Summary
Heritage Vault keeps your collection on your own device. There is no account, no server of ours, and no analytics. We cannot see your data, because it is never sent to us.
Who we are
Heritage Vault is an independent iOS application made by Edvard Thordén. Contact: edvard.thorden@me.com
What the app stores, and where
Everything you enter — item titles, categories, condition, acquisition dates and prices, currencies, valuations, insurance cover, provenance, beneficiaries, notes, photographs and attached documents — is stored on your device.
It is encrypted at rest with AES-256-GCM. The encryption key is held in the device keychain, marked as available only while the device is unlocked, and is not synchronised to other devices.
What we collect
Nothing. Heritage Vault has no account system, no sign-up, no login, and no server operated by us. We receive no personal information, no collection data, no usage statistics, no crash reports and no advertising identifiers. The app contains no analytics or tracking SDKs of any kind.
iCloud sync (optional, off by default)
If you switch on Settings › iCloud Sync, your collection is copied to your own private iCloud database under your Apple Account, so your other devices signed in to the same account can see it.
- This is Apple's CloudKit service. The data sits in your private database, not in any account of ours, and we have no access to it.
- Apple's handling of it is governed by Apple's own privacy policy.
- Sync is off until you turn it on, and you can turn it off again at any time.
Exchange rates — the one outbound request
When you use more than one currency, the app fetches daily reference rates from api.frankfurter.dev, which republishes European Central Bank rates.
- The request contains one currency code and nothing else. No item, no amount, no identifier and no personal information is sent.
- As with any network request, that service will see the IP address the request comes from. We do not control or receive that information.
- Rates are cached on the device and reused offline.
Photographs and camera
The app asks for camera and photo library access only when you add a photograph to an item. Photographs you add are stored in the app's own container on the device. The app does not read your photo library otherwise.
Face ID and Touch ID
Version 1.0 does not lock itself behind Face ID or Touch ID; the app opens directly into your collection. Should a future version add an app lock, biometric data is handled entirely by iOS and never reaches the app — the app would only ever receive a yes or no.
Sharing and disclosure
We do not sell, trade or transfer your information, because we do not have it. Data leaves your device only when you choose to send it:
- exporting or sharing a file, a PDF or a photograph, to wherever you send it
- turning on iCloud sync, which copies it to your own iCloud storage
Your data, your control
- View and edit: everything is in the app.
- Export: Settings › Export & Import writes CSV or JSON.
- Delete: remove individual items, or erase everything with Settings › Danger Zone › Erase All Data.
- Remove entirely: deleting the app removes its data from the device. If you used iCloud sync, remove the app's data from iCloud in iOS Settings › your name › iCloud.
There is no account to delete, because there is no account.
Retention
Your data stays on your device until you delete it. We hold nothing, so we retain nothing.
Children
Heritage Vault is not directed at children under 13, and collects no personal information from anyone.
GDPR and CCPA
Because the app collects no personal data and we operate no server, there is no data of yours for us to access, rectify, erase, port or restrict — those rights are exercised directly in the app, where all the data lives. Where iCloud sync is enabled, the data is held by Apple under your own Apple Account and your rights there are exercised with Apple.
If you believe this is not the case, write to edvard.thorden@me.com.
Changes to this policy
If this policy changes, the updated version will be published at https://heritagevault.thorden.se/privacy and included in the next app update. Because we hold no email addresses, we cannot notify you directly.
Contact
Email: edvard.thorden@me.com Website: https://heritagevault.thorden.se
Effective date
This Privacy Policy is effective as of 20 September 2026.