible.
14. Changes to this policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification. Continued use of the Service constitutes acceptance.
15. Contact
For privacy-related inquiries:
Email: contact@loveinvoicing.com