Privacy
Last updated: 9 July 2026
Your privacy is not a marketing line for us. It is the product. This policy explains, in plain language, what we collect, what we never collect, why we use it, and the rights you always have over your data.
Mr Invoice is a free GST billing and invoice app for small businesses, published by 4AM TECH IO PRIVATE LIMITED ("Mr Invoice", "we", "us", "our"), a company incorporated in India with its registered office at Shop No. 7, Park Plaza, Behind Deepak Hospital, Mira Bhayandar Road, Thane 401105, Maharashtra, India. We are the data controller responsible for the personal data described in this policy. You can reach us any time at Director@4amtech.com.
This policy covers the Mr Invoice mobile app (Android and iOS), our web app, and the backend services that sync and support them. It explains how we handle your personal data and your business records. It applies wherever you use Mr Invoice. Where local law gives you additional rights (for example India's Digital Personal Data Protection Act, the EU and UK GDPR, or other regional laws), those rights also apply.
We collect only what we need to run your account, sync your work across your devices, keep the app secure, and keep it free. In detail:
| Purpose | Data used |
|---|---|
| Create and run your account, sign you in securely | Email, hashed password, phone number, device id |
| Let you create invoices and run your business, and sync it across your devices | Business profile, business content, settings, images |
| Apply correct currency and tax handling | Country and language |
| Render a PDF from an online template | The specific invoice you choose to render |
| Send password-reset codes and important account notices | Email address |
| Keep the app free by showing ads | Advertising id, approximate IP location, ad-interaction data |
| Keep the service secure and prevent abuse | Device id, app version, basic device info |
The legal bases we rely on, where such a framework applies, are: performance of our agreement with you (running the app), your consent (for personalised ads, where offered), and our legitimate interests (security, preventing abuse, and keeping the app free through ads).
Your invoices, customers and suppliers, inventory, payments and expenses (including any receipt images you attach), your app settings, and the images you add (logo, signature, profile photo) are stored on our servers and synced across the devices you sign in on, with a copy cached on your device.
This synced data is encrypted in transit and at rest. It is readable by us so we can run, sync, and support the service. It is not end-to-end encrypted by default.
Want a copy we cannot read? Turn on Cloud Backup in the app. It encrypts your data on your device first, with a key only you hold, before it leaves your phone.
Generating a PDF with an online template sends that invoice to our server so we can render it. Sharing or exporting a PDF or CSV hands that file to the app you pick (for example WhatsApp or email); from that point the receiving app handles it under its own terms. We access your records only to run, sync, and support the service, and we do not sell your data.
Ads are served through Google AdMob to keep the app free. There is no paid tier and no in-app purchase. AdMob may use a device advertising id, your approximate location from your IP address, and ad-interaction data to serve and measure ads.
In Europe, the UK, and wherever else it is required, we show a consent choice before any personalised ads, using Google's User Messaging Platform. You can re-open that choice any time from Settings. If you decline, you still see non-personalised ads. You can also reset or limit your advertising id from your device settings. Google's handling of ad data is described in Google's Privacy Policy.
Your password is never stored in plain text. We keep only a secure one-way hash, so even we cannot read it. We do not use Google, Apple, or any other social sign-in, so no third-party identity provider receives your sign-in details. You may also enable a device biometric or fingerprint lock for the app; that check happens on your device and is never sent to us.
Mr Invoice requests only the permissions it needs, and only when you use the related feature:
You can change or revoke these permissions any time in your device settings.
We keep your account and business data for as long as your account is active, so your work is there whenever you sign in. When you delete your account, we remove your account and its server-side data from our live systems right away (see below). Residual copies in routine encrypted backups are purged as those backups rotate out, and we retain only the minimum records required by law (for example for tax, security, or legal compliance), after which they are removed too.
You are always in control of your data. You can delete your Mr Invoice account and all of its server-side data at any time, in either of these ways:
Deleting your account cannot be undone. If you only want a copy of your data, or to correct it, you can export or edit your profile from Settings instead.
You can access, correct, export, or delete your profile and data from Settings, and you can withdraw consent for personalised ads at any time. Depending on where you live, you may also have the right to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. To exercise any right, use the in-app controls or email Director@4amtech.com. We reply within 7 business days, worldwide, and we do not charge for reasonable requests.
Mr Invoice is a business tool intended for users aged 18 and over. It is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will remove it.
We operate from India and store data on our servers. Some of our providers, such as Google AdMob, operate globally, so your data may be processed in other countries. Wherever your data is processed, this policy and appropriate safeguards apply.
We protect your data with encryption in transit and at rest, one-way password hashing, session controls, and access limited to what is needed to run and support the service. No method of transmission or storage is perfectly secure, but we work to keep your data safe and to respond quickly if an issue arises. For an extra layer, you can enable Cloud Backup for on-device encryption that only you can unlock.
We update this policy when laws change or when we launch new features. When we make a material change, we post the updated policy here with a new "Last updated" date, and it takes effect on posting. Please review it from time to time.
Mr Invoice, Privacy Team, at 4AM TECH IO PRIVATE LIMITED.
Registered office: Shop No. 7, Park Plaza, Behind Deepak Hospital, Mira Bhayandar Road, Thane 401105, Maharashtra, India.
For any privacy question, request, or grievance, email our grievance contact at Director@4amtech.com. We reply within 7 business days, worldwide. This is also the address for data access, correction, export, and deletion requests.