Privacy Policy – Helvet Bill
By using the Helvet Bill application, you agree to the practices described in this privacy policy.
1. Data Controller
2. Collected Data
2.1 Data provided directly
- Account data: Name, email address.
- Invoicing data: IBAN, company name, logo, address, clients, invoices.
2.2 Technical / usage data
- IP address and device technical data (for security and operation).
- App version and language and notification permission, linked to your account (support and operation).
- Notification service data and, only with your consent, app usage statistics (see section 8).
3. Roles & Responsibilities
When you enter personal data about your own clients (invoice recipients), you act as the Data Controller for that data. Helvet Bill acts as the Data Processor to provide the service (storage, PDF generation). Access to this data is strictly limited to support and maintenance needs.
4. Purposes & Legal Basis
| Finalité | Données | Base légale |
|---|---|---|
| Service provision (account creation, invoice management, subscriptions) | All provided data | Performance of contract |
| Service communications (confirmations, technical changes) | Email, notification token | Performance of contract |
| Maintenance and security (bug detection, abuse protection) | Technical data, server logs | Overriding private interest (service security) |
| App usage statistics (improvement, tailored notification sending) | App statistics (see section 8) | Consent |
| Compliance with legal obligations (developer accounting) | Purchase history (no card details) | Legal obligation |
Marketing communications are sent only with your explicit consent (opt-in).
5. Data Retention
Account deletion: If you delete your account, you have a 30-day recovery window. After this period, your data (invoices, clients) is permanently deleted from our production systems. Backups are retained for a limited time before rotation.
- Important: It is your responsibility to export and keep your invoices for your own accounting obligations before deletion.
- We only retain minimal transaction records necessary for our own accounting.
6. Data Security
We apply appropriate technical and organizational measures:
- HTTPS encryption for all transfers.
- Data access protected by authentication.
- Developer access restricted to maintenance necessities.
- Primary hosting secured in Switzerland.
7. Third Parties & Transfers
Your main data is hosted at Infomaniak (Switzerland). We use the following providers, who may process technical data outside Switzerland (with appropriate safeguards):
- Apple / Google: Delivery of push notifications (technical token and notification content).
- Apple / Google / RevenueCat: Subscription management (we do not see your card numbers).
8. Push Notifications & App Statistics
To send you notifications and, if you agree, measure how the app is used, Helvet Bill uses a notification service developed by Simon Braillard. When installed, the app creates a random identifier that is not linked to your identity, to your Helvet Bill account or to an advertising identifier.
To send you notifications, the app sends our server: this identifier, the platform, the app's language and version, whether you allowed notifications, your choice about statistics, and the technical token Apple or Google provides to route notifications. This lets us send a notification only to the devices concerned, based on the language or the app version (for example to invite you to update the app).
Only if you accept statistics, the app also sends the actions in the app that we measure (for example saving an invoice or a quote, with details such as the number of lines or the time spent, never their content, your clients or the amounts), the screens viewed, the number and length of your sessions, the app and system updates, the receipt and opening of the notifications we send, the system version, the device model, the region set on the device (a language and region setting) and its time zone offset. Our server also derives your approximate location (country and region, for example “Switzerland, Vaud”) from your IP address, without keeping the address or determining your precise position or your city. We then keep the history of your notification permission.
We use these statistics to know, in aggregate, how the app is used in order to improve it, how many notifications are received and opened and when to send them, and to send some notifications only to the devices concerned, based on the system version, the country or when you last used the app (for example an update reminder, or a message if you have not opened the app for a while). You can turn statistics off and delete those already sent at any time in the app's settings. You will keep receiving notifications.
This data is not sold, not used for targeted advertising and not combined with data from other companies.
Our server is hosted in Switzerland by Infomaniak Network SA. Notifications are routed by Apple (iPhone, iPad, Mac) or Google (Android), which receive the technical token and the notification content, possibly in the United States. Your IP address is received with each connection, but it is not kept with this data. It is used to protect against abuse, in hashed form kept for a few minutes at most, and, only if you accept statistics, to derive your country and region with a geolocation database queried on our server (no third party receives it).
Receipt and open records, actions in the app (screens and sessions included), the history of your permission and of updates are deleted after 90 days. Only anonymous totals are kept after that. Other information is deleted automatically after 13 months without using the app, or earlier on request.
You can turn notifications off at any time in your device settings. You can request access to or deletion of this data at contact@helvet-bill.ch.
Legal bases (GDPR): sending the notifications you allowed (Art. 6(1)(b) GDPR), our legitimate interest in protecting the service against abuse (Art. 6(1)(f) GDPR) and your consent for statistics (Art. 6(1)(a) GDPR), which you can withdraw at any time. The controller is named in section 1.
9. Your Rights
You have the rights of access, rectification, and deletion of your data. You may request portability of data you provided (in a structured format).
Contact us at: contact@helvet-bill.ch. Proof of identity may be required.
10. Automated Decisions
Helvet Bill does not make automated individual decisions within the meaning of Art. 21 FADP. Features like recurring invoice sending are configured and triggered by you.
11. Data Breach
In the event of a breach presenting a high risk, we will notify the FDPIC and affected users if necessary for their protection.
12. Disclaimer & User Obligations
Helvet Bill is a software tool for generating and managing invoices. You are solely responsible for the content, accuracy, and legal compliance of all your data (invoices, reminders, recurring invoices, VAT, etc.). Helvet Bill does not verify your data and does not provide legal, tax, or accounting advice. Please consult a qualified professional if needed. Retention and Archiving: You are solely responsible for retaining your accounting records for the legally required period (generally 10 years in Switzerland, Art. 958f CO). If you delete your account, your service data will be permanently erased after a 30-day recovery window. It is imperative to export and back up your invoices before any deletion to meet your obligations. Limitation of Liability: To the maximum extent permitted by applicable Swiss law, Helvet Bill disclaims all liability for damages resulting from the use of the application, input errors, or failure by the user to comply with legal obligations.
13. Changes
We may update this policy. The current version is the one available on the app/site.
14. Language
In case of discrepancy, the French version prevails.
15. External Links
We are not responsible for linked external sites.
16. Applicable Law
Swiss law. Jurisdiction in Switzerland.