Paperlatch Privacy Policy

Summary: Paperlatch does not collect your data. Everything you open, scan, sign, or search stays on your device. We operate no servers for this app and receive nothing from it.

What we collect

Nothing. Paperlatch contains no analytics, advertising, or crash-reporting software, has no user accounts, and no third-party code of any kind. It makes no network requests of its own. On Mac it ships without the outbound-network entitlement, so the operating system itself prevents the app from connecting anywhere.

Where your documents live

Documents you scan or import are stored in the app's private storage and protected by Apple's on-device file encryption.

The Context Vault

Information you save in the Context Vault — such as your name, address, date of birth, or Social Security number, so the app can fill in forms for you — is additionally encrypted with a key held in your device's Keychain. That key never leaves the device and is never synced to iCloud.

One consequence you should know about: because the key is marked this device only, restoring a device from backup will not restore access to your vault. The encrypted data comes back; the key does not. Paperlatch detects this and tells you.

The search index

To make search fast, Paperlatch keeps a local index of the text of your documents. That index is protected by Apple's file encryption and is deliberately excluded from your iCloud and iTunes backups. The text inside it is not separately encrypted by the app.

Permissions

Paperlatch requests exactly two permissions:

• Camera — only to scan paper documents and receipts into local PDFs. Scans are not uploaded.
• Contacts — only to place mailing addresses onto label sheets. Contacts are not uploaded.

It requests no photo library, microphone, location, health, motion, speech, Face ID, or tracking access.

On-device intelligence

Text recognition and the app's writing and summarizing helpers run on-device using Apple's Vision, Natural Language, Core ML, and Foundation Models frameworks. Your documents are never sent to Paperlatch servers or to any third-party AI service.

When data does leave your device

We would rather enumerate these than claim the app is hermetic.

• You share, print, or export a file. It goes wherever you send it.
• Handoff, which is off by default. When enabled, it carries only your page position, zoom, current tool, and two non-reversible hashes. No document content and no filename.
• The Apple Watch companion. It receives counts, a non-reversible document hash, and the document's display filename. A filename can itself be sensitive — for example Jane-Doe-W9.pdf. No document text or recognized text is ever sent. The watch stores nothing.
• Spotlight. Recent-document titles are written to your device's own search index. Nothing is submitted to Apple's public web index.
• Purchases, which Apple's App Store processes. Receipt validation happens on-device. We never see your payment details.

“Make safe to send” is not redaction

This is important enough to state on the privacy page. The feature removes document metadata, annotations, and interactive form fields. It does not remove the original text of the document, which remains present and extractable in the exported file. It also does not specifically scrub EXIF or GPS data embedded in images inside a PDF. Do not rely on it to hide information.

Passwords

If you open a password-protected PDF, the password is used to unlock that document and is not saved.

Purchases

Paperlatch offers optional Plus subscriptions (monthly and yearly) and Local Edition as a one-time purchase. Apple processes all payments and tells the app only whether an entitlement is active. Subscriptions renew automatically until cancelled; you can manage or cancel them in your Apple account settings.

Accounts and deletion

Paperlatch has no accounts and no sign-in. There is nothing for you to create and nothing for us to delete, because we never receive your data in the first place. Deleting the app removes its data from your device.

Backups

Your documents live in the app's normal storage and are therefore included in your device's iCloud or computer backups. The search index is excluded from backups. The Context Vault's encryption key is never backed up. Backups are governed by Apple's privacy policy, not ours.

Your rights

Privacy laws such as the GDPR and CCPA give you rights to access, correct, export, and erase personal data that a company holds about you. We hold none. We operate no servers that receive data from this app, so there is no record of you for us to produce, correct, or erase. If you believe otherwise, write to us and we will investigate.

We do not sell or share personal information, and we do not process it for targeted advertising.

Changes to this policy

If we change what Paperlatch does with your data, we will update this page and change the date above. Material changes will also be noted in the app's release notes.

Contact

Questions about this policy: privacy@rocketcitydefensesolutions.com
Support: support@rocketcitydefensesolutions.com

Rocket City Defense Solutions LLC