Privacy Policy
VaultCap by Capricorn Systems · Last updated 17 October 2026 · Applies to the VaultCap iPhone and iPad app and the VaultCap web app.
Your vault stays on your device, encrypted. VaultCap has no accounts, no servers that store your vault, no analytics, no advertising and no tracking. We cannot see, recover or sell your data.
What we collect
- Nothing. Capricorn Systems does not collect, receive or store any personal data or vault contents. There is no sign-up, no analytics SDK and no third-party tracker in the app.
- The only data that ever leaves your device is described under Optional online features below — every one of them is off by default and only runs after you switch it on.
Where your data lives
- iPhone / iPad app: your vault is stored in the app's private storage on your device and is encrypted before it is written. Other apps cannot read it.
- Web app: your vault is stored, encrypted, in your browser's storage for this site.
- Encryption: AES-256-GCM with a random data key, unlocked by a key derived from your PIN or passphrase (PBKDF2-SHA256, 600,000 iterations). Your PIN, passphrase and keys are never sent anywhere.
- Device backups: if you use iCloud or computer backups for your iPhone, they include the app's storage — only in its encrypted form.
Optional online features (off by default)
| Feature | What is sent | To whom |
|---|---|---|
| Live exchange / metal rates | A request for public rates. No vault data. | open.er-api.com, api.metals.live, data-asg.goldprice.org |
| Fetch missing bank logos (web app) | The bank's web domain only. | Capricorn logo proxy (Cloudflare) |
| AI Smart Import assistant (web app) | Only the text you choose to import, after you confirm (once per session). Never your vault, PIN or keys. | An AI model run by Cloudflare Workers AI, via the Capricorn proxy (vaultos-llm-proxy.shamikhahmed.workers.dev) |
- These services may see your device's IP address as part of any internet request. The Capricorn proxy does not store AI import text; Cloudflare processes requests under its own terms. The iPhone and iPad app currently offers only the rates feature — AI import and logo fetching are web-app only.
- The offline Smart Parser is the default and works without any network connection. Prefer it for sensitive documents, and never paste full card numbers or passwords into AI import.
Backups, sharing and copying
- Encrypted backups (
.vos) are created on your device with a backup key only you hold. In the iPhone app you choose where the file goes through the iOS share sheet (for example Files or AirDrop). We never receive your backups. - Copying secrets: in the iPhone app, copied keys and numbers stay on this device (not synced via Universal Clipboard) and are cleared automatically after the time you set in Settings (30 seconds by default).
- Unencrypted exports (CSV / JSON) are only created after explicit warnings and typed confirmation.
Camera and photos
- VaultCap asks for camera or photo access only when you choose to attach a photo of a document or card. Images are stored inside your encrypted vault and are not uploaded anywhere.
Deleting your data
- In the app: Settings → Privacy → Reset Entire Vault permanently deletes everything on this device (also under More → Recovery Center, or from the lock screen via Forgot PIN).
- Deleting the iPhone or iPad app removes all of its data from that device.
- Web app: clear this site's data in your browser settings.
- Deletion cannot be undone — keep an encrypted
.vosbackup if you may need your data later.
Children
- VaultCap is a personal-finance and documents vault intended for adults. It is not directed at children under 13.
Changes to this policy
- If we change how data is handled, we will update this page and the date above before the change ships. Optional online features will always stay opt-in.
Contact
Capricorn Systems — support@capricornsystems.com. Include your Vault ID (Settings → About); it is not a password and cannot open your vault.