Privacy Policy

Last updated: May 6, 2026

This Privacy Policy describes how AstraDesk® (“the App”) collects, uses, and protects information when you use our mobile application and related services.

Who we are

AstraDesk® is invoicing software: a tool to create, organize, and export professional invoice PDFs. It is not a payment processor—when you add payment links or QR content, those come from your payment or banking provider, and checkout and settlement run on their systems.

The publisher is the developer / legal entity identified in Apple App Store Connect for this app. For privacy requests, contact us using the details on our Support page.

Information we process

Depending on how you use the App, we may process:

• Account data: such as email address and authentication identifiers when you create an account or sign in.
• Sign in with Apple: Apple may share your name or email according to your choices and Apple’s terms.
• Business content you enter: invoice fields you save (such as line items, amounts, bill-to text, tax settings, company profile text, and payment link URLs or payment QR image data you supply from your own payment provider) may be stored with your account in our backend so you can sign in and access your records across sessions. We store this only to show it back to you in the App and to embed it in PDFs you generate locally—we do not process payments or access your provider’s transaction records.
• Generated PDF invoices: when you export or share a PDF, it is produced on your device. We do not upload or retain the PDF file itself on our servers.
• Branding images (device-only): if you choose images for a company logo, payment QR, signature, or stamp for PDFs, those files are saved locally on your device by the App. We do not store those image files in our cloud databases.
• Payments: the App does not process charges, capture cards, or move money. If you use Stripe, PayPal, bank apps, or similar, those companies handle payments under their own terms when your clients follow links or codes you added. We may store the link or payload you entered so it appears on your invoice PDF—we do not receive visibility into authorization, refunds, or settlement on behalf of those providers.

Technical & device data

• Hosting / backend: the App may use cloud infrastructure (such as authentication and sync services including Supabase or similar APIs) so your account data and encrypted traffic can operate.
• Biometrics: biometric unlock (Face ID / Touch ID) uses device APIs; biometric data stays on your device and is not sent to our servers.
• Camera / scanner: used when you scan QR codes or barcodes where supported; scanned content is processed to support invoicing workflows.
• Photos / library: used when you choose a logo image from your library where permitted by the OS.
• Diagnostics: we may rely on vendors (including Apple’s systems) that collect limited technical or analytics data governed by Apple’s ecosystem policies.

How we use information

We use information to authenticate you, synchronize your invoice records (text and numbers you entered) across devices where applicable, help you lay out and export PDFs on your device, send optional notifications configured in the App, comply with law, secure the App, and improve reliability. We do not use your information to operate payment processing for your customers—that is entirely between you and your payment providers.

Legal bases (EEA/UK readers)

Where applicable: performance of contract, legitimate interests (security and service improvement), and consent where required (e.g. certain notices or cookies on web).

Retention

We do not use your information for advertising or profiling decisions. We retain only what is needed to run the App while you use it (for example, sign-in and documents you create in the App). When you delete your account or delete your content, we remove it from our active systems; we do not keep separate marketing or analytics copies of your personal data. Copies in provider backups may disappear on a short automated schedule and are not used for any purpose after deletion.

Sharing

We do not sell your personal information and we do not share it with third parties for their own marketing or unrelated products. Information is processed only by infrastructure strictly necessary to operate authentication and storage for the App (for example, our cloud and sign-in providers acting as processors under our instructions). We do not intentionally disclose your personal information except where required by law or to protect rights and safety.

Security

We use commercially reasonable safeguards, including HTTPS for network traffic where applicable and industry-standard protections on infrastructure. No method of transmission over the Internet is perfectly secure.

International transfers

If you use providers or infrastructure outside your country (for example EU data processed in US regions), transfers may rely on contractual safeguards aligned with GDPR where applicable.

Your choices & rights

• Access, correction, deletion, portability, restriction, or objection may be available depending on your jurisdiction — contact Support.
• iOS notifications can be adjusted in Settings or App settings where available.

Children

AstraDesk® is intended for adults running a business. It is not directed at children under 13 (or applicable age).

Changes

We may update this policy. Updates will appear on this page with a revised date. Important changes may additionally be surfaced in-app or by email.

Contact

Questions about this policy can be addressed through the contacts listed on our Support page.

Use this page’s HTTPS URL in App Store Connect → Privacy Policy.