Privacy and data safety
Everything you make in Bilva stays on your phone. There is no account, no server holding your work, and no copy of your invoices anywhere but the device in your pocket.
Last updated 8 September 2026
In plain terms
Your invoices stay on your phone
Every invoice, estimate, client, item and payment you enter is stored in the app on your device. None of it is uploaded. Nobody — including me — can read it. If you send a document to a customer, you are the one sending it, through whatever app you choose.
There is no account
No email address, no password, no profile. There is nothing to log in to, so there is no account of yours to leak, sell or hand over.
Contacts are copied, never uploaded
If you pick a customer from your phone’s contacts, the app copies that person’s details into the invoice and stops there. Your contact list is not read in bulk, not stored elsewhere, and not sent anywhere. Say no to the contacts permission and everything still works — you type the name instead.
What is counted
Nine anonymous counts, and no others, so I can tell whether the app works: how long it took to send a first document, where people give up on a first invoice, roughly how many documents a phone makes in a month, and whether anyone buys Pro. Numbers are put into buckets before they leave the phone — “7 to 10 invoices”, never “9”.
Nothing you type can reach a count. There is no code in the app that can attach free text to one, so a client name, a business name, an address, an amount or a document number cannot end up in a count even by mistake. The full list is below.
Advertising is switched off
No ads, no ad identifier, no attribution or install tracking. The permissions that would allow them are removed from the app before it is built, and the build is checked to confirm they are gone. Nothing about you is used to target anything.
Crashes
If the app crashes it reports the crash, the Android version and a rough device class, so it can be fixed. No document contents are included.
Deleting everything
Uninstalling the app removes your records from the phone. There is no server copy to delete and no request to make, because there was never a copy anywhere else. If you use Pro’s encrypted backup, delete the backup file the same way you would any other file.
Every count the app can send
Nine events, and no others. Every value is one of a fixed set of strings; there is no field anywhere that accepts typed text.
| Count | What it can contain |
|---|---|
| first_pdf_shared | How long since first launch, as one of six buckets: under 1 min, 1–5 min, 5–30 min, under 1 day, under 1 week, over 1 week. |
| first_invoice_reached | Which step of a first invoice was reached, as one of seven: opened, business name, business address, customer, first item, previewed, shared. |
| monthly_documents | Invoices and estimates made in the month that ended, each as one of eight buckets: 0, 1, 2–3, 4–6, 7–10, 11–20, 21–50, 51 or more. |
| estimate_issued | Nothing. The count has no detail attached. |
| estimate_converted | Nothing. |
| paywall_viewed | Which entry point opened the Pro screen, as one of six: the menu, or one of the five Pro features. |
| pro_purchased | Nothing. |
| first_pro_feature_used | Which of the five Pro features was opened first: multiple businesses, client signature, deposits, custom templates, encrypted backup. |
| document_shared | Which of the three share buttons you pressed: WhatsApp, email or other. Never which app answered, so nothing about the apps installed on your phone is reported. |
The formal detail
The same facts, in the form a data protection officer or an app store reviewer will look for.
Who is responsible
BillionEdges is a sole proprietorship of Maneesh Kumar. It is the controller for the anonymous usage and crash data described here. Contact: support@bilva.app.
BillionEdgesA2603, Opposite Metro University, Sport City 1, Plot No GH-04,
Atul Marg, Bisrakh Jalalpur, Greater Noida,
Noida - 201318, India
Data collected, and why
- App activity, anonymous and bucketed. The nine events above, sent through Google Analytics for Firebase. Purpose: analytics — understanding whether the app works. No user id and no user property is set, so events are not tied to an identity.
- Crash logs and diagnostics. Stack traces with the OS version and device tier, through Firebase Crashlytics. Purpose: app functionality and fixing faults.
- Purchase state. Handled entirely by Google Play billing when you buy or cancel Pro. Bilva receives whether an entitlement is active; it never sees a card number or your Google account details.
- Not collected. No name, email address, phone number, postal address, contact list, location, photo, file or financial record leaves the device. Documents, clients, items and payments are stored only on the device and are never transmitted.
Data sharing
No data is sold and none is shared with third parties for advertising. Google acts as a processor for analytics, crash reporting and billing. Consent flags in the app deny ad storage and ad user data; the advertising identifier, attribution and install-referrer permissions are removed from the shipped build.
Legal basis and transfers
Where the UK GDPR or EU GDPR applies, the anonymous usage and crash data is processed on the basis of legitimate interests in keeping the app working, and it is not used to identify anyone. Analytics and crash data is processed on Google’s infrastructure, which may be outside your country, under Google’s terms for those services.
Retention and deletion
Your records live on your device for as long as the app is installed and are removed when you uninstall it or clear the app’s data. Analytics and crash data is retained by Google under the default retention period for those products and cannot be traced back to a person. Because no account exists, there is no personal record for me to look up, export or erase — but write to support@bilva.app with any question and it will be answered.
Children
Bilva is a tool for running a business and is not directed at children.
This website
bilva.app sets no cookies, runs no analytics and embeds nothing from anyone else. Every page here is plain HTML and CSS served from one place, which is why you are not being asked to accept anything.
Changes
If this policy changes, the date at the top changes with it. A change that widens what is collected will be described here in plain terms, not folded quietly into a paragraph.