LeanInvoice
Privacy Policy
Last updated: August 2026
LeanInvoice follows the same principle as every LeanTools app: your data belongs to you. For an invoicing app that matters twice over: your revenue and your clients' addresses are nobody else's business, ours included.
01 Controller
The controller under the GDPR is: Jochen Köneke · Am Pfeilgraben 11 · 39171 Sülzetal · Germany · Email: support@greyhead99.com
02 Data collected: the app
LeanInvoice collects no personal data whatsoever. Invoices, contacts, time entries, sender details, and bank details are stored solely on your device and in your personal iCloud account. We have no access to your invoices, your revenue, your client data, or your bank details. There is no account, no user profile, and no server of ours where any of it could end up.
03 Your clients' data
When you enter recipient addresses into LeanInvoice, you are processing personal data of third parties. For that processing you are the controller under the GDPR. We are never involved and never receive this data. No data processing agreement arises between you and us, because we neither store nor process that data.
04 Data collected: this website
When you visit this website, our hosting provider (STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany) automatically creates server log files. These contain your IP address, the date and time of the request, your browser type, and the page requested. The data is used solely to operate the website securely and reliably and is deleted after 7 days at the latest. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation).
05 Local settings
This website stores your language preference (preferredLang) locally in your browser (localStorage) only. No personal data is transmitted to us or to any third party in the process.
06 iCloud sync
If you leave iCloud sync enabled, your invoice and time data syncs between your own devices through Apple's iCloud infrastructure, in a private CloudKit database only you can access. Apple acts as an independent controller; Apple's privacy policy applies (www.apple.com/legal/privacy/). We operate no servers involved in this process. Apple Inc. is based in the USA; the transfer is covered by Apple's certification under the EU-US Data Privacy Framework (www.dataprivacyframework.gov/participant/4000). You can turn sync off in the app's settings at any time. LeanInvoice then works purely locally.
07 Sending invoices
When you share an invoice, LeanInvoice hands the PDF to the iOS share sheet. Where it goes from there (Mail, Messages, Files, AirDrop) is your choice. LeanInvoice sends nothing on its own and transmits no invoice data to us or to third parties.
08 Analytics
LeanInvoice uses no third-party analytics SDKs. We use the aggregate statistics built into App Store Connect (provided and operated by Apple Inc.) to understand general usage trends. Apple processes usage data (such as device type and app version) and provides us with anonymised, aggregated reports only. Apple acts as an independent controller.
09 Retention
Personal data is retained only as long as necessary for its purpose: server logs (website) for a maximum of 7 days, then deleted automatically; email correspondence (support) for up to 2 years after the matter is closed, unless a statutory retention obligation requires longer. Your invoice data lives with you alone: how long you keep it is up to you and your statutory retention periods.
10 International transfers
Apple Inc. (iCloud, App Store Connect) is based in the USA. The transfer is covered by Apple's certification under the EU-US Data Privacy Framework. Beyond that, we transfer no personal data to countries outside the European Economic Area.
11 Your rights
You have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing based on legitimate interest (Art. 21 GDPR). To exercise your rights, contact: support@greyhead99.com
12 Right to complain
You have the right to lodge a complaint with a data protection supervisory authority. Ours is: Landesbeauftragter für den Datenschutz Sachsen-Anhalt, Leiterstraße 9, 39104 Magdeburg, Germany (www.datenschutz.sachsen-anhalt.de). You may also contact the authority where you live or work within the EU.
13 Contact
Questions about privacy? We're happy to help. Reach us at support@greyhead99.com