Where is my data? How do I back it up?

Everything lives beside the app: card-shop.db (all records, settings, and — if configured — SMTP credentials) and the invoices/ folder (attached invoice photos/PDFs). Back up by copying both; restore by putting them back. Never commit them to a public repository.