Vosiro, a product of SIXJ, LLC ("we", "our", or "us"), respects your privacy. This Privacy Policy explains how Vosiro handles information when you use the Vosiro app on your device.
Vosiro scans or imports your receipts, reads them on your device, and keeps a ledger of your purchases with categories, tags, notes, and warranty and return dates. Vosiro does not require an account, an internet connection, or any personal information to work. We do not operate servers that receive your receipts or ledger.
Vosiro stores the following on your device only:
This information is never used for analytics or advertising, and we do not collect it. If you contact us for support, we receive only what you choose to send, such as your email address and message.
Vosiro reads receipts with Apple's on-device text recognition (Vision). On devices with Apple Intelligence, Vosiro may also use Apple's on-device language model to read receipts and understand questions you ask. Vosiro uses only the on-device model and never Apple's Private Cloud Compute; receipt text is not sent off your device to be read.
Vosiro asks for camera access so you can scan receipts. When you choose a receipt from Photos, you pick the image yourself; Vosiro receives only the image you choose.
You can choose a backup folder, such as a folder in iCloud Drive. Before anything is written there, Vosiro encrypts it on your device with AES-256-GCM, using a key protected by a backup passphrase you choose (strengthened with Argon2id) and, if you add one, a recovery key. The folder holds a small key file with the settings needed to use your passphrase; it never contains your passphrase, your recovery key, or the unlocked key.
Vosiro encrypts your backup before it leaves your device. Your storage provider receives the encrypted files, not your readable receipts, and we have no access to them. The provider can see file names, sizes and dates, and the number of receipts by month. Storage of the folder is governed by the provider you choose (for example, Apple for iCloud Drive).
If you use the same folder on several of your devices, they keep each other up to date through it: each device writes its changes as small encrypted files in its own folder, named with the device type and a random ID (for example "iPhone-1a2b3c4d"), never your device's name. Vosiro also keeps dated encrypted copies of your receipt list in the folder (the last 7 days, and weekly copies at least 5 weeks back) so you can go back to an earlier day; older copies are removed automatically.
If you forget your backup passphrase, or lose your recovery key while it is turned on, your backup cannot be opened. We cannot recover it. The recovery key is an optional second key: when it is on, opening the backup on another device needs both the passphrase and the key.
If you choose to keep original receipts (photos or PDFs) on your device for a limited time, older originals are removed from your device only after their backup copy has been checked, and are downloaded from your backup folder when you open them.
Warranty and return reminders are scheduled as notifications on your device. They are not sent through any server.
Vosiro offers an optional App Lock with a 7-digit PIN or a pattern (separate from your backup passphrase), and Face ID or Touch ID on supported devices. Your PIN or pattern is never stored in plain text; only a salted cryptographic hash is kept in your device's Keychain. Face ID and Touch ID are handled by iOS; Vosiro never receives biometric data. The backup encryption key is kept in your device's Keychain, available on this device only.
You can share a receipt or export a PDF report or CSV spreadsheet. Nothing is shared unless you choose to share it, and where it goes is decided by you and governed by the app or service you pick. A shared receipt or PDF report can be protected with a password you choose.
Vosiro Pro is bought and managed through Apple. Apple processes the payment; we never receive your payment details, name or email address. The App asks Apple, through Apple's StoreKit on your device, only whether Vosiro Pro is active and until when, so it can allow more than 10 receipts on your devices signed in to the same Apple Account. No receipt, ledger or other personal data is sent with that check.
Entries you delete move to Recently Deleted, where they can be restored for 30 days. After that, or when you choose "Delete now", the entry and its receipt are removed from your device and from your backup folder. Deleting the app removes the data on your device; anything in your backup folder stays there until you delete it.
Vosiro contains no advertising, no analytics, and no tracking, and does not use cookies or your advertising identifier.
If you use the support form on vosiro.com, your name, email address and message are delivered to us through Formspree, a form-delivery service, so we can reply. We use them only to answer you.
Vosiro does not collect personal information from anyone, and we do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. Changes will be shown by the date at the top of this page.
If you have any questions about this Privacy Policy, email support@vosiro.com, or use our support page.
This Privacy Policy is governed by the laws of the jurisdiction in which SIXJ, LLC is organized, without regard to conflict of law principles.