Privacy Policy
Privacy Vault · Last updated 25 June 2026
Privacy Vault collects no personal data, contains no analytics or tracking, and cannot send your information anywhere. This policy explains why — and what that means for you.
The short version
Privacy Vault is a document vault that runs entirely on your device. We — RiteUp AI — operate no servers, receive no data from the app, and have no ability to access your documents, your searches, or anything you store. The app ships without the network-client entitlement, so the operating system physically blocks it from making any outbound network connection.
Data we collect
None. Privacy Vault does not collect, transmit, sell, share, or have access to any personal data. Our App Store privacy label and bundled Privacy Manifest (PrivacyInfo.xcprivacy) declare:
| Category | Status |
|---|---|
| Tracking | None. The app does not track you across apps or websites. |
| Tracking domains | None. |
| Data collected and linked to you | None. |
| Data collected and not linked to you | None. |
| Analytics / crash reporting / advertising | None. No third-party SDKs of any kind. |
Where your information lives
- On your device. Documents, scans, extracted text, and search indexes are stored locally. Scanned images are encrypted with AES-GCM 256-bit before being written to disk, using a key held in the device Keychain (
kSecAttrAccessibleWhenUnlockedThisDeviceOnly) that cannot be extracted or backed up off the device. - In your own iCloud, only if you turn on sync. Sync is off by default. If you enable it, document text and images are encrypted by the app with a separate AES-GCM 256-bit key before upload, and stored in your private CloudKit database inside your personal iCloud account. Apple stores only ciphertext and cannot read your documents; we never receive them. Your use of iCloud is also governed by Apple’s Privacy Policy and iCloud terms.
- Preferences. A small number of settings (e.g. whether you’ve seen onboarding) are stored locally via iOS/macOS
UserDefaults. This is the only API-access reason declared in our Privacy Manifest (Apple reasonCA92.1).
On-device processing
All intelligence runs locally using Apple frameworks — Apple Intelligence (FoundationModels), Vision (OCR), and Natural Language (semantic search embeddings). Your documents are never sent to RiteUp AI, to Apple’s servers, or to any cloud AI provider for processing.
Device permissions
- Camera — used only when you scan a document. Images are processed on-device and stored encrypted; nothing is uploaded.
- Calendar — used only when you choose to create an expiry-date alert. The app writes the event you request and reads nothing else.
- Face ID / Touch ID — used locally to unlock the app. Biometric data never leaves the Secure Enclave and is never seen by the app or by us.
Purchases
Privacy Vault offers a single one-time purchase (“Full Access”) processed entirely by Apple through the App Store. Payment, billing, and your Apple Account details are handled by Apple under Apple’s terms; RiteUp AI never receives your payment information or any data identifying you. Purchase validation happens on-device through StoreKit.
Children’s privacy
Privacy Vault does not collect data from anyone, including children. Because no information is collected or transmitted, the app does not knowingly gather personal information from children under 13 (or the equivalent minimum age in your jurisdiction).
Your rights
Privacy regulations such as the GDPR and CCPA grant rights to access, correct, or delete personal data held about you. Because we hold no data about you, there is nothing for us to retrieve, export, or erase. To delete everything the app stores, remove documents within the app or delete the app from your device; if you enabled iCloud sync, you can also remove the app’s data from your iCloud account in system settings.
Changes to this policy
If this policy changes, we will update the “Last updated” date above and post the revised version at this URL. Material changes will be reflected before they take effect.
Contact
Questions about this policy? Email support@riteupai.com.