Privacy Policy
Last updated: 24 September 2026
Coffer keeps your family’s important documents on your iPhone and in your own iCloud account. This policy explains what that means in practice.
We do not collect your data. Coffer has no accounts, no servers of ours, no analytics and no advertising. Your documents never reach us, because the app makes no network requests of its own.
What Coffer stores, and where
Everything you add — scanned pages and photos of them, the text printed on them, titles, document types and numbers, expiry dates, notes, and the names and photos of the people and things you keep documents for — is stored in two places, both yours:
- On your iPhone, in the app’s own storage, protected so that it can’t be read while your iPhone is locked.
- In the private iCloud database of your own Apple Account, if you choose iCloud in Coffer’s settings and are signed in to iCloud. This is what brings your coffer back on a new iPhone.
Before anything is saved, Coffer encrypts every page and photo on your iPhone, with a key kept in your iCloud Keychain. In iCloud, names, titles, document types and numbers, notes and the scanned text are also stored as encrypted fields, with keys held in your iCloud Keychain. Dates and categories are stored in your private database with iCloud’s standard protection. Apple provides that storage; we cannot read it, list it or recover it, and we have no administrative view of your data of any kind.
If you choose “This iPhone only”, or are signed out of iCloud, Coffer works fully and keeps everything on the device. Nothing is sent to iCloud, and nothing is backed up by Coffer either — so a lost iPhone is a lost coffer.
Reading your documents
Coffer reads the text on a scan, and suggests its type, number and expiry date, on your iPhone. On iPhones with Apple Intelligence, Coffer uses Apple’s on-device model for this and for searches like “Jordan’s car insurance”; it runs on the iPhone itself. No page, and no word on it, is sent to us or to anyone else to be read.
Permissions
- Camera — only to scan pages, and only when you choose to scan.
- Photos — Coffer uses the system photo picker, so it sees only the photos you pick, never your library.
- Files — only the files you choose to import.
- Notifications — only for the expiry reminders you turn on. They are scheduled on your iPhone and never say whose document it is or what it’s called (“A licence expires in 18 days”).
- Face ID or passcode — to lock Coffer. Apple’s Face ID data never reaches the app.
What we receive
Nothing that identifies you or your documents. Coffer contains:
- No analytics or telemetry. We do not measure usage, sessions, screens, crashes or events.
- No advertising or tracking. No ad networks, no advertising identifiers, no cross-app tracking, and no data sold or shared with anyone.
- No third-party code. Coffer is built only with Apple’s own frameworks.
- No account. There is nothing to sign up for and no email address to give us.
If you choose to share crash reports or TestFlight feedback with developers through Apple’s settings, Apple passes those to us under Apple’s privacy policy. If you email us, we see what you send, and use it only to reply.
Purchase
Coffer is paid for once, on the App Store. There are no in-app purchases and no subscription. Apple handles the payment; we never see your name or payment details.
Sharing a copy
When you share, print or export a document, Coffer makes the copy on your iPhone and hands it to the destination you choose — Mail, Messages, a printer, Files. From there, that destination’s privacy policy applies. Copying a document number puts it on this iPhone’s clipboard only, and it clears itself after two minutes.
The Lock Screen widget
The widget shows only how many days until your next renewal and how many documents need attention — never a title, a name or a picture of a page.
Deleting your data
- A deleted document stays in Recently deleted for 30 days, then is removed from your iPhone and your iCloud.
- Deleting the app removes everything from the iPhone.
- To remove Coffer’s iCloud data as well: Settings → [your name] → iCloud → Manage Account Storage → Coffer → Delete Data.
Children
Coffer is not directed at children, and it collects no data from anyone.
Changes
If this policy changes, this page will say what changed and when. A change that collected data would also have to change Coffer’s privacy label on the App Store.
Contact
Sam Daniel Mathew — sdm.thayyil@gmail.com