Privacy
Your invoices.
Your business.
ktak keeps your invoices, clients and PDFs on your phone. We never receive them. This policy explains the little that does leave your phone, and the choices you have.
Last updated: 24 October 2026 · applies to ktak 2.0 and later
The short version
- No ktak account, and no ktak server holding your invoices.
- Apple handles payment. RevenueCat confirms your subscription and counts when the subscription screen opens, using an anonymous ID.
- Other usage analytics is off until you turn it on. It never includes clients, amounts or invoice contents.
- If ktak crashes, it sends an anonymous crash report so we can fix the problem. That never includes clients, amounts or invoice contents either.
- No advertising, no tracking across apps, and we never sell your information.
Who we are
This policy covers the ktak iPhone app and this website, ktak.ksak.app. ktak is made by Raf Tadevosyan, who is responsible for the personal information described here ("we", "us"). Contact us at support@ksak.app with any privacy question or request.
ktak is available on the App Store in many countries. This policy applies wherever you use it. Some sections describe rights that apply only under the laws of certain places.
What stays on your phone
Everything you enter in ktak is stored in the app's private storage on your iPhone:
- Your business: legal and trading name, address, email, phone, tax ID, logo, how clients should pay you, country, currency, tax rates, invoice numbering and document settings.
- Your clients: names, addresses, email addresses, tax IDs and the language their PDFs use.
- Your documents: drafts, issued invoices, credit notes, the PDFs, and dated stage notes such as when an invoice was sent or paid.
- Recovery copies: ktak keeps the last seven daily copies and the last three copies made before a restore, on the same phone.
We don't receive any of this. ktak has no account and no app-run cloud sync, so we can't see, recover or delete these records for you.
When information leaves the phone because you chose it
- Sharing a PDF: you pick the app or person in the iOS share sheet. That service then handles the copy under its own terms.
- Exporting a backup: the backup file holds every invoice, client and PDF. You choose where to save it, such as Files or iCloud Drive. ktak doesn't encrypt backup files, so keep them somewhere you trust.
- Your device backups: if you back up your iPhone to iCloud or a computer, iOS may include ktak's data according to your Apple settings.
Device features ktak uses
- Photos: only if you add a logo. ktak receives just the image you pick, resizes it and stores it on your phone.
- Files: only when you export or restore a backup, using the file you choose.
- Region and language: read on your phone to suggest your country during setup and to show numbers in your format. Not sent to us.
Your clients' information
The details you keep about your clients are yours to manage. You decide what to record and who you send invoices to, and you remain responsible for that information under the law that applies to your business.
Overdue reminders
If you turn on reminders, ktak schedules notifications on your iPhone for the morning after an invoice becomes overdue. They are created and delivered on your phone. No push service or ktak server is involved, and nothing is sent to your client.
A reminder shows the invoice number and the client's name, or how many invoices are overdue and who they're for. Notifications may appear on your lock screen. To hide previews or switch them off, use Profile → Reminders in ktak or Settings → Notifications on your iPhone.
Subscriptions and purchases
Apple processes every payment through your Apple Account. We never receive your card details or Apple Account password.
RevenueCat helps ktak check whether your subscription is active, restore it on a new phone, and show us subscription reports. It processes:
- a random, anonymous customer ID created by ktak (this is the "Support ID" shown in Profile → Subscription)
- Apple transaction and subscription details: product, price and currency, storefront country, purchase, renewal, cancellation and refund dates, and whether a purchase was a test
- each time the subscription screen opens, so we can count how many people see it and how many of them subscribe
- app version, iOS version, device model and the technical details of the connection, such as IP address
We don't connect this ID to your name, email, business or invoices. We use it to provide the subscription you bought, restore access, fix billing problems, prevent misuse, and understand how many people see the subscription screen, subscribe, renew and ask for refunds.
Deleting ktak doesn't cancel your subscription and doesn't delete records held by Apple or RevenueCat. See Apple's privacy policy and RevenueCat's privacy policy.
Ratings
ktak may occasionally show Apple's standard rating prompt. Apple handles any rating you leave. We don't learn who rated the app.
Optional usage analytics
"Share anonymous usage" in Profile → Privacy and help is off by default. Apart from RevenueCat counting when the subscription screen opens (see Subscriptions), nothing is collected for analytics unless you turn it on. You can turn it off at any time without losing any feature.
If you turn it on, ktak uses Google Analytics for Firebase to record which steps people use and where they get stuck:
- Steps: setup completed, invoice started, previewed or issued, PDF generated, sharing completed, invoice marked as sent or paid, credit note issued, client added, reminders turned on, subscription screen viewed, and the outcome of a purchase or restore.
- Short labels on those steps: such as which screen started the step, the subscription product, and whether it succeeded. We also record whether the app is a test build.
- Collected by Firebase automatically: a random app-instance ID, first open and session timing, app and iOS version, device model, language, and approximate location (such as country or city) worked out from your connection.
Analytics never includes client or business names, addresses, email addresses, tax IDs, invoice numbers, amounts, currencies, line items, payment details, PDFs or backups. Advertising features are switched off: no advertising ID, no ad personalisation and no tracking across other companies' apps or websites.
