1. Scope
This Privacy Policy applies to the Krafiqo mobile app, related website pages, and support messages. Krafiqo is an iOS-first field document app. It is not a payment processor, wallet, accounting system, CRM, or legal or tax compliance service.
2. Information Krafiqo may process
Depending on the features you use, Krafiqo collects information you enter, files or photos you choose or capture, account details returned by a sign-in provider, App Store subscription status, and limited app, device, security, and reliability events needed to provide the service. Information that stays only on your iPhone is not collected by Krafiqo unless you choose a cloud, sync, support, or cloud AI action that sends it.
Krafiqo may process the following information:
- Account and profile data, such as account details, company profile, business contact details, language settings, region settings, and subscription status.
- Document data, such as quotes, invoices, receipts, customers, job details, line items, prices, taxes, notes, terms, payment instructions, and generated PDF metadata.
- File and asset data, such as imported documents, captured photos, logos, payment QR images, generated PDFs, and related file metadata.
- OCR and AI review data, such as recognized text, layout evidence, suggested fields, confidence context, and review warnings when scan, OCR, or eligible cloud AI features are used.
- Support, website, and diagnostic data, such as messages you send, device type, app version, website page context, and reliability information used to troubleshoot issues.
3. How Krafiqo uses information
Krafiqo uses information to provide and improve the document workflow:
- Create, edit, preview, save, duplicate, archive, export, and share business documents.
- Run local OCR and local matching against templates and service items on supported devices.
- Sync and restore account-owned document, template, profile, and asset metadata when cloud features are available.
- Verify subscription entitlements and apply Free or Pro feature limits.
- Provide support, security, diagnostics, abuse prevention, and service reliability.
4. Local storage and offline work
Krafiqo is designed for field work with weak or no network. The app may store document drafts, templates, source files, generated PDFs, and related metadata on the device so local creation, review, PDF generation, and local save can keep working offline.
Cloud sync, cloud restore, subscription verification, and cloud AI require network access.
5. OCR and AI
Local OCR is the baseline where supported by the device. Optional cloud AI enhancement may be available to eligible Pro users when connected, configured, and within quota.
Cloud AI is review-only. It may suggest classifications, corrections, missing fields, or explanations, but it does not confirm amounts, taxes, quantities, payment details, export PDFs, share documents, or silently save business data.
Cloud AI uses a compact evidence pack selected from local OCR and layout evidence. If useful evidence cannot be sent safely or the service is unavailable, local review and manual editing remain available.
Before each cloud AI request, Krafiqo asks you to confirm that a minimized pack of OCR text and layout evidence will be sent to the configured third-party provider. The configured provider may be OpenAI, Alibaba Cloud/DashScope, or Google Gemini. The V1 request does not send the source image. Choosing “Keep Local Only” cancels the request, and Krafiqo will not send another cloud AI request unless you choose the action again.
6. Sharing and exports
You control when customer-ready PDFs or files are exported or shared through iOS sharing tools. Krafiqo does not automatically send documents, customer reminders, collection messages, or payment requests.
7. Payments and subscriptions
Krafiqo may store user-entered payment instructions, payment links, QR images, or payment references so they can appear in customer-facing documents. These fields are display-only. Krafiqo does not process customer payments, hold funds, route payments, split payments, operate a wallet, or store payment card data for customer collections.
Pro features are sold through iOS in-app subscriptions. The App Store handles subscription purchase payment details. Krafiqo may process subscription status and entitlement information to unlock eligible features.
8. Service providers and data sharing
Krafiqo does not sell personal information or use it for cross-app advertising. Information may be handled by service providers only for the feature you choose or the operation needed to run Krafiqo:
- Apple, for App Store purchases, subscription management, Sign in with Apple, device permissions, and iOS sharing.
- Google and Firebase, for Google Sign-In and identity support when you choose those sign-in features.
- Krafiqo's backend, built on Supabase/PostgreSQL and private object storage, for authentication, account-owned sync, restore, assets, subscription verification, security, and audit controls.
- OpenAI, Alibaba Cloud/DashScope, or Google Gemini, only when the configured cloud AI provider is enabled and you confirm a cloud AI request.
Krafiqo requires an enabled provider to process information only for the stated service purpose and to provide the same or equal protection described in this policy. A provider must not be enabled for production if that protection has not been confirmed. Krafiqo may also disclose information when required by law or to protect users, the service, or legal rights.
9. Data safety
Krafiqo uses reasonable technical and organizational measures to protect information. Krafiqo is designed to use iOS file protection for local business data and file-backed assets. No storage or transmission method is perfect, so review documents before sharing and avoid sending unnecessary sensitive customer data in support messages.
10. Retention and deletion
- Local data remains on your device until you delete it through an available app control, delete the app, or erase the device. Files you exported or shared to another app or location are controlled separately by that destination.
- Cloud account content is kept while needed to provide sync, restore, support, security, and the account features you use. Deleting a document may first place it in a recoverable state; deleting the account starts the complete account-deletion process described below.
- Account deletion is available in Settings under “Delete Account.” A request starts a 30-day waiting period that you can cancel after signing in again. At the end of that period, Krafiqo purges account-owned relational data and private storage objects through its deletion workflow.
- Minimized deletion audit may remain after purge to record that deletion occurred and protect service security. It excludes the deleted email, display name, role snapshots, and deletion-request device identifiers.
- Operational records, including redacted security, subscription, reliability, idempotency, and Outbox records, are retained only while needed to operate, secure, troubleshoot, recover, or meet legal obligations. Failed asset-restore diagnostics are limited to an opaque transfer record, stage, outcome, duration, and app version and expire after 14 days. They do not contain signed URLs, storage paths, asset identifiers, image bytes, customer/business content, payment instructions, device identifiers, or raw server error bodies. Raw OCR text, source images, payment instructions, signed URLs, and provider secrets must not be written to operational logs.
Account deletion does not cancel an App Store subscription. Use Apple's subscription controls to stop future renewals before or after requesting account deletion.
11. Your choices and consent
You can review, edit, export, archive, duplicate, or delete app documents where those controls are available in the app.
You can decline or withdraw optional camera or photo access in iOS Settings and continue with supported manual or file-based alternatives.
You can choose “Keep Local Only” before a cloud AI request. Cloud AI is request-by-request: no later request is sent unless you choose the action and confirm again.
You can manage iOS subscriptions through the App Store subscription controls.
You can request account deletion inside the app or contact privacy@krafiqo.com with a privacy or deletion question.
12. Compliance boundaries
Krafiqo helps prepare business documents, but it does not guarantee tax, legal, or accounting compliance. You are responsible for reviewing document content, customer details, amounts, taxes, notes, and payment text before exporting or sharing.
13. Changes to this policy
We may update this policy as Krafiqo changes. The date above reflects the latest published version.
14. Contact us
If you have privacy questions, contact Krafiqo: