BillVault Privacy Policy

Effective 26 September 2026

The short version

BillVault collects nothing about you. There are no accounts, no analytics, no advertising and no tracking. What you enter is stored on your device and, if you choose, in your own private iCloud. The assistant runs on the device; on iOS 27 some requests can use Apple's Private Cloud Compute, which you can switch off in Settings (see Apple Intelligence below). Nothing about you is sent to the developer or to any company other than Apple. Nothing about you is sent to the developer or to any third party.

Information the app collects

None. BillVault has no sign-up, no login and no user accounts. It does not collect your name, email address, contacts, location, advertising identifier, device identifiers or usage analytics, and it has no servers of its own.

Information you enter

Bills, subscriptions, budgets, savings goals, income, account balances, notes and payment history are stored in a database on your device. If you are signed in to iCloud, BillVault also stores a copy in your private iCloud database using Apple's CloudKit, so your other devices stay in step. That copy is encrypted by Apple, is readable only by you, and is governed by Apple's iCloud terms. You can turn it off for BillVault in Settings, and deleting the app removes the local copy.

Card details

If you use the card vault, card numbers and security codes are stored in the device Keychain, protected by the device passcode, and never leave the device. BillVault never transmits them and never uses them to pay anything.

Apple Intelligence

Bill scanning, statement import, the daily briefing, the Ask tab and Reason it through use Apple's Foundation Models. On iOS 26, and whenever you are offline, everything runs on the device: photos, statements, questions and figures are processed on your iPhone and are not sent anywhere. Every amount shown is calculated by the app itself, not by the model.

On iOS 27, the Ask tab, Reason it through, the daily briefing on Home, the drafted cancellation letters and the naming of charges when you import a statement can use Apple's larger model on Private Cloud Compute, Apple's own server system for Apple Intelligence. When that happens, your question, or the bill details the briefing or letter needs, or the charge descriptions from a statement with account numbers, phone numbers and web addresses removed, and the figures needed to answer it are sent to Apple for that one answer, then discarded. Apple designed Private Cloud Compute so that the data is not stored, is not used to train models, and cannot be read by Apple's staff; independent researchers can inspect the software it runs. Nothing goes to the developer or to any other company. You can switch this off in Settings under Apple Intelligence, and the on-device model answers instead. Scanning a bill never uses it, and photos never leave your iPhone.

Photos, camera and files

When you scan a bill, the photo is read on the device to extract the amount and due date, then discarded. Statements you open or share into BillVault are read on the device and the file is deleted after import. The app asks for camera or photo access only when you use those features.

Face ID, Touch ID and notifications

The optional app lock uses Apple's system authentication. BillVault never receives face or fingerprint data and stores no passcode. Reminders are scheduled on the device and need no internet connection.

Purchases

BillVault Pro is sold through Apple's App Store. Apple processes the payment and handles refunds; the app only learns whether Pro is active. The developer never sees your payment details.

Payment links

A bill can hold a link to a biller's own website. Opening it takes you to that site in Safari, where that company's privacy policy applies.

Company logos

So a bill looks like the company it belongs to, BillVault fetches that company's own icon from that company's own website, the same way a web browser fetches the small icon for a tab. The request goes only to the biller (for example netflix.com) and to no one else. There is no logo service, no broker and no analytics provider involved.

Nothing about you is included in that request. It carries no name, no account, no amount and no identifier from the app. As with visiting any website, the company's own server can see that a request was made and the internet address it came from. Each logo is fetched once and then kept on your device, so it is not requested again.

You can turn this off at any time in Settings under Data, with Show company logos. With it off, the app makes no network requests of this kind and uses lettered icons instead. Clear downloaded logos removes the ones already saved.

Children

BillVault is not directed at children under 13 and collects no personal information from anyone.

Changes

If this policy changes, the new version will be posted here with a new effective date. Because the app collects nothing, changes are expected to be rare.

Contact

Questions about privacy: David@app-developments.com.