Last updated: September 16, 2026
TaxVault holds receipts and expense records, which is some of the most sensitive material a person keeps on a phone. It stores all of it on your device and sends none of it anywhere.
Receipts are captured with the camera or imported from your photo library, and the text is read with Apple's Vision framework, which performs recognition on the device. The merchant, date, total and tax it extracts are stored locally. No image and no recognised text is transmitted.
Receipts live in a local database inside the app's sandbox, marked with iOS complete file protection. That is Apple's hardware-backed encryption: while the device is locked, the file cannot be read, and the key is tied to your passcode. To be precise about who does what, this protection is provided by iOS rather than by TaxVault's own code.
When you export a backup, TaxVault encrypts it with AES-GCM using a key derived from your password with PBKDF2-HMAC-SHA256 at 210,000 iterations and a random salt generated for that file. The password is never stored and never transmitted, which also means we cannot recover it. If you lose it, that backup cannot be opened by us or anyone else.
TaxVault contains no networking code, no analytics, no crash reporting and no third-party SDK. There is no account and nothing to sign into. It works in Airplane Mode.
TaxVault is a one-time purchase on the App Store. Payment is handled entirely by Apple. We never see your payment details.
TaxVault is rated 4+ and collects no personal information from anyone, including children, because it collects no personal information at all.
If this policy changes, the revised version appears on this page with a new date above.
Questions? Contact us at privacy@onmindstudios.com.
Onmind Studios