Privacy Policy — Cidulka

Last updated: 4 November 2026

Cidulka ("the app") is an invoice maker for Android, published by PE Varchenko Oleksandr ("we", "the Author"). This policy explains what the app does with your data.

In short

• We do not collect your data. The app has no accounts, no servers, no analytics, no advertising and no crash reporting.
• The app does not use the internet. It does not request the internet permission and cannot send anything over the network.
• Everything stays on your device, in the app's private storage.

What data the app handles

You enter this data yourself so the app can create invoices:

• your company details (name, address, tax ID, website);
• your clients (names, addresses, email addresses, tax IDs);
• your services, prices and tax rates;
• your bank details (for example IBAN and BIC);
• the invoices you create, their numbers, dates and statuses;
• app settings (language, auto-lock delay, folder you chose).

Where it is stored

• Invoice data is stored in a database in the app's private storage on your device. It is not encrypted by the app itself; it is protected by Android's app sandbox and your device lock. Anyone who can unlock your device and the app, or who has root access to the device, may be able to read it.
• Your PIN is never stored. Only a salted hash of it is kept, in Android's secure storage (Keystore). The app locks with your PIN and, if you turn it on, your fingerprint or face. Biometric checks are done by Android; the app only receives "success" or "failure" and never sees your biometric data.
• Android backup is turned off for this app, so the data is not copied to Google's cloud backup or to another phone automatically.

What leaves your device, and only because you ask

• Save PDF: the app writes the PDF into the folder you pick with the Android folder picker. The app can reach only that folder.
• Share: when you tap Share, the PDF is handed to the app you choose in the Android share sheet (for example Google Drive or a signing app). That app and its service handle the file under their own privacy policies. We have no access to it and no control over it. A temporary copy of the PDF is kept in the app's private cache while sharing and is removed afterwards.
• Sharing or saving a PDF does not change the status of an invoice.

Sharing with third parties

We do not sell, share or transfer your data to anyone, because we never receive it. Google Play and Android may process information about your installation of the app (for example, install and update records) under Google's own privacy policy. We do not receive personal data from that.

Your clients' data

The invoices contain information about your clients. You decide what to enter and who receives the PDFs. You are responsible for having a lawful basis to process your clients' data under the laws that apply to you (for example GDPR in the EU).

Retention and deletion

Your data stays on your device until you remove it. Issued invoices cannot be deleted inside the app, because they are accounting documents. Uninstalling the app, or clearing its storage in Android settings, deletes all its data permanently. We cannot recover it, because we do not hold a copy. Keep your own copies of important invoices.

Your rights

Because we hold no personal data about you, there is nothing for us to access, correct, export or delete on our side. You have full control of your data on your device. If you believe we hold data about you, contact us (below).

Children

The app is for business use and is not directed at children.

Changes

If the app's data handling changes (for example when a backup export feature is added), we will update this policy and the date above before the change is released. A backup, if added, will be a file you create and store yourself.

Contact

PE Varchenko Oleksandr — support@varchenko.dev, https://varchenko.dev