Turning analytics off stops collection and resets the analytics ID on your phone. Events already collected are kept for 2 months and then deleted, and reports built from them contain only totals. See Firebase privacy information and Google's privacy policy.
Crash reports
If ktak crashes or a screen fails to load, the app sends a crash report to Sentry, our crash-reporting provider, which stores it in the European Union (Frankfurt, Germany). We use these reports only to find and fix problems in ktak.
A crash report contains:
- The error: its type and where in ktak's code it happened. ktak removes the error's message before sending, because a message could quote something from your invoices.
- App and device: app version and build, iOS version, device model, language and region setting, memory use, whether ktak was open on screen, and whether it's a test build.
- An anonymous installation ID: a random code for this installation of ktak, so we can tell how many installations a problem affects. It isn't connected to your Support ID, to analytics or to you.
- Technical details of the connection, such as IP address, which Sentry receives when the report is sent.
Crash reports never include client or business names, addresses, email addresses, tax IDs, invoice numbers, amounts, line items, payment details, PDFs, backups, screenshots or anything you typed. They're sent from every installation, separately from the usage analytics setting, because they're how we keep ktak working. Sentry keeps them for up to 90 days. See Sentry's privacy policy.
Support and this website
When you email us, we receive your email address and whatever you send. We use it to answer you, and keep the conversation for as long as needed to resolve it and handle any follow-up. Please don't send client details, invoices, backups or passwords unless we've agreed that something specific is needed.
This website has no cookies, no analytics, no advertising and no forms. Fonts and images are served from this site. Our hosting and network providers process standard request information, including IP address and browser details, to deliver the pages and protect them from abuse.
Service providers and international transfers
| Apple | App Store, payments, subscriptions, rating prompt, notifications on your device. |
|---|---|
| RevenueCat, Inc. | Subscription status and reports, including how often the subscription screen opens, using an anonymous ID. |
| Google LLC (Firebase) | Optional usage analytics, only if you turn it on. |
| Functional Software, Inc. (Sentry) | Crash reports, stored in the European Union (Frankfurt). |
| Email and website hosting | Receiving support email and serving this website. |
These providers act on our behalf or under their own terms, and may process information in the United States and other countries. Where the law requires it, they use recognised safeguards for international transfers, such as standard contractual clauses or adequacy decisions. Contact us to ask about the safeguards relevant to you.
We don't sell your personal information, and we don't share it for targeted advertising. We may disclose information if the law requires it, or to deal with fraud or a security problem.
How long information is kept
| Invoices, clients, PDFs | On your phone until you delete them or delete the app. Exported backups and shared PDFs stay wherever you put them. |
|---|---|
| Recovery copies | On your phone. The last seven daily copies and the last three made before a restore. Older copies are replaced automatically. |
| Subscription records | While needed to provide and support your subscription, handle refunds and meet tax and accounting obligations. |
| Analytics events | 2 months, and only if you turned analytics on. |
| Crash reports | Up to 90 days. |
| Support email | As long as needed to resolve your request and any follow-up. |
Your choices
- Analytics: turn "Share anonymous usage" on or off in Profile → Privacy and help.
- Crash reports: sent automatically and not switched off by the analytics setting. They contain no invoice content. To object, email us.
- Reminders: turn them on or off in Profile → Reminders, or in Settings → Notifications on your iPhone.
- Your records: edit drafts, clients and business details any time. Issued invoices can't be changed; correct them with a credit note. To remove everything, export a backup if you need one, then delete ktak. Copies you saved or shared elsewhere need to be removed there.
- Subscription: manage or cancel in Settings → your name → Subscriptions. Restoring a purchase restores access, not invoices.
- Subscription records: copy your Support ID from Profile → Subscription and email it to us to ask for access to, or deletion of, the records linked to it.
Your rights
Depending on where you live, for example in the UK, the European Economic Area, Switzerland, California and other US states, Brazil, Canada or Australia, you may have the right to:
- know what personal information we hold about you and get a copy
- have it corrected or deleted
- restrict or object to how we use it, including use based on our legitimate interests
- receive it in a portable format
- withdraw consent at any time, without affecting earlier processing
- not be treated differently for using these rights
Email support@ksak.app to make a request. We may need your Support ID to find subscription records, and we'll reply within the time the law requires. Remember that we can't access invoices on your phone because we never receive them.
Legal bases (UK, EEA and Switzerland)
We process subscription information to perform our contract with you. We process analytics only with your consent. We handle crash reports, support, security and website delivery under our legitimate interest in running a reliable service, and keep some records to meet legal obligations.
If you're unhappy with how we've handled your information, please contact us first. You can also complain to your local data protection authority, such as the UK Information Commissioner's Office or the supervisory authority in your EU country.
We don't make decisions about you that are based solely on automated processing and that have legal or similarly significant effects.
Children
ktak is a business tool and isn't directed at children. We don't knowingly collect personal information from children. If you think a child has sent us personal information, contact us and we'll delete it.
Security
ktak's data is protected by your iPhone's own security, including encryption when you use a passcode. Connections to Apple, RevenueCat, Google and Sentry use HTTPS. Keep your phone locked, and store exported backups somewhere only you can reach.
Changes to this policy
When this policy changes, we'll update the date at the top. If a change needs a new choice or your consent, ktak will ask you in the app before it applies.