Privacy Policy

Last updated: 01.10.2026

Thank you for using the easyFaktury app. This page explains what data we collect, how we use it, and how it is protected.

1. Data we collect

When you use the easyFaktury app, we collect the following types of data:

1.1 Data you provide

You enter this information directly in the app:

• Personal and company details in your profile (name, company name, registration ID, VAT ID, address, email, phone)
• Bank details (account number, bank code, IBAN)
• Client details (name, registration ID, VAT ID, address, contact information)
• Information on created invoices and expenses

1.2 Apple ID data (for CloudSync)

If you use the premium CloudSync feature that syncs data across devices:

• We use secure authentication via Sign in with Apple
• We receive a secure user identifier and authentication token from Apple
• We do not store or process your Apple ID password - authentication is handled directly by Apple

2. How we use your data

2.1 Providing the service

We use your data primarily to:

• Create and manage invoices
• Calculate and generate tax returns
• Populate information in invoices and exports
• Synchronize between devices (CloudSync only)

2.2 Improving the app

Anonymized app usage data helps us:

• Identify and fix issues
• Optimize the user interface
• Develop new features based on user requests

3. Data storage and processing

3.1 Local data storage

By default, all data is stored locally on your device:

• Data is stored using Apple SwiftData
• Data is protected by the same security features as other data on your device
• No third party can access the data without your consent

3.2 Cloud synchronization (premium feature)

If you use CloudSync:

• Data is encrypted in transit to our servers using HTTPS
• Authentication is secured with Apple ID tokens
• Data is synchronized automatically at regular intervals

4. Sharing data with third parties

We do not share your data with third parties except in the following cases:

4.1 Apple Inc.

We use services provided by Apple Inc. for authentication via Sign in with Apple.

4.2 Cloud service providers

We use secure cloud services to operate CloudSync for data storage and processing.

4.3 Legal obligations

We may be required to disclose data if required by law or a court order.

4.4 Artificial intelligence service providers

For some app features, we use services from external AI providers (OpenAI, Google, Anthropic). When using these features, relevant data is processed by these providers. A notice is always displayed in the app when AI features are used, and you can disable these features in settings.

5. Your rights

In accordance with applicable data protection laws, you have the following rights:

• The right to access your personal data
• The right to correct or update your data
• The right to delete your data
• The right to data portability
• The right to restrict processing
• The right to object to processing

To exercise these rights, please contact us at [email protected].

6. Security

The security of your data is a priority for us:

• All data transmitted between the app and our servers is encrypted using HTTPS
• Access to data on our servers is limited to authorized personnel only
• We regularly update our security practices and technologies
• We use authentication with Apple ID, which is considered a secure and privacy-respecting system

7. Changes to this privacy policy

We may update this privacy policy from time to time. We will inform you of significant changes via the app or email.

We recommend reviewing this policy regularly to stay informed about how we protect your data.

9. Web accounts, ChatGPT and other MCP clients

easyFaktury is operated by Reifenlab s.r.o., company ID 23163127, Nad Cihelnou 2623/4, 251 01 Říčany, Czechia. This section covers server data in your web account and AI-client connections. Local-storage descriptions for the mobile app do not mean these connections process data only on your phone.

Access uses your easyFaktury account and its permissions. Ordinary accounts use email verification or approval in the app; the separate demo account containing synthetic data may use a password. The connected client receives OAuth access to company profiles enabled for MCP. Do not put passwords, verification codes or tokens in a conversation.

Depending on the requested tool, we return company and customer details, contact information, business and tax identifiers, invoices and line items, amounts, tax and payment information, expenses, bank accounts, PDFs and tax exports to the connected client to carry out your instructions. You determine the purposes and permitted use of your customers' data as its controller; we process that business data for you to provide this part of the service.

OpenAI processes data returned to ChatGPT under the terms and settings of the relevant service. Other connected clients follow their operators' terms. Deleting a conversation with that operator and deleting data in easyFaktury are separate actions.

Public previews and email

Creating an invoice or PDF may also create a public preview accessible to anyone who obtains its link. Public previews currently have no automatic expiry; deleted invoices and drafts are hidden. The connection workflow should disclose this effect and obtain approval before creation.

Sending an invoice email is a separate action requiring confirmation of the invoice, exact recipient and optional message. Sending may create a public preview and automatically BCCs the signed-in account's valid email if it differs from the recipient. Mailgun processes the invoice and message for sending; its European API is configured. Using that API alone does not guarantee all processing occurs exclusively in the EU.

Authentication, diagnostics and retention

OAuth records contain token hashes, client/account/profile references, permissions, timestamps and revocation state. Access tokens are valid for one hour and refresh tokens for 30 days; refresh rotates them. Daily cleanup removes records revoked over 30 days ago, or whose access and any refresh token both expired over 30 days ago. Normal removal from the live database therefore occurs within 31 days after that condition is met, provided the scheduled cleanup runs. We monitor its execution automatically.

Expired OTPs and authorization codes, inactive attempt limits and expired demo-login sessions are removed daily after a 24-hour buffer. Codes and tokens are not stored in plaintext in these tables. Security and operational logs may contain timestamps, IP addresses, request paths, internal references and error details. Log and historical-backup retention differs from token validity.

Company data, customers and documents remain stored to provide the service. Disconnecting the AI client or revoking OAuth access does not delete them or invalidate existing public links. For account-deletion requests from 1 October 2026 after deployment of the new process, we close the account, disable public previews of its invoices and revoke access. Cleanup runs every 15 minutes to remove its company profiles, customers, documents and other records linked to those profiles from the live database, including identified online database copies, and stored expense attachments. A short buffer allows already-started requests to finish. Under normal operation this completes within 24 hours; failed and overdue jobs are monitored automatically.

Completed erasure jobs are retained for up to 31 days to verify completion. Minimal deleted-profile identifiers remain to prevent an old device from uploading those profiles again; they contain no company names, documents or contact details. This process does not retroactively erase all earlier closed accounts or every historical backup file. Request earlier erasure, export or erasure from those copies separately using the contacts below. Off-site backups and historical manual copies have separate lifecycles; this page does not promise immediate removal of every historical copy.

Your own accounting and tax archiving duties do not instruct us to retain all personal data for the same period automatically. Export needed records before erasure. When handling erasure, we distinguish data processed for you from records easyFaktury must retain for its own specific legal duties.

Rights and contact

Request access, correction, export, restriction or erasure at [email protected]. Identify your account and requested scope without sending passwords or tokens. We verify identity proportionately. You may also complain to the Czech Office for Personal Data Protection. Account data enables the service and contract, security processing protects the service and its users, and our own mandatory records are retained under applicable law.