HEPLANO Rechnung — Privacy Policy
Last updated: October 11, 2026.
Data controller
HEPLANO
Owner: Jürgen Heuft
Heinrich-Heine-Str. 15
50389 Wesseling
Germany
Contact
Email: dev@heplano.com
Data processing at a glance
HEPLANO Rechnung processes all data — your own business data, the customer records you create, and all invoice data — exclusively on your device. The database is encrypted (AES encryption via SQLite3MultipleCiphers). Archived invoice PDFs, ZUGFeRD files and the optional company logo are stored as files in your device's protected app storage and are additionally encrypted by the app (AES-256-GCM, with a key derived from the database key, which is kept only in the device's secure system storage). There is no cloud sync, no transmission to a server of our own, and no tracking or analytics. HEPLANO Rechnung does not operate its own server.
What data is processed
Your own business data (company name, address, tax number or VAT ID, bank details, optionally a company logo you select), the master data of the customers you create in the app yourself (name, address, optionally VAT ID, email, phone), and the invoices you create (line items, amounts, payments). For the optional company logo, the app accesses your photo library if you use that feature.
Responsibility for customer data
For personal data of customers that you enter into HEPLANO Rechnung yourself and process as part of your own business activity, you are generally the data controller under data protection law.
HEPLANO Rechnung stores this data exclusively locally on your device. HEPLANO does not gain access to the customer data you store in the app and does not process it for its own purposes.
Accordingly, this specific local processing generally does not involve data processing under Art. 28 GDPR or joint controllership under Art. 26 GDPR.
You are responsible yourself for meeting the data protection requirements for processing your customers' data. This includes in particular choosing a suitable legal basis, fulfilling the required information obligations, and upholding the rights of the data subjects.
Internet connection
HEPLANO Rechnung does not need an internet connection for its core functions (managing customers and invoices, generating PDF/ZUGFeRD files, creating backups); no customer, invoice, PDF or backup data is transmitted over the network. The Android app technically contains the permissions "Internet", "Network state" and "Google Play Billing", requested by the integrated billing libraries. They are used exclusively to purchase, restore and verify the Premium subscription, which is handled directly by Google Play Billing (or, on iOS, the Apple App Store) — during that step your device communicates with Google or Apple, not with HEPLANO.
Permissions at a glance
In addition to the internet and billing permissions mentioned above, HEPLANO Rechnung uses the biometrics permission, and only if you enable the optional app lock. There is no access to camera, microphone, location, contacts, calendar, or SMS. For the optional company logo you select an image via your device's own photo picker dialog; that also does not require a separately, permanently granted permission.
Security
HEPLANO Rechnung fully encrypts the local database (AES encryption via SQLite3MultipleCiphers); the key is generated randomly and stored exclusively in your device's secure system storage (Android Keystore or iOS Keychain). The optional app lock (fingerprint, face recognition, device PIN/pattern) is handled entirely by the operating system — HEPLANO Rechnung never receives or stores any biometric data. These measures effectively protect your data, though no software can guarantee absolute security against every conceivable threat.
Backup and restore
You create backups yourself — HEPLANO Rechnung never creates a backup automatically. Every backup is encrypted with a password you choose (key derivation via Argon2id, encryption via AES-256-GCM). The password itself is never stored and is required for restoring — without it the backup cannot be decrypted on any device, including the original one. The app only stores the backup file wherever you save it via the system's own share/save dialog; it is not uploaded to any cloud automatically.
Sending invoices
When you send an invoice as a PDF or ZUGFeRD file, HEPLANO Rechnung either opens your device's own share dialog — the file goes directly to the app of your choice (e.g. a messenger) — or, when sending by email, your email app with the recipient address prefilled (the customer's email address, if recorded) and the PDF attached. For this, a copy of the file is briefly created in the app's temporary storage. HEPLANO Rechnung does not operate its own delivery service for this and never sees the content of the transmission.
