Invora — Privacy Policy

1 Introduction

Welcome to Invora, a smart inventory, sales, and business management application. This Privacy Policy explains how we collect, use, store, and protect your information when you use the app. By using the app, you agree to this policy. Contact us at slbshalikalahiru@gmail.com with any questions.

2 Information We Collect

2.1 Information You Provide Directly

• Business Profile: Name, address, contact number, logo, branch details.
• Products & Inventory: Names, SKUs, prices, stock quantities, categories, supplier info.
• Sales & Transactions: Transaction amounts, items sold, payment methods, customer details.
• Customer & Supplier Records: Names, contact details, history.
• Staff Accounts: Usernames, PINs, assigned roles and permissions.
• Tax & Receipt Settings: Tax rates, receipt header/footer, paper size preferences.

2.2 Information Collected Automatically

• Firebase Auth: Processes Google Sign-In credentials (email, profile info) for secure login.
• Firebase Firestore: Business data synced to cloud only when you initiate it.
• Firebase Crashlytics: Crash reports and error logs (device model, OS version, stack traces). No personal business data included.
• Firebase Analytics: Anonymized usage data (screen visits, key events like "sale completed") to improve the app.
• Firebase Remote Config: Manages app version requirements for mandatory updates.
• Google AdMob: May collect device advertising ID and usage data for ads. See Google's Privacy Policy.

2.3 Device Permissions

3 How We Use Your Information

• Operate the app and display your business data.
• Enable Google Drive cloud backup at your request.
• Report crashes automatically to fix bugs and improve stability.
• Understand anonymous usage patterns to improve features.
• Enforce app version requirements via Remote Config.
• Display advertisements to keep the app available at no cost.

4 Data Storage

Local Storage

All core business data is stored locally on your device in a secure local database (Hive). This data belongs entirely to you.

Cloud Storage (Optional)

• Google Drive: Your personal Google Drive — not accessible to us.
• Firebase Firestore: Synced only when you choose to activate it.

5 Data Retention

• Local data: Until you uninstall the app or manually delete it.
• Firestore data: Until you delete it from the app or request removal.
• Crashlytics data: 90 days per Firebase's default policy.
• Analytics data: Aggregated, anonymized form only.

6 Third-Party Services

7 Children's Privacy

Invora is a business management app intended for adults. We do not knowingly collect personal information from children under 13. Contact us immediately if you believe a child has provided information through the app.

8 Security

• Local data is protected by your device's screen lock and encryption.
• Data sent to Firebase is secured via TLS/HTTPS encryption.
• Google Drive backup is protected by your Google account credentials.

9 Your Rights

• Access: Your data is always visible within the app.
• Delete: Uninstall the app to remove local data. Email us for cloud data removal.
• Opt-out of Analytics: Disable in your device settings.
• Request info: slbshalikalahiru@gmail.com

10 Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via in-app notification or the Google Play Store update description. The "Last Updated" date at the top reflects the most recent revision.

11 Contact Us

S.L.B. Shalikal Ahiru
📧 slbshalikalahiru@gmail.com