InvoiceRunner privacy policy

Last updated: 27 September 2026 · Version 1.0 · Effective 27 September 2026

1. Who we are

The responsible party for personal information processed through the InvoiceRunner app is:

Information Officer: support@jobrunner.co.za

This policy explains how we process personal information under the Protection of Personal Information Act, 2013 (POPIA).

2. What stays on your phone

InvoiceRunner is built so that your business records stay with you. These are stored only on your phone and are never sent to us:

• your invoices, quotations, receipts and credit notes;
• your customers' names, contact details and addresses;
• the items and prices you save;
• your banking details;
• your document settings.

You can export all of this at any time (Settings → Export all data).

3. What we collect

When you sign in with Google and set up your business, we collect:

• Account: your Google account email address and a user id from our sign-in service. We do not receive your Google password.
• Business profile: business name, your name, trade, team size, phone number, email address, business address (address lines, town, province, postal code), whether you are registered for VAT, and your VAT number.
• Numbering: the last number used for each document type (for example INV-0007), so your numbers never repeat if you reinstall.
• Usage counters: the number of documents you have issued, the app version and the date you last opened the app. We do not collect what the documents contain.
• Marketing choice: whether you ticked the box for marketing messages when you set up your business (it is never ticked for you), any later change you make in Settings, the wording you saw, and when.
• Pro launch notice: if you tap "Email me when Pro is ready", that choice, the wording you saw and when (and, if you tap "Remove me", that too).

We do not collect your location, contacts, photos or device advertising ID. The app contains no advertising, analytics or crash-reporting tools.

4. Why we use it

• to give you the app: sign-in, your business details on your documents, and numbering that never repeats (contract and legitimate interest);
• to keep the service secure and working, and to understand in aggregate how the app is used (legitimate interest);
• to send you free tips on getting paid faster by email or WhatsApp, only if you ticked the box (consent). You can change this at any time in Settings → Marketing messages, or by replying to any message.
• to email you once when InvoiceRunner Pro launches, only if you asked us to (consent). That is the only email this choice allows. You can take it back in Settings → InvoiceRunner Pro → Remove me.

5. Who we share it with

We do not sell your personal information. We use service providers who process it for us under contract:

• Supabase (database and sign-in hosting), with data stored in the United Kingdom (London region);
• Google (Sign in with Google).

6. Cross-border transfer

Your profile is stored in the United Kingdom. We transfer it under section 72 of POPIA because the UK has laws that give adequate protection to personal information, and because the transfer is needed to provide the service you asked for. We also use binding agreements with our providers.

7. Android backup

If Android backup is on for your phone, Android may back up the app's on-phone data (documents, customers, items, banking and settings) to your own Google account. We cannot access that backup. The app's sign-in session is excluded from backup. You can turn backup off in your phone's settings.

8. How long we keep it

We keep your profile, numbering and usage counters while you have an account. Consent records are kept while you have an account, as proof of your choice. When you delete your account, all of these are deleted (see section 10). Backups of our database are overwritten within 30 days.

9. Security

Data is encrypted in transit (HTTPS). Access to each user's cloud records is restricted to that user by database rules. Your on-phone data is protected by your phone's own security.

10. Deleting your account

• In the app: Settings → Delete account. This deletes your cloud profile, consent history and account straight away, and erases the app's data from your phone.
• Without the app: email support@jobrunner.co.za from your account's email address with the subject "Delete my InvoiceRunner account". We complete it within 30 days. See jobrunner.co.za/invoicerunner/delete-account.

11. Your rights

Under POPIA you may ask to access, correct or delete your personal information, object to processing, and withdraw consent to marketing. Contact the Information Officer at support@jobrunner.co.za. You may also complain to the Information Regulator (South Africa): inforegulator.org.za, complaints.IR@inforegulator.org.za.

12. Children

InvoiceRunner is for businesses and is not meant for anyone under 18.

13. Changes

We will post any changes here and update the version and date. If a change affects how we use your information, we will tell you in the app.