Privacy policy

Last updated 4 November 2026

Hordva is a private vault for passports, cards, IDs, documents, photos, videos and notes. It is built so that we, the people who make it, never receive anything you put in it. On the App Store its privacy label is Data Not Collected.

What Hordva stores, and where

• On your device, encrypted. Every field, note and file is sealed with AES-GCM before it is saved. The key is created on your device and kept in its Keychain, protected by the Secure Enclave. Content is decrypted in memory only while Hordva is unlocked.
• In your own private iCloud, if you use iCloud. To sync between your devices, Hordva saves already-encrypted records in your private iCloud database through Apple’s CloudKit. Only your devices can decrypt them. You choose which categories sync; photos and videos are off until you turn them on. Hordva also works fully without iCloud.
• Your password. Your Hordva password is never stored or sent anywhere. It is used on your device to protect the key so your other devices can unlock it.

What Hordva never does

• No servers. Hordva has none, so there is nowhere for your data to go but your devices and your iCloud.
• No accounts, no sign-up, no email address.
• No analytics, no crash reporting, no advertising, no tracking, no third-party code.
• No selling or sharing of data. We never have it.
• Nothing from your vault in notifications, Spotlight, Siri, widgets or the app switcher.

Scanning and Ask stay on the device

When you scan a card or a passport, the text is read on your device with Apple’s built-in tools. Nothing is uploaded to read it.

Ask answers questions such as “Maya’s passport expiry?” with Apple’s on-device model only. It does not use Private Cloud Compute or any server. Hordva finds the matching items itself and passes only those to the model, in memory. Nothing is written to disk, and the conversation is cleared when Hordva locks. On devices that can’t run the on-device model, Ask is hidden.

Apple Watch gets text only

Your iPhone sends your Apple Watch only the text fields of the items you choose (your favourites and the items you add in Settings › Apple Watch), encrypted, over Apple’s WatchConnectivity. Photos, videos, files and scans never go to the watch. Hidden fields stay on your iPhone unless you allow them. Removing an item on iPhone removes it from the watch.

Purchases

The trial and Hordva Plus are handled by Apple through the App Store. We receive no payment details and no personal information. Apple’s own privacy policy covers your purchase.

How to erase everything

• Erase all in Settings › Security (your Hordva password is required) removes Hordva’s data from the device and its records from your iCloud, on every device.
• Deleting the app removes its data from that device. To remove the iCloud copy too, use Erase all first, or delete Hordva’s data in your device’s iCloud storage settings.
• If you turn on Erase after 10 tries, ten wrong passwords erase the data on that device (the iCloud copy is kept).

Children

Hordva does not collect data from anyone, including children.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Hordva is published by ACMINC.ca. For any question about privacy, email [email protected].