Privacy Policy
Last updated: 10 April 2026
What the app does
QR Invoice lets you photograph or import an invoice, extract the payment details, and generate a SEPA EPC QR code you can scan with your banking app to initiate the payment.
Data we collect
Invoice images
When you scan or import an invoice, the image or PDF is sent to our server solely to extract payment fields (beneficiary name, IBAN, BIC, amount, and payment reference). The image is processed in memory and not stored on our server.
Our server forwards the image to OpenAI (our extraction provider) for processing. OpenAI's data usage policy applies to that processing: openai.com/policies/row-terms-of-use.
Extracted payment data
Extracted fields (beneficiary, IBAN, BIC, amount, reference) are stored locally on your device only. We do not store, sync, or have access to this data on our servers.
Crash reports and diagnostics
We use Sentry to collect crash reports and performance data. This may include device model, OS version, app version, and stack traces. Sentry does not receive invoice images or payment data. Sentry's privacy policy: sentry.io/privacy.
What we do NOT collect
How we use your data
| Data | Purpose | Retention |
|---|---|---|
| Invoice image | Extract payment fields via OpenAI | Not stored; processed in memory only |
| Extracted payment fields | Display QR code and payment details | Device-local only; deleted when you remove the invoice or uninstall the app |
| Crash reports | Fix bugs and improve stability | Per Sentry retention policy (default 90 days) |
Third-party services
| Service | Role | Data received |
|---|---|---|
| OpenAI | Invoice data extraction | Invoice images (transient processing) |
| Sentry | Crash reporting | Device info, stack traces (no payment data) |
Data sharing
We do not sell, rent, or share your data with third parties for marketing or advertising purposes. Data is shared only with the service providers listed above, strictly for the purposes described.
Your rights
Under the GDPR and Slovenian data-protection law (ZVOP-2), you have the right to:
- check_circleAccess the personal data we process about you
- check_circleRectify inaccurate data
- check_circleErase your data ("right to be forgotten")
- check_circleRestrict processing in certain circumstances
- check_circleObject to processing
- check_circleData portability — receive your data in a structured format
- check_circleLodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, www.ip-rs.si)
Since all payment data is stored only on your device, you can exercise most of these rights by simply deleting invoices within the app or uninstalling it.
For any request, contact us at [email protected].
Data security
- shieldAll communication between the app and our server uses HTTPS/TLS encryption
- cloud_offOur server does not persist invoice images or extracted data
- lockOn-device data is stored in the app's sandboxed storage
Children's privacy
The app is not directed at children under 16. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. The updated version will be posted at this URL with a revised "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.