Privacy Policy

Last updated

This policy explains what IronLeaf Invoice does with information, in plain language. IronLeaf Invoice is published by Apex Capital Holdings LLC, a California limited liability company doing business as IronLeaf. Throughout this policy, "we", "us" and "IronLeaf" mean Apex Capital Holdings LLC, and "you" means the person using the app.

The short version. Almost everything you type into IronLeaf stays on your own devices and in your own iCloud account. Your clients, your line items, your notes, your expenses and your receipt photos are never uploaded to us. We do not sell your information, we do not show you ads, and there is no tracking or analytics software inside the app.

1. What stays on your device and in your own iCloud

The following is never sent to our servers:

This information is stored in the app's private storage on your device. If you are signed in to iCloud, it also syncs through your own iCloud account, so an invoice you write on your iPhone appears on your iPad. That copy lives in your iCloud container, under your Apple ID — we cannot see it and we cannot reach it. Deleting your account from inside the app removes it, along with your job photos. If you use iCloud device backup, Apple may additionally include this data in your encrypted backup, under Apple's terms rather than ours.

2. What is sent to our servers, and why

Four things are transmitted to the IronLeaf backend:

  1. Your Apple user identifier. When you sign in with Apple, Apple gives the app an identifier that is unique to you and to this app. We store it so that your account is yours and nobody else can reach your records.
  2. Your Apple identity token at sign-in. This is a signed token from Apple that proves the sign-in is genuine. The email address associated with your Apple ID is carried inside it. If you chose Apple's Hide My Email option when signing in, we receive Apple's private relay address instead of your real one.
  3. An invoice reference and its amount. When you create a payment link for an invoice, the invoice's reference number and total are sent so the payment page can show your customer the right amount. The line items, the client's name and the description of the work are not sent.
  4. A notification token, if you turn on payment alerts. Apple issues your device a token so we can send it a notification when one of your invoices is paid. It identifies the installation, not you, and it is used for nothing else. Turning notifications off in iOS Settings stops it being used.

3. Payments

Card payments from your customers are processed by Stripe, Inc. Stripe collects your customer's card details directly on its own secure payment page. IronLeaf never sees, handles or stores card numbers, security codes or bank account numbers.

Funds settle into the Stripe account that belongs to you. IronLeaf is not a bank, does not hold funds, and never takes custody of your customers' money. Your use of Stripe is governed by Stripe's own agreements and privacy policy, available at stripe.com/privacy.

Subscriptions to IronLeaf Pro are purchased through Apple. Apple handles the billing and tells the app whether your subscription is active. We do not receive your payment method or billing address from Apple.

4. Tracking and advertising

There is none. IronLeaf Invoice contains no advertising software and no third-party analytics software. We do not track you across other companies' apps or websites, and we have never requested permission to do so. We do not build advertising profiles and we do not sell or share your personal information for cross-context behavioral advertising.

5. How long we keep things

We keep the account information described in section 2 for as long as your account exists. Payment references are kept as long as we are required to for financial recordkeeping. Everything held on your device is kept until you delete it or delete the app.

6. Deleting your account and your data

You can delete your IronLeaf account from inside the app, which removes the account record and its associated identifiers from our servers. Deleting the app from your device removes the on-device records described in section 1. If you would rather we did it, write to support@ironleaf.app from the email address on the account and we will delete it.

Records that Stripe holds about payments you have taken are subject to Stripe's own retention rules and to financial recordkeeping law, and we cannot delete those on your behalf.

7. Your rights in California

If you live in California, the California Consumer Privacy Act as amended by the CPRA gives you the right to know what personal information we have collected about you, to request that we delete it, to request that we correct it, and not to be discriminated against for exercising those rights.

We do not sell personal information and we do not share it for cross-context behavioral advertising. To make a request, email support@ironleaf.app. We may need to confirm that you are the account holder before acting.

8. Your rights elsewhere

If you are in the United Kingdom, the European Economic Area, or another region with comparable privacy law, you may have rights to access, correct, delete, restrict or object to the processing of your personal information, and to receive a copy of it. Email us at the address above and we will honor those rights where they apply to you.

9. Children

IronLeaf Invoice is a business tool intended for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, write to us and we will delete it.

10. Security

Traffic between the app and our servers is encrypted in transit. Access to our systems is restricted. No system is perfectly secure, and we cannot promise that a determined attacker will never succeed, but we do not hold the sensitive material — your client records and your customers' card numbers are not on our servers to begin with.

11. Changes to this policy

If we change this policy we will update the date at the top of this page. If the change is significant we will say so in the app before it takes effect.

12. Contact

Apex Capital Holdings LLC, doing business as IronLeaf
support@ironleaf.app
Company details and mailing address