Privacy Policy

Last updated: 5 October 2026

The short version Fairbill works on your iPhone without web access. If you choose to enable web access, it uploads an online copy of your records so approved computers can use them. Web access is off by default. Scan paper notes and Read with Claude send only the photos or document you choose to be read.

Who we are

Fairbill is an invoicing app for NDIS providers, published by Blake Ritchie (ABN 20 250 285 125), Australia. In this policy, "we" and "us" mean the publisher of Fairbill, and "the app" means the Fairbill iOS application. The optional web companion is described below.

Using Fairbill on iPhone

You do not need a web account to use the iPhone app. Unless you enable web access, Fairbill does not upload your invoice records to its online service. Sharing, Apple services and device backups are described below.

What stays on your device

The app stores the following locally on your iPhone, using Apple's standard on-device storage. Enabling web access also syncs an online copy of these records:

Your local data may also be included in your device backups if you use iCloud Backup or an encrypted local backup. Those backups are governed by Apple's privacy policy, not ours.

When information leaves your device

If you share an invoice PDF or export a CSV, that file goes wherever you send it — your email app, Messages, Files, or another app you pick. We are not part of that sharing process and receive no copy from it. Optional web access separately stores the records described below. Scan paper notes and Read with Claude send the photos or document you choose to be read, as described below.

Optional web access

Enabling web access uploads client details, invoices and line items, issued PDFs and invoice history, saved shifts, usual invoices, and business and payment details. Fairbill uses this online copy to show your records on approved computers and sync changes back to your iPhone. You can also create and check invoices on the web and generate PDFs using these online records. Email preparation opens your own email app; you attach the downloaded PDF and send it yourself. Confirming that you have sent an invoice retains its issued PDF and details online.

The online service runs on Fairbill's own Cloudflare account. Its database and file storage are created in Cloudflare's Oceania region, which is served from Australia, and the service is placed alongside them. Cloudflare encrypts stored data and the connection to it. Cloudflare treats the region as a strong preference rather than a contractual guarantee, so if a service agreement requires records to stay in Australia under all circumstances, keep those records off web access.

Linking a computer requires a five-minute code and approval in the iPhone app. Browser connections expire after 30 days and can be revoked from Settings → Web access. The web app uses essential connection and linking cookies and a sidebar preference cookie. Service records include connection names and times, protected representations of access and recovery keys, and short-lived request counters. Hosting providers also process requests to deliver the service.

Your recovery code can restore access after losing a phone. Keep it private. Recovery changes the code and disconnects previous computers. Pausing web access stops syncing and disconnects computers, but keeps the online copy for when you resume. To remove it permanently, use Delete online account in Settings → Web access (Fairbill 1.1 or later).

The sample workspace uses fictional records. Sample edits stay in memory in that browser session and are not uploaded to a Fairbill account. Keep an independent backup of your own records; sync is not a backup.

Address suggestions

When you type an address on a client's screen, Fairbill can show suggestions from Apple Maps. To do this, the text you type into the address field is sent to Apple's Maps service, the same way it is when you type in the Maps app — it is not sent to us, and Fairbill stores only the address you choose. A saved address is also synced if you enable web access. Apple's handling of these lookups is covered by Apple's privacy policy. If you'd rather not use suggestions, just type the address in full — nothing is sent unless you're typing in that field.

Reading notes and invoices with Claude

Scan paper notes and Read with Claude are optional. If you use them, the photos or document you choose are sent through Fairbill's reader service to Claude, an AI service from Anthropic, so they can be read and turned into details you check in Fairbill. Nothing is sent until you choose the photos or document and tap Agree and scan.

Scanned shifts go into an invoice draft you can edit. Fairbill doesn't send an invoice automatically.

Fairbill's reader runs on Fairbill's own Cloudflare account. It does not store the photos, documents or what Claude reads from them. It keeps only what it needs to confirm requests come from the Fairbill app on a real iPhone (Apple App Attest), to prevent misuse and to apply daily limits. These features don't need web access and don't turn on syncing.

Anthropic processes this information outside Australia, including in the United States. For the commercial service Fairbill uses, Anthropic's policy is not to train its models on this information and to delete it within 30 days, unless it is flagged for misuse or must be kept by law. See Anthropic's data retention policy.

Notes and invoices can contain names, health information and other sensitive details. Only send what you're authorised to share. You can always enter the details yourself instead.

How online information is used

Online records are linked to your Fairbill account and are used to provide syncing, account access and security. Fairbill does not use them for advertising or sell them to data brokers.

Sensitive information

Client records can contain sensitive participant information. Keep your phone, linked computers, exported files and recovery code secure, and consider your obligations to participants before enabling online storage. Use a device passcode and Face ID or Touch ID, and unlink computers you no longer use.

Purchases

Fairbill Pro subscriptions are processed by Apple through the App Store. We never see your payment details. Apple provides us with anonymous, aggregated sales reporting only — it does not identify individual customers. Apple's handling of your purchase is covered by Apple's privacy policy.

Notifications

If you turn on invoice reminders, those notifications are scheduled entirely on your device. No information is sent to us or to any third party to deliver them.

Children

Fairbill is a business tool intended for adults. It is not directed at children and we do not intentionally invite children to create connections to the web service.

Optional shift descriptions

On supported iPhones, you can choose to describe a shift in words. Fairbill uses the on-device Apple Intelligence model to interpret that description, then opens an editable shift form for you to check. This feature does not send the description to Fairbill servers. If you use the keyboard microphone, Apple’s Dictation settings and privacy terms apply.

Exported backups

You can export a Fairbill backup from Settings. It contains client and invoice information. Store it securely, and remove copies you no longer need. Deleting the app does not delete backups or files you have exported or shared.

Deleting your data

In Fairbill 1.1 or later, open Settings → Web access → Delete online account. Confirm to remove all cloud invoices, PDFs, client records, saved shifts and business details, disconnect every computer and invalidate the recovery code. Your records and backups on the iPhone are kept. Keep the app open until deletion is confirmed; if interrupted, choose Retry account deletion. Sync stays stopped until cleanup finishes. An interrupted upload may need up to 15 minutes to clear before deletion can finish.

The service keeps a hashed deletion receipt, without an account ID or record content, so a lost confirmation can be retried for 30 days. Hosting database recovery backups may retain removed database records for up to 30 days; these copies are not accessible through the app.

Deleting the app removes its local records but does not remove an online account, device backups, exported files, or PDFs downloaded to a computer. An App Store subscription is managed separately in your Apple account. For access, correction, deletion assistance or a privacy complaint, contact hello@fairbill.com.au.

Changes to this policy

If we ever change how Fairbill handles information, we'll update this page and change the date at the top. We will explain material changes to collection in the app before you enable them.

Contact

Questions about privacy, or about this policy: hello@fairbill.com.au