Boggling Invoices
by BogglingBrain
Invoices that never leave your phone.
Boggling Invoices makes proper invoices on your phone and keeps every record on the phone itself. No account to create, no server to sign into, no sync. Your customers, your prices and your invoice history are stored in an encrypted database on your device, and none of it is ever sent anywhere.
Coming to Android.
What it does
Invoicing
Save your customers and products once, then build invoices from them. Every invoice becomes a PDF you can share, print or email.
Payments and receipts
Record payments against an invoice and issue a receipt. PDFs are rebuilt from your records on demand, so nothing is stored twice.
Records that lock on send
Once an invoice goes out, its record locks. What you sent and what you keep can never drift apart.
Multi-business
Run more than one business from the same app, each with its own customers, products and invoice history.
Every claim on this page is checkable.
Most apps ask you to trust a paragraph. These are things a sceptic can verify.
It works in flight mode — try it
Turn off every radio on your phone and use the whole app. Every feature that touches your records behaves exactly the same, because none of them was ever going anywhere.
The app never asks you to approve a permission
No storage, no camera, no contacts, no location — nothing in it will ever show you a permission prompt. Check it in your phone's app settings, or in the store listing's permissions section. Its manifest declares four install-time entries, all of them there for Google's own billing and update libraries, and none of them granting access to anything on your phone; the privacy policy lists them one by one. Choosing a file and sharing a document both use the system picker, which needs no standing permission.
ChaCha20-Poly1305, key in the Android Keystore, never leaves the device
The database is encrypted at rest. The key is generated on your device the first time you open the app and is held in the Android Keystore.
Automatic Drive backup is switched off, so not even the phone uploads a copy
Android normally copies an app's data to Google Drive on its own. Boggling Invoices turns that off.
Two things reach Google, and the app lists both
The app asks the Play Store already on your phone whether a newer version exists, which you can switch off under Settings → Check for updates, and it contacts Play at the moment you buy or restore the one-time unlock for a second business. Nothing about you or your records is included in either. Settings → Network activity in the app spells this out, and there is nothing else on the list.
We can't see your data — not "we promise not to look"
There is no server holding it. We could not hand your records over if we were asked to, because we do not have them.
Checked on every build: if an analytics or advertising library were added, or an unexpected server address appeared anywhere in the source, the release build would fail.
Backups you make yourself
Export an encrypted backup file from Settings → Backup. You choose a passphrase, and you choose where the file goes — a cloud drive, a computer, an email to yourself, anywhere. The file is encrypted with your passphrase before it leaves the app.
Once you send that file somewhere, it is governed by whatever service you sent it to. Choose a destination you trust.
What it doesn't do
Worth knowing before you install, not after.
- No sync. Records live on one device. Moving to a new phone means restoring your own backup.
- No multi-user. One person, one device. There are no shared accounts or team access.
- No reports yet. You can see your invoices and payments, but there is no reporting or analytics layer.
- English only. No other languages at launch.
- No web version. The app is Android only.
Frequently asked questions
Does it need an internet connection?
No. You can create, share and manage everything in flight mode. The only two moments the app touches the network are the optional check for a newer version in the Play Store and the one-time purchase that unlocks a second business — neither sends anything about you or your records, and neither is needed to use the app.
Do I need to create an account?
No. There is no account, no sign-in, and no server to sync with. Open the app and start invoicing.
How is my data protected on the device?
Your database is encrypted at rest using ChaCha20-Poly1305. The encryption key is generated on your device the first time you open the app and is held in the Android Keystore. The key never leaves your device and we never see it.
Does it back up to Google Drive?
No, and that is deliberate. Android normally copies an app's data to Drive automatically; Boggling Invoices switches this off. The encryption key stays in the device keystore and is never included in those backups, so a database restored that way could never be decrypted anyway. Use the app's own encrypted backup instead.
What happens if I lose my phone?
If you have an encrypted backup file and its passphrase, you can restore. If you don't, the data is gone — we hold no copy of your records and no copy of your passphrase, so there is no support process that can retrieve them.
Can I run more than one business from it?
Yes. Each business keeps its own customers, products and invoice history within the same app.
What permissions does the app request?
It never asks you to approve one — no storage, no camera, no contacts, no location. Picking a file to restore from and sharing a document both use the system's own picker and share sheet, which grant access to the single file you select at the moment you select it. Its manifest declares four install-time entries: INTERNET and ACCESS_NETWORK_STATE, required by Google's billing and update libraries; com.android.vending.BILLING, for the one-time unlock; and one generated by an Android support library, scoped to the app alone. None is a permission Android asks you to grant and none gives the app access to anything on your phone; the privacy policy explains each in full.
Read it before you trust it.
The privacy policy says what the app does and what it cannot do, in plain language.
View Privacy Policy