Your records.
Your choices.

Business records stay on your device

Business profiles, customer details, documents, payments, logos and audit history are stored in app-private local storage. This version does not upload your workspace to Rimays. Cloud synchronization, MyInvois submission and online payment verification are unavailable. Logo cropping and plain-background removal run locally.

Purchases

Google Play processes purchases. Rimays Invoice verifies signed purchase proof and stores it and token hashes locally to deliver purchases once. The app does not receive your payment card details. Full Version ownership can be restored with the purchasing Google account. Additional document purchases are consumed after delivery; Google Play does not restore consumed credits after app data is deleted. Purchased document slots have no expiry.

Refund checks

To reconcile refunded or revoked additional-document purchases, the Android app sends only SHA-256 hashes of its previously verified purchase tokens to Rimays at invoice.rimays.com over HTTPS. Our server reads voided purchases from Google Play and retains token hashes and reconciliation timestamps to prevent a refunded purchase from being credited again. Raw Google purchase tokens are processed transiently to calculate these hashes; they are not stored or logged. Customer names, business records, PDF contents and card details are not included in these requests. Saved documents and payment receipts remain available after a refund.

We retain refund hashes and check times while needed to prevent repeat delivery. The service also uses connection IP addresses for abuse prevention. Its private, bounded rate-limit state contains salted address hashes and timestamps rather than raw addresses; expired entries are pruned during later requests. Hosting providers may separately process ordinary connection and security logs. Contact billing@rimays.com with privacy requests.

Advertising and consent

The free version uses Google AdMob. Where required, Google’s consent flow is shown before requesting ads. Ads are restricted to Home and Documents browsing. We request non-personalized ads, disable publisher first-party ID and advertising personalization in the SDK, and remove Android advertising-ID, Topics and attribution permissions. These settings do not prevent all data processing: Google may process IP addresses (including an approximate location inferred from an IP address), device information, ad interactions and diagnostics for delivery, measurement, fraud prevention and legal compliance. Customer records and PDF contents are not supplied in ad requests.

Where available, open Settings → Advertising privacy options to update consent choices. Buying the Full Version removes ads. Read Google’s advertising privacy information and Google’s privacy policy.

Permissions, security and sharing

The app uses Android’s system photo picker for the image you choose; no broad photo or file access permission is requested. Internet/network permissions support Google Play, refund checks, consent and advertising. Optional device authentication uses Android’s system prompt; the app does not receive biometric templates. Enabling the lock also blocks app screenshots.

Exported data and PDFs are sent only to destinations you select through Android’s share sheet. Review the destination and contents before sharing. Other apps handle shared copies under their own policies. JSON exports omit reusable signed Full Version purchase proof but include your financial records and purchase-credit token hashes.

Retention and deletion

Records remain locally until you remove the app or its data. Automatic cloud backup and device transfer of the workspace are disabled. Keep secure copies of important PDFs and readable data exports. Export is not a tested full-workspace import/recovery service. Deleting app data may permanently remove documents and consumed document credits. Copies you previously shared remain with their recipients; Google retains purchase/ad information under its policies. No Rimays app account is required or created.

Contact support

Email billing@rimays.com for help or privacy questions. If you contact support, we receive the message and information you choose to include and use it to respond. Remove customer records and sensitive payment information unless essential. Do not send payment-card details or passwords.

This support website

These static support pages contain no embedded advertising or analytics scripts. Hosting providers may process ordinary request and security logs, including IP address and browser information, to deliver and protect the website. These website requests are separate from the business records stored locally in the Android app.

Policy updates

Material changes will be reflected in the policy date and the app’s disclosures. This policy describes the Android app; the existing web invoicing service and iOS app have separate policies.