Premium subscription
The Premium subscription (€4.99 monthly or €39.99 yearly) is handled exclusively via Google Play Billing (or, on iOS, the Apple App Store). HEPLANO Rechnung never receives or stores payment data such as card details — this is processed exclusively by Google or Apple under their own respective privacy policies. HEPLANO Rechnung only stores locally on your device that a subscription exists, along with a verification token issued by the store, which the app uses at every app start and, on request, via the manual "restore purchases" action, to ask the respective store whether the subscription is still active. This token is used exclusively for that local check and is never transmitted to a HEPLANO server — HEPLANO does not operate one.
Third parties
HEPLANO Rechnung does not integrate any analytics, tracking, or advertising software — there is no analytics, no crash reporting to third parties, no user tracking, and no personalized advertising. The only external service the app communicates with is the store you obtained HEPLANO Rechnung from (Google Play or the Apple App Store) — solely for the Premium purchase and restoring it.
Deletion
You can archive customers; this removes them from the active list without invalidating invoices already created for them. For tax-law reasons (immutability, traceability), a finalized invoice cannot be freely deleted. In addition, HEPLANO Rechnung technically protects finalized invoices against permanent deletion for a period of ten years; only after that does the app provide a manual function to permanently remove them. Statutory retention obligations can vary depending on the type of document — this technical retention period is not a statement that every invoice must legally be kept for exactly ten years; you remain responsible yourself for complying with your own statutory retention obligations. The right to erasure may be limited to the extent statutory retention or other legal obligations apply, or an exception under Art. 17(3) GDPR applies. Since HEPLANO Rechnung does not operate its own servers, no further copies of your data exist outside your device. Uninstalling the app removes the data stored locally in the app's storage via your operating system. Files you export, share or save to a folder of your choice are not removed when uninstalling: backup files are encrypted with your password, exported invoice PDFs are stored unencrypted. If you share a backup via the share menu to a cloud provider (e.g. Google Drive) or choose a folder with a cloud provider that offers folder access (e.g. OneDrive) as the storage folder, your device's cloud app transfers these files to that provider; HEPLANO receives no data and has no access to it.
Retention
Beyond the technical retention period for finalized invoices mentioned above, HEPLANO Rechnung does not impose its own retention periods. Since all data is stored locally by you, you decide how long to keep it beyond that.
Legal bases
Your data in the app is processed locally on your device; HEPLANO does not receive it. Where HEPLANO otherwise processes personal data (for example when you contact us by email or the store provides sales and billing data in connection with the Premium subscription), this is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures), Art. 6(1)(f) GDPR (legitimate interest in answering inquiries and operating the service) and Art. 6(1)(c) GDPR (legal obligations, e.g. tax retention periods).
Contact and retention period
If you contact us by email, we process your email address and the content of your message to handle your request. We delete this data once the request has been fully handled, unless statutory retention obligations apply. Sales and billing data from the store (where provided, e.g. order number, purchase date, country, subscription status) is kept for as long as commercial and tax law requires.
Provision of data, automated decisions
You do not have to provide any personal data to HEPLANO to use the app. There is no automated decision-making, including profiling.
Right to object
Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
Supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for HEPLANO is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), www.ldi.nrw.de.
Your rights
You have the usual data protection rights: access, rectification, erasure, restriction of processing, objection, and data portability, to the extent applicable in your specific case (see above for the limitation on the right to erasure for finalized invoices). Since HEPLANO Rechnung stores your data exclusively locally on your device and does not operate its own server, you can exercise most of these rights directly within the app yourself. For requests you cannot handle yourself, you can reach us using the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority.
Minors
HEPLANO Rechnung is aimed at professional users (sole proprietors) and is not specifically directed at children.
International use
This privacy notice is based on the requirements of the EU General Data Protection Regulation (GDPR); additional local rules may apply for use outside the EU that are not covered here in detail. This notice is currently available in German and English.