Factuly privacy policy

Last updated: 10 November 2026

Factuly is an app for Spanish freelancers to issue invoices and record expenses. This document says what it stores, where, who else sees it and how to delete it. It is written to be read, not to cover us.

Who is responsible for your data

ALHER TECH, S.L. (tax ID B05747316), Calle Diligencia 9, 28018 Madrid (Spain), which develops and sells Factuly. For anything to do with your data: soporte@alhertech.com.

What Factuly stores

WhatWhy
Your tax details: name or business name, tax id, address, VAT regime, default rates and, if you declare it, your social security contribution. They go on the header of every invoice and decide what the plan sets aside for the tax office.
Your clients: name, tax id, email, address and payment terms. They are who you invoice. Without them there is no invoice.
The invoices you issue and the expenses you record: line items, amounts, VAT, retention, dates, category and any notes you write. It is the app. It is also what computes your 303 and your 130.
The photos of the tickets and invoices you scan, for as long as the expense exists. They are the expense's receipt. A dismissed scan is deleted after thirty days.
Your answers to the initial questionnaire: approximate income and expenses, what you do with your tickets, your regime and your goal. The tax plan is computed from them.
A device identifier, generated by the app or the browser. It is what identifies you before you sign in, so you can use Factuly without giving an email address.
If you sign in with Apple or Google: your identifier with that service, your email and your name if the provider hands it over. So your data follows you to another phone or to the web.
Usage events: which screen was opened, which questionnaire step was answered, whether a subscription was bought. With the app version, the platform and the language. To learn where people get stuck. They never carry your name, your clients or exact amounts.

What Factuly does not do

About scanning tickets

When you photograph a ticket or a received invoice, the image is sent to a document-reading model to be turned into a draft you confirm or dismiss. The model receives the image and nothing else: not your name, your clients or your other expenses, and its provider does not keep it to train anything. The draft is yours from the moment you confirm it; until then it is provisional and you can throw it away.

Where it is stored

In a PostgreSQL database hosted on servers in the European Union, operated through the Fundaia platform. Connections are encrypted (TLS). Your session tokens are kept in the iPhone's own keychain or in your browser's local storage, not on the server.

Who it is shared with

WhoWhat they receiveWhat for
Apple What an in-app purchase requires and, if you use it, Sign in with Apple. Charging the subscription and letting you in.
Google Only if you use Sign in with Google: your email and your name. Letting you in.
RevenueCat On the iPhone: your Factuly user identifier and the state of your subscription. Knowing whether you have paid. It receives none of your invoices or expenses.
Stripe On the web: your Factuly user identifier and what you type on its payment page (email, card and, if you give them, your name or company name, billing address and tax ID). Charging the subscription, issuing its invoice and letting you manage it. It receives none of your invoices or expenses.
Resend The emails Factuly sends for you or to you: the invoices and quotes you send to your clients, and the notice that your free trial is ending. Delivering them.
The provider of the reading model The image of the ticket you scan. Reading it. Nothing else.
Your clients The invoices you choose to send them, with your tax details on the header. Getting paid. It is what the law requires of an invoice.

Nobody else. There are no ad networks, no tracking pixels and no third-party SDKs beyond RevenueCat's on the iPhone. On the web you pay on Stripe's page, outside Factuly.

For how long

For as long as you have the account. When you delete it, everything goes: tax details, clients, invoices — issued ones included —, expenses, photos, the plan, the questionnaire answers and the linked identities. No copy is kept "just in case". Keeping your invoices for the years the tax office requires is your obligation, not Factuly's: download the PDFs before you delete the account.

Your rights

You can delete your account and all your data from the app itself, under Profile, without writing to anybody and without waiting. You also have the right to access your data, correct it, object to its processing and take it with you; write to us and we hand it over.

If you believe we have not done this properly, you can complain to the Spanish data protection authority (aepd.es).

Children

Factuly is a tool for freelancers, is not aimed at anyone under 18 and does not knowingly collect data from them.

Changes

If this policy changes in a way that matters, the app tells you before the change affects your data.