Privacy Policy

Last updated: 18 June 2026

The short version. Kwibo has no accounts and no sign-up. Your bills, clients, and GSTINs are saved only on your own device, in your browser. We do not store them on our servers.

When you generate a PDF, the bill details are sent to our render server, used only to draw the document, and then immediately discarded. We keep nothing — there is no database, and nothing ties a bill to you.

1. Who we are

Kwibo (“we”, “us”, “our”) is a free, zero-login GST bill and invoice generator for Indian small businesses, available at kwibo.in. This policy explains what happens to data when you use it. You can reach us at [email protected].

2. What data you enter, and where it is stored

To make a bill you may enter your business details, client details, GSTINs, product/service lines, prices, dates, notes, and an optional company logo. All of this is saved on your own device — in your browser's local storage and IndexedDB. It is not uploaded to us for safekeeping, and we cannot read what is stored on your device.

Because the data lives on your device, clearing your browser data, using private/incognito mode, or switching devices will mean it is not there. You can save a backup file at any time and restore it later.

3. What is sent to our servers, and why

The one time your bill data leaves your device is when you ask Kwibo to generate the PDF. At that moment the relevant fields — business and client details (including GSTINs if you entered them), the item lines, dates, notes, the chosen language labels, and the logo if you added one — are sent to our render server.

There, the data is used solely to draw the PDF (we pass it to the Typst typesetting engine), and the working files are deleted immediately once the PDF is produced. We do not save the bill, we do not log its contents, and there is no database holding it. We never sell, rent, or share this data, and we do not use it for advertising or profiling.

4. Server logs and abuse prevention

Like almost every website, our render server keeps a basic access log for security and reliability. Each request records standard technical metadata — the time, the request path (for example /api/bills/render), the HTTP status, the response size, and how long it took. These logs do not contain your bill contents, names, GSTINs, or phone numbers.

To protect the service from abuse, we apply a per-visitor rate limit. This uses your network IP address transiently, held only in memory and discarded shortly after; it is not stored against your bills or used to identify you.

5. Analytics

If analytics is enabled on a given build, we use a privacy-constrained setup (PostHog) to count anonymous usage so we can improve the app. When this is active, the app shows an in-product notice. In all cases: we never send your bill data, names, GSTINs, or phone numbers; only coarse, anonymous usage signals (for example, that a PDF was generated, or a rough bucket of how many items a bill had). We do not build advertising profiles, and we do not attach your identity to events.

6. Contacting you (only if you ask)

Occasionally we may show a short, optional survey. If — and only if — you choose to leave a WhatsApp number so we can ask you a few questions, we store that number for that purpose. This is entirely voluntary; skip it and nothing is collected.

7. Service providers

We rely on a few infrastructure providers to run Kwibo:

Cloudflare serves the website and acts as the network edge. Your request reaches Cloudflare's servers as part of loading the site.
Fly.io hosts the render server that produces the PDF.
Google Fonts serves the web fonts used by the site; loading them involves a request to Google, which will see your IP address.
PostHog processes the anonymous analytics described above, when analytics is enabled.

These providers process data only to deliver their part of the service.

8. Cookies and local storage

Kwibo does not use advertising or tracking cookies. It uses your browser's local storage and IndexedDB to keep your bills, clients, settings, and logo on your device so the app works. If analytics is enabled, a single anonymous identifier is kept in local storage to avoid double-counting visits; it is not linked to your identity.

9. Children

Kwibo is a business tool and is not directed at children. We do not knowingly collect data from children.

10. Your control over your data

Because your data lives on your device, you are in control of it: you can edit or delete clients and bills in the app, save a backup file, restore from one, or clear the app's storage through your browser. There are no accounts for us to lock, and nothing on our side for us to hold back.

11. Changes to this policy

We may update this policy as the product evolves. The “Last updated” date above will change when we do. Significant changes will be reflected on this page.

12. Contact

Questions about privacy? Write to [email protected].