Privacy Policy

1. Data Controller

Mag. Roland König
Viktoriaweg 6
2540 Bad Vöslau
Email: support@timeinvoicer.at
Phone: 06602007002

2. General Information

The protection of your personal data is important to us. We process data exclusively within the framework of applicable legal provisions — in particular the GDPR, the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

3. Purpose of the App

TimeInvoicer is used to manage appointments and clients, and to prepare service and invoice information. The app is offered for Android (Google Play) and for iOS (Apple App Store). Both versions process your data locally on the device in the same way; any differences are indicated below.

4. What Data Is Processed

• Contact data from your address book (e.g. name, phone number), when you link contacts.
• Calendar data (e.g. appointments, time periods), when you use calendar features.
• Content entered by you (e.g. notes, services, invoice information).
• Details of a booked plan (Starter, Plus, Premium) — solely in the form of the purchase confirmation from your app store, see section 8.

5. Permissions

Android:

• Contacts (READ_CONTACTS / WRITE_CONTACTS)
• Calendar (READ_CALENDAR / WRITE_CALENDAR)

iOS:

• Contacts (Contacts, NSContactsUsageDescription)
• Calendar (EventKit, NSCalendarsUsageDescription)

These permissions are voluntary and are only requested the first time you use the respective feature. Without granting individual permissions, the corresponding features may not be fully available. You can revoke any permission at any time in your device's system settings.

6. Legal Basis

• Art. 6(1)(b) GDPR (use of the app's features)
• Art. 6(1)(a) GDPR (consent, in particular for permissions)
• Art. 6(1)(f) GDPR (legitimate interest in stable, secure app operation)

7. Storage and Recipients

Data is generally processed and stored locally on your device. No transfer to third parties or to the provider's servers takes place, unless stated otherwise in this policy.

Your data is protected by device encryption — active by default on Android from version 10 onward, and via the device's file-system encryption on iOS. The app itself does not transmit any client or health data over the internet. All invoices, contacts and appointments remain exclusively on your device.

Recipients of data are exclusively:

• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — as the operator of Google Play, for processing purchases and subscriptions on Android, see section 8.
• Apple Distribution International Ltd. (Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) — as the operator of the App Store, for processing purchases and subscriptions on iOS, see section 8.
• Recipients that you determine yourself — for example, when you send an invoice as a PDF by email or save it to a cloud service of your choice.

No other transfer to third parties takes place. We, as the provider, do not have access to the content stored in the app.

8. Purchase and Subscription Data

TimeInvoicer is offered in a free version (Starter) as well as in paid plans (Plus, Premium). Purchases and subscriptions are not processed by us, but exclusively through the respective app store:

• Android: via Google Play Billing (Google Ireland Limited)
• iOS: via Apple In-App Purchase / StoreKit (Apple Distribution International Ltd.)

We do not receive or store any payment data. Your credit card, bank or billing details are processed exclusively by Google or Apple; their own privacy policies apply to this processing. We do not see your payment method, your name or your address.

The app only receives a purchase confirmation from the respective store (product identifier, purchase time, validity, and a store-side transaction identifier). This information is evaluated exclusively locally on your device in order to unlock the booked scope of features. No user account exists with us.

You manage cancellation, renewal and refunds directly in your app store account (Google Play → Subscriptions, or iOS Settings → Apple ID → Subscriptions).

Legal basis: Art. 6(1)(b) GDPR (performance of the usage agreement).

9. This Website

The following information concerns only visits to timeinvoicer.com, not the app.

9.1 Server Log Files

When you access the website, the hosting provider automatically processes access data (IP address, date and time, the page accessed, the amount of data transferred, browser type and operating system). This data is required for secure and stable operation. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

9.2 Analytics and Advertising Measurement — only with your consent

This website uses services provided by Google Ireland Limited:

• Google Analytics 4 — audience measurement (identifier G-S029FJS45K)
• Google Ads Conversion Tracking — measurement of advertising success (identifier AW-1029144570)
• Google Tag Manager — technical delivery of the services listed above (identifier GTM-WPX35XFV)

These services are only loaded after your explicit consent. On your first visit, a notice banner appears with the options "Necessary only" and "Allow analytics". Without consent, analytics and advertising storage are technically disabled (Google Consent Mode v2, default setting denied).

If you give consent, cookies or comparable identifiers are set and pseudonymous usage data (including a shortened IP address, pages visited, time spent, and device type) is transmitted to Google. If you arrive via a Google ad, the ad's click identifier (gclid, gbraid or wbraid) is additionally stored in your browser's local storage, so that a later download can be attributed to that same ad.

In doing so, data may be transferred to Google servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses are additionally in place.

Legal basis: Art. 6(1)(a) GDPR as well as Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) (consent).

