Privacy Policy

Last updated September 12, 2026

This Privacy Policy explains how Toolbyte collects, uses, and protects information across every tool in the suite — this site and its tools:

  • toolbyte.io — this site
  • toolbyte.io/invoices — Toolbyte Invoices
  • toolbyte.io/qrcode — Toolbyte QR Studio
  • toolbyte.io/receipts — Toolbyte Expenses

These tools share one account system, so this single policy covers all of them.

1. Who runs Toolbyte

Toolbyte is an independent project operated by Keenan Pinto ("we", "us"). For any privacy question or request, contact toolbyte.app@gmail.com.

2. Cookieless visit counting with Umami

toolbyte.io is a static page. It doesn't create an account or set a tracking cookie. It does load Umami, a cookieless, privacy-focused analytics script, on every page across all four Toolbyte apps, so we can see how many people visit and which pages they land on — see "Umami analytics" under section 5 for exactly what that sends and to whom. Beyond that, the only thing this page stores in your browser is your light/dark theme choice (see "Cookies and local storage" below).

3. Your account

When you create a Toolbyte account with an email address and password, that one account works across every Toolbyte tool. We store your email address; your password is handled by our authentication provider and is never visible to us in plain text.

4. What each tool collects

Toolbyte Invoices

  • The business details you set up: name, address, business/tax ID, bank details, and any logo you upload.
  • Customers, products, and line items you choose to save for reuse.
  • The invoices, estimates, and credit notes you create, including their contents.
  • If you build an invoice before signing in (our free, no-sign-up builder), that draft lives only in your browser until you choose to create an account and save it — at that point it's uploaded to your new account and cleared from your browser.

Toolbyte QR Studio

  • If you sign in: the QR codes you choose to save — their label, content, style settings, and a small preview image — capped at your most recent 20 saved codes on the free plan.
  • If you don't sign in: the same information, kept only in your browser.
  • Bulk CSV generation runs entirely in your browser. Files you upload there are never sent to us.
  • Pro dynamic codes record a scan each time someone opens the printed code, so you can see where interest is coming from — and we've kept this deliberately minimal: each scan stores only the country and a coarse device kind (iOS, Android, or other). We never record the IP address, the raw device or browser identifier, or anything that could identify who scanned it, and no cookie is set to do so.

Toolbyte Expenses

  • The receipt images or PDFs you upload, and the details you enter for each one (merchant, date, amount, currency, category, note).
  • The expense-claim reports and PDFs you generate from your receipts.
  • If you use the tool before signing in, up to 5 receipts are kept only in your browser. If you then create an account, they're uploaded to it and cleared from your browser.

5. Where this data is stored

All account data, saved records, and uploaded files are stored with Supabase, our database, authentication, and file-storage provider, in their EU (Ireland) region. The apps themselves are hosted on Cloudflare. Supabase also sends account emails on our behalf (sign-up confirmation, password reset). We don't sell your data, and we don't share it with anyone else for advertising or marketing.

The fonts on this site are bundled with the app rather than loaded from a third party, so no font request leaves your browser.

Umami analytics

Every page of Toolbyte — toolbyte.io and its /invoices, /qrcode and /receipts tools — loads a script from Umami (operated by Umami Software, Inc., based in the United States) on every page. Loading that script sends Umami the page you're on, the referring page, your browser, operating system and device type, and a coarse country of origin. As with any request to a server on the internet, your IP address is included in that request, but Umami's own privacy policy states it doesn't use cookies and doesn't retain IP addresses — it uses them only transiently to work out the country before discarding them. We chose Umami because it doesn't build an advertising profile of you and doesn't track you across other websites.

6. Payment processing

If you subscribe to Toolbyte Pro, Stripe handles the checkout and processes your payment. We never see or store your card details — Stripe collects those directly. We store the subscription record it gives us back: your Stripe customer and subscription IDs, the plan status, and the current billing period. Stripe's own privacy policy governs the payment details it holds.

7. Cookies and local storage

Toolbyte doesn't use advertising or analytics cookies. The apps use your browser's local storage for a few small, functional things:

  • Your light/dark theme choice, shared across every Toolbyte tool.
  • Draft data for the sign-up-free tools (a guest invoice, guest QR history, or guest receipts) until you save it to an account.
  • Your sign-in session, so you stay signed in between visits.

None of this is used to track you across other websites.

8. How long we keep data

We keep your account and the records in it for as long as your account exists. If you'd like your account and everything in it deleted, email toolbyte.app@gmail.com and we'll do it — Toolbyte doesn't yet have a self-service "delete my account" button.

9. Your rights

If data protection law where you live gives you rights over your information — to access it, correct it, delete it, or get a copy of it — email toolbyte.app@gmail.com and we'll act on it.

10. Children

Toolbyte isn't directed at children, and we don't knowingly collect information from anyone under 16.

11. Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top. Continuing to use Toolbyte after a change means you accept the update.

12. Contact

Questions about this policy or your data: toolbyte.app@gmail.com