HEPLANO Rechnung — Privacy Policy
Last updated: August 24, 2026.
Data controller
HEPLANO
Owner: Jürgen Heuft
Heinrich-Heine-Str. 15
50389 Wesseling
Germany
Contact
Email: dev@heplano.com
Data processing at a glance
HEPLANO Rechnung processes all data — your own business data, the customer records you create, and all invoice data — exclusively on your device, in a fully encrypted database (AES encryption via SQLite3MultipleCiphers). There is no cloud sync, no transmission to a server of our own, and no tracking or analytics. HEPLANO Rechnung does not operate its own server.
What data is processed
Your own business data (company name, address, tax number or VAT ID, bank details, optionally a company logo you select), the master data of the customers you create in the app yourself (name, address, optionally VAT ID, email, phone), and the invoices you create (line items, amounts, payments). For the optional company logo, the app accesses your photo library if you use that feature.
Responsibility for customer data
For personal data of customers that you enter into HEPLANO Rechnung yourself and process as part of your own business activity, you are generally the data controller under data protection law.
HEPLANO Rechnung stores this data exclusively locally on your device. HEPLANO does not gain access to the customer data you store in the app and does not process it for its own purposes.
Accordingly, this specific local processing generally does not involve data processing under Art. 28 GDPR or joint controllership under Art. 26 GDPR.
You are responsible yourself for meeting the data protection requirements for processing your customers' data. This includes in particular choosing a suitable legal basis, fulfilling the required information obligations, and upholding the rights of the data subjects.
Internet connection
HEPLANO Rechnung does not need an internet connection for its core functions (managing customers and invoices, generating PDF/ZUGFeRD files, creating backups) and does not request internet permission for that. The only exception is the purchase process for the Premium subscription, handled directly by Google Play Billing (or, on iOS, the Apple App Store) — during that step your device communicates with Google or Apple, not with HEPLANO.
Permissions at a glance
HEPLANO Rechnung only requests the biometrics permission, and only if you enable the optional app lock. There is no access to camera, microphone, location, contacts, calendar, or SMS. For the optional company logo you select an image via your device's own photo picker dialog; that also does not require a separately, permanently granted permission.
Security
HEPLANO Rechnung fully encrypts the local database (AES encryption via SQLite3MultipleCiphers); the key is generated randomly and stored exclusively in your device's secure system storage (Android Keystore or iOS Keychain). The optional app lock (fingerprint, face recognition, device PIN/pattern) is handled entirely by the operating system — HEPLANO Rechnung never receives or stores any biometric data. These measures effectively protect your data, though no software can guarantee absolute security against every conceivable threat.
Backup and restore
You create backups yourself — HEPLANO Rechnung never creates a backup automatically. Every backup is encrypted: either with a password you choose (key derivation via Argon2id, encryption via AES-256-GCM), where the password itself is never stored, or with a random, device-bound key stored in secure system storage (restorable only on the same device in that case). The app only stores the backup file wherever you save it via the system's own share/save dialog; it is not uploaded to any cloud automatically.
Sending invoices
When you send an invoice as a PDF or ZUGFeRD file, HEPLANO Rechnung opens your device's own share dialog — the file goes directly to the app of your choice (e.g. your email app or a messenger). HEPLANO Rechnung does not operate its own delivery service for this and never sees the content of the transmission.
Premium subscription
The Premium subscription (€4.99 monthly or €39.99 yearly) is handled exclusively via Google Play Billing (or, on iOS, the Apple App Store). HEPLANO Rechnung never receives or stores payment data such as card details — this is processed exclusively by Google or Apple under their own respective privacy policies. HEPLANO Rechnung only stores locally on your device that a subscription exists, along with a verification token issued by the store, which the app uses at every app start and, on request, via the manual "restore purchases" action, to ask the respective store whether the subscription is still active. This token is used exclusively for that local check and is never transmitted to a HEPLANO server — HEPLANO does not operate one.
Third parties
HEPLANO Rechnung does not integrate any analytics, tracking, or advertising software — there is no analytics, no crash reporting to third parties, no user tracking, and no personalized advertising. The only external service the app communicates with is the store you obtained HEPLANO Rechnung from (Google Play or the Apple App Store) — solely for the Premium purchase and restoring it.
Deletion
You can archive customers; this removes them from the active list without invalidating invoices already created for them. For tax-law reasons (immutability, traceability), a finalized invoice cannot be freely deleted. In addition, HEPLANO Rechnung technically protects finalized invoices against permanent deletion for a period of ten years; only after that does the app provide a manual function to permanently remove them. Statutory retention obligations can vary depending on the type of document — this technical retention period is not a statement that every invoice must legally be kept for exactly ten years; you remain responsible yourself for complying with your own statutory retention obligations. The right to erasure may be limited to the extent statutory retention or other legal obligations apply, or an exception under Art. 17(3) GDPR applies. Since HEPLANO Rechnung does not operate its own servers, no further copies of your data exist outside your device. Uninstalling the app removes all locally stored app data via your operating system.
Retention
Beyond the technical retention period for finalized invoices mentioned above, HEPLANO Rechnung does not impose its own retention periods. Since all data is stored locally by you, you decide how long to keep it beyond that.
Your rights
You have the usual data protection rights: access, rectification, erasure, restriction of processing, objection, and data portability, to the extent applicable in your specific case (see above for the limitation on the right to erasure for finalized invoices). Since HEPLANO Rechnung stores your data exclusively locally on your device and does not operate its own server, you can exercise most of these rights directly within the app yourself. For requests you cannot handle yourself, you can reach us using the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority.
Minors
HEPLANO Rechnung is aimed at professional users (sole proprietors) and is not specifically directed at children.
International use
This privacy notice is based on the requirements of the EU General Data Protection Regulation (GDPR); additional local rules may apply for use outside the EU that are not covered here in detail. This notice is currently available in German and English.