Privacy Policy

Lotus Invoice is a mobile app and website that helps fitness, yoga, dance, and pilates teachers track the classes they teach and send invoices to the studios they work with. The service is operated by Sean Hayes, a sole proprietor based in British Columbia, Canada ("we", "us", "our").

This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to the Lotus Invoice app and the lotusinvoice.com website. If you have questions, email us at support@lotusinvoice.com.

We collect only what we need to run the service:

• Account information. When you sign up we store your email address. You can create an account with email and a password, or by using Sign in with Apple or Google Sign-In, in which case we receive a basic identifier from that provider.
• Business profile you provide. Information you enter to appear on your invoices — such as your business name, contact name, business email, phone number, website, mailing address, tax ID, currency, payment instructions, and invoice footer.
• Content you create. The studios and clients you add (including their name and address), your rates, line items, and the invoices you generate.
• Location information. If you turn on automatic class tracking and grant location permission, the app uses geofencing to detect when you arrive at or leave a studio. When this happens we send and store a record on our servers containing the event type (arrival or departure), a timestamp, and the location coordinates, linked to your account. We use this only to help you log classes automatically. If you do not enable this feature, we do not collect location information.
• Product analytics. We use PostHog to understand how the app is used so we can improve it. We record manual product events (for example, that a class was logged) identified by an internal account ID, along with your sign-up method, sign-up date, and app version. We do not send your name or email address to PostHog, and we do not use session recording, screen recording, or automatic screen-view tracking.
• Crash and error diagnostics. We use Sentry to capture crash reports and errors, including basic device and operating-system information, so we can find and fix problems.
• Technical data. Standard server logs (such as IP address and request metadata) generated when your app or browser talks to our servers.

• To provide the service — including creating and managing your account and invoices.
• To power automatic class tracking when you choose to enable it.
• To understand usage and improve the product (analytics).
• To diagnose and fix crashes and errors.
• To respond to your support requests and send account-related messages.
• To meet our legal and tax obligations.

Under Canadian privacy law (PIPEDA and British Columbia's Personal Information Protection Act), we collect, use, and disclose your personal information with your consent. By creating an account and using the service you consent to the handling of your information as described here. Location tracking is always an explicit, separate opt-in — you grant it through your device's permission prompt and can turn it off at any time. You may withdraw your consent by deleting your account or contacting us at support@lotusinvoice.com.

We do not sell your personal information. We share it only in these limited cases:

• Service providers who process data on our behalf so we can run the service — our cloud hosting provider, PostHog (analytics), Sentry (crash reporting), and Apple and Google (only when you choose their sign-in). These providers may only use the data to perform services for us.
• Legal reasons — if required by law, or to protect our rights, users, or the public.
• Business transfer — if the service is ever sold or merged, your information may transfer as part of that transaction, subject to this policy.

Your information is stored on our servers and with the service providers listed above. Some of these providers may store or process data outside of Canada, including in the United States and other countries. When information is held in another country it is subject to that country's laws, including lawful access by courts and government authorities. We take reasonable steps to ensure your information is protected wherever it is processed.

We keep your information for as long as your account is active. You can delete your account at any time from the app's Settings. When you do, your account is recoverable for 30 days if you sign back in; after 30 days your data is permanently erased from our active systems. Residual copies may persist briefly in encrypted backups before they expire.

We protect your information with measures including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to keep your data safe. You can read more on our Security page.

You have the right to access the personal information we hold about you, to ask us to correct it, and to withdraw your consent. You can update most of your information directly in the app, or email us at support@lotusinvoice.com and we will help.

If you have a concern about how we handle your information, you may contact us first, and you also have the right to complain to the Office of the Privacy Commissioner of Canada (OPC) or the Office of the Information and Privacy Commissioner for British Columbia (BC OIPC).

EU/UK (GDPR). If you are in the European Economic Area or the United Kingdom, Sean Hayes is the controller of your personal information. You have the right to access, correct, delete, port, or object to the processing of your information, and to lodge a complaint with your local data protection authority. We process your information to provide the service (contract), with your consent (location), and for our legitimate interests in improving and securing the product.

California (CCPA/CPRA). If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.

To exercise any of these rights, email us at support@lotusinvoice.com.

Lotus Invoice is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of majority. If you believe a child has provided us information, contact us at support@lotusinvoice.com and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the service after an update means you accept the revised policy.

Questions about this policy or your information? Email us at support@lotusinvoice.com. We're a small team and a real person will reply.