Withdrawal: You can withdraw your consent at any time with effect for the future. To do so, delete this site's website data in your browser settings — the banner will then reappear and you can choose "Necessary only".

Retention period: Your consent decision persists until the website data is deleted in your browser. Usage data collected by Google is deleted after a maximum of 14 months.

9.3 Fonts

This website embeds the "Manrope" font via Google Fonts (Google Ireland Limited). In doing so, your IP address is transmitted to Google. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent visual presentation).

9.4 Contact by Email

If you write to us, we process your information in order to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete the correspondence as soon as it is no longer required and no retention obligations preclude deletion.

10. Retention Period

Data remains stored until you delete it within the app or uninstall the app. Statutory retention obligations remain unaffected where applicable.

11. Your Rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent already given (Art. 7(3) GDPR)
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

11a. Data Deletion — Instructions for TimeInvoicer Users

In short: TimeInvoicer (provider: Mag. Roland König) stores all your data exclusively locally on your device — on both Android and iOS. Your data never leaves your device at any point. To delete all data completely, it is sufficient to uninstall the app. We have no access to your data and do not need to process any server-side request.

What data does TimeInvoicer store on your device?

• Contact data (name, phone number, email, address) — only if you create contacts in the app or link device contacts
• Appointment data (date, time, notes) — only if you use the calendar feature
• Invoice data (line items, amounts, PDF files)
• Service definitions, billing rates and (for healthcare professions) ICD-10 codes
• App settings and templates
• Anonymised error logs (optional, with no personal reference)

Storage and retention period

• During active use: Data remains stored until you delete it in the app or uninstall the app.
• After uninstallation: All app data is removed from the device immediately and irreversibly — there is no additional retention period on a server, since no server storage exists.
• Statutory retention obligations (e.g. Section 132 of the Austrian Federal Fiscal Code (BAO) for invoices: 7 years): These are your responsibility as a business owner. TimeInvoicer exports PDFs and CSVs at your request, which you can archive yourself. We do not store this data for you.

How to request deletion of your data — in 3 steps

1. Complete deletion of all app data (recommended and sufficient): Uninstall TimeInvoicer via your device's system settings — on Android: Settings → Apps → TimeInvoicer → Uninstall; on iOS: press and hold the app icon → "Remove App" → "Delete App" (alternatively Settings → General → iPhone Storage → TimeInvoicer → "Delete App"). This irreversibly removes all data stored in the app — contacts, appointments, invoices, services, diagnoses, settings — from your device. No further step is required.
2. Delete individual entries: Within the app you can delete individual invoices, contacts, appointments or services at any time (swipe left, long-press, or menu → Delete). Deletion is carried out immediately on the device.
3. Questions or special cases: Write to support@timeinvoicer.at. We will respond to your request within 14 days. Please note that we cannot delete your data ourselves because we do not possess it — but we are happy to help with questions about these instructions.

What data is NOT automatically deleted by uninstalling?

• PDF invoices you have exported that you have sent by email, uploaded to a cloud service or saved in a downloads folder — please delete these manually in the respective app/cloud.
• Contacts and appointments in the system address book/calendar that TimeInvoicer has written there with your permission — remove these directly in your device's Contacts or Calendar app.
• Relation entries in the address book (Android only; a technical implication of Art. 17 GDPR): If you delete individual contacts from within TimeInvoicer, existing "relation" entries with a neutral label (e.g. "TI-Contact") remain in the Android address book — stored with account_type=null (local, not linked to any account). These entries cannot be separately excluded by Samsung Cloud or Google Contacts Sync — this is a known technical constraint of the Android ContactsContract API. Mitigation: the label is neutral (with no reference to "client" or "customer"), so third-party apps cannot draw any conclusion about a therapeutic or business relationship. You can achieve complete removal via your device's Contacts app.
• No cloud backups (Android): TimeInvoicer is configured so that its data is not included in automatic Samsung Cloud or Google Drive backups (Android Backup Rules, since app version 1.4.13).
• Device backups (iOS): If you use iCloud Backup or an encrypted backup via Finder/iTunes, the app's data may also be included in it. You can delete such a backup via Settings → Apple ID → iCloud → Backups, or in your computer's backup management.
• Purchase and subscription history: Your purchase receipts are held in your Google Play or Apple account and are not affected by uninstallation. Google and Apple manage this data under their own responsibility.

Note: As TimeInvoicer uses no user accounts, no cloud synchronisation and no server storage, no account-related data exists on our systems. Server-side account deletion is therefore not required.

12. Data Security

We employ appropriate technical and organisational measures to protect data against loss, misuse and unauthorised access.

13. Changes

We may update this privacy policy if legal, technical or functional changes to the app occur. The currently published version always applies.