Privacy Policy

Last updated: July 6, 2026

ResiboNow is currently in beta. All features are free to use during this beta period — no payment or subscription is required, and no payment processor is integrated yet.

This Privacy Policy applies to ResiboNow (the "App" or "Service"), a BIR-compliant Official Receipt and Sales Invoice generator for Philippine freelancers and small businesses ("we", "us", "our"). It covers the web app, Android app, and backend services.

1. Information We Collect

To provide the Service, we collect:

• Account information — your email address, first and last name, and a securely hashed password. We never store your password in plain text.
• Business profile — your business or legal name, address, Tax Identification Number (TIN), and an optional logo image you upload.
• Client records — names, company names, addresses, and TINs of your own customers, which you enter to generate invoices for them.
• Invoices and receipts — line items, amounts, taxes, discounts, payment terms, notes, and payment records (amount, method, date, reference) that you create.
• Feedback — any message, rating, or bug report you submit through the in-app feedback tool.
• Usage data (web only) — aggregated, anonymized product-usage events (e.g. invoice created, PDF downloaded) via Google Analytics, to help us understand which features are used. This does not include advertising or cross-site tracking.

2. Where Your Data Is Stored

Your account, business, client, and invoice data is stored in a managed PostgreSQL database (hosted by Supabase). Uploaded logo images are stored as encrypted-at-rest binary data in that same database — we do not use a separate third-party file-hosting service for your logo. Our backend runs on Fly.io; the web app is hosted on Vercel.

3. Sharing Invoices

When you generate a share link for an invoice, it creates a unique, unguessable link so your client can view or download that invoice without creating an account. Share links automatically expire 30 days after creation.

4. Sending Emails

If you use the "Send by Email" feature, we send the invoice PDF to the recipient email address you provide, using our transactional email service. We also send account-related emails (e.g. password reset) to the email address on your account.

5. Third-Party Services

We share the minimum data necessary with the following service providers, solely to operate the App:

• Supabase — database hosting
• Fly.io — backend application hosting
• Vercel — web application hosting
• Google Analytics — anonymized usage analytics (web only)
• Google Play — Android app distribution

We do not sell your personal information, and we do not use it for third-party advertising. ResiboNow does not currently integrate any payment processor — no payment or card data is collected or transmitted at this time.

6. Permissions (Android App)

The Android app requests:

• Internet access — required to sync your data with our servers.
• Photo library access — requested only when you choose to upload a business logo or profile photo. We do not access your photos at any other time.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You can permanently delete your account and associated data at any time from within the app: go to Account Settings → Delete Account and re-enter your password to confirm. This is instant and does not require contacting us.

If you no longer have access to the app (e.g. you uninstalled it, or can't sign in), you can request deletion by emailing us from the address on your account:

Request Account Deletion

We will verify the request comes from the account owner and process it within a reasonable time. Deleting your account permanently removes:

• Your account and login credentials (email, name, hashed password)
• Your business profile, including any uploaded logo
• All client records you created
• All invoices, receipts, and payment records
• Any feedback you submitted through the in-app feedback tool

Some data may be retained briefly in backups or logs for operational/security purposes before being fully purged, and we may retain minimal records where required by Philippine tax or accounting law (e.g. BIR-relevant transaction history), even after account deletion.

8. Security

Passwords are stored using one-way cryptographic hashing. Sessions use short-lived, signed access tokens with a separate refresh token; on mobile, these are stored using the device's secure storage (Android Keystore-backed). All traffic to our servers is encrypted in transit (HTTPS).

9. Children's Privacy

ResiboNow is a business tool intended for use by adults operating a business or freelance practice in the Philippines. It is not directed at children, and we do not knowingly collect personal information from anyone under 13.

10. Your Rights

You may access, correct, export, or delete your personal data at any time through the app, or via our account deletion request process above.

11. Changes to This Policy

We may update this Privacy Policy from time to time — including when payment processing or other new features are introduced after the beta period. Any changes will be reflected on this page with an updated date above.

12. Contact

If you have any questions about this Privacy Policy, please contact us at:
support@resibonow.app