Data processed on your iPad
The app processes the information you enter so that it can maintain your workspace and create invoices. This can include business details, clients, products, price lists, drafts, issued invoices, payment information, notes, imported CSV values, and generated PDF documents.
That workspace is stored locally on your iPad. Catalogi does not receive the business or invoice information you enter.
- No tracking or cross-app advertising
- No product analytics or telemetry
- No Catalogi-hosted workspace backup or recovery
- No automatic network transfer of your workspace
iPad, iCloud, computer, and managed-device backups
iPadOS may include app data in an iCloud device backup, a Finder or Apple Devices computer backup, or an organization-managed backup. Apple, your organization, and your device settings control those copies and their retention.
A device backup made before you erase the workspace may still contain an earlier copy and may restore it later. Review the backup settings for your iPad and any device-management policy that applies to it.
Portable backups, Files, Share, and AirPrint
You decide when information leaves the app. Exported Catalogi backup files contain the complete workspace, including client contact details and issued invoice PDFs. They are readable JSON files and are not password-protected or encrypted separately by Catalogi.
When you export through Files, share an invoice PDF, or print with AirPrint, the provider, app, service, device, or printer you select receives a copy. Its privacy, security, and retention practices apply after that transfer. Catalogi cannot inspect or erase those external copies.
On-device protection
Catalogi Invoice uses complete iOS Data Protection for its app-owned workspace and temporary PDF files. While the iPad is locked, iPadOS prevents the app from opening protected files. This protection depends on maintaining a strong device passcode and keeping iPadOS current.
Temporary PDF files created by Catalogi for sharing are removed after the share finishes, is canceled, or fails. The app also removes abandoned Catalogi-owned share files when it starts again. A receiving app or service may keep its own copy.
Retention and erasing local data
Workspace records and issued invoices remain on the iPad until they are removed through an available deletion action, you use Settings → Offline & storage → Erase local data, or you remove the app.
Erasing local data removes the app’s workspace and Catalogi-owned temporary share files. It does not erase exported backups, shared PDFs, printed documents, device backups, or copies retained by another provider. Catalogi does not claim forensic erasure of storage that iPadOS manages.
If the iPad is lost or stolen
Catalogi cannot locate the iPad, recover the workspace, lock the app remotely, or remotely erase it because the workspace is stored locally and Catalogi does not have access to it. Use Apple Find My to mark a personal iPad as lost or erase it, or contact your organization’s administrator for Mobile Device Management actions.
Without a portable or device backup, Catalogi cannot recover a workspace from a lost, erased, damaged, or replaced iPad. Protect access with a strong passcode and keep backups under your control.
Changes to this policy
We may update this policy when the app’s data practices change. The effective date above identifies the current version. Material changes will be reflected here and in the app where appropriate.