Arenk · VisaVault

Privacy
Policy

Effective date: 30 April 2026  ·  Last updated: 30 April 2026
The short version: VisaVault is designed from the ground up to keep your data private. Your travel documents are stored locally on your device only. We do not operate servers that receive your document data. We collect no analytics, no telemetry, and no personal data beyond what you optionally provide through Apple's built-in services.

1. Who We Are

VisaVault is an iOS application developed and published by Arenk Ltd, a UK-based technology company. References to "we," "us," and "our" in this Privacy Policy refer to Arenk Ltd. If you have any questions about this policy, please contact us at visavaultsupport@arenk.co.uk.

2. Information We Do Not Collect

By design, VisaVault does not collect, transmit, or store any of the following on our servers:

  • Passport numbers, nationalities, or expiry dates
  • Visa information, permit details, or travel history
  • Device identifiers, IP addresses, or location data
  • Usage analytics, crash reports, or behavioural telemetry
  • Names, email addresses, or any personal identifiers

We do not integrate any third-party analytics SDKs (such as Firebase Analytics, Mixpanel, or Amplitude) into VisaVault.

3. Data Stored on Your Device

All document data you enter into VisaVault is stored exclusively on your device using Apple's SwiftData framework. This includes:

  • Passport records (nationality, type, issue/expiry dates, issuing place, notes)
  • Visa records (destination, visa type, entry count, duration, status)
  • Residence permit records (country, permit type, validity dates)
  • App preferences and settings

Sensitive fields (such as passport numbers and visa numbers) are additionally protected using Apple's Keychain Services, which provides hardware-level encryption on your device.

4. Biometric Authentication

VisaVault optionally supports Face ID and Touch ID via Apple's LocalAuthentication framework. If you enable the biometric app lock:

  • No biometric data is ever accessed or stored by VisaVault
  • Biometric evaluation is performed entirely by iOS and the Secure Enclave
  • We receive only a success or failure result — never your biometric data itself

5. Optional iCloud Sync

VisaVault offers an optional iCloud Sync feature, which is disabled by default. If you choose to enable it:

  • Your document data is synced to your personal iCloud account via Apple's CloudKit
  • This data is stored in your private iCloud container, not accessible to Arenk
  • Apple's iCloud data handling is governed by Apple's Privacy Policy
  • You can disable iCloud Sync at any time in the app Settings
  • Disabling sync does not delete existing data from iCloud — you can remove it through your device's iCloud settings

6. Sign in with Apple

VisaVault offers an optional Sign in with Apple feature for account identification. If you choose to use it:

  • Apple authenticates you and provides us with a unique, app-specific identifier
  • You may choose to share or hide your email address; if you hide it, Apple provides a private relay address
  • We use this identifier only to associate your iCloud sync container — no email marketing, no profiling
  • Sign in with Apple is entirely optional; you can use all core features of VisaVault without an account

7. Push Notifications

VisaVault can send local push notifications to remind you of upcoming document expiry dates. These notifications are:

  • Scheduled entirely on-device using Apple's UNUserNotificationCenter
  • Never routed through Arenk's servers
  • Sent only if you grant notification permission
  • Fully controllable in iOS Settings → Notifications → VisaVault

8. In-App Purchases

VisaVault offers premium subscriptions and a lifetime purchase through Apple's App Store using StoreKit 2. All payment processing is handled entirely by Apple. Arenk does not receive or store your payment card details. Purchase history and entitlements are managed by your Apple ID account.

Apple's handling of payment data is governed by Apple's Privacy Policy.

9. Travel Information & Rules Data

VisaVault bundles a set of travel access rules (AccessRules.json) that is distributed with the app. This data is static and read-only. No personal data is transmitted when the rules engine computes your travel access — computation occurs entirely on-device.

10. Children's Privacy

VisaVault is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at visavaultsupport@arenk.co.uk and we will take steps to delete such information.

11. Your Rights

Because all your data is stored locally on your device, you have direct and complete control over it. You can:

  • Access your data at any time within the app
  • Edit or delete individual documents at any time
  • Delete all data via Settings → Data Management → Delete All Data
  • Export your data by deleting the app (iOS will remove the local SwiftData store)
  • Revoke iCloud Sync at any time in app Settings
  • Delete your Sign in with Apple account via the in-app account deletion flow (Settings → Account → Delete Account)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with applicable data protection laws, you may have additional rights, including the right to access, rectify, restrict processing of, or object to our processing of your personal data. To exercise any such rights, contact us at visavaultsupport@arenk.co.uk.

12. Data Security

VisaVault uses multiple layers of security to protect your data:

  • All document data is encrypted at rest by iOS's data protection mechanism
  • Sensitive fields are additionally stored in the Apple Keychain
  • Optional biometric app lock prevents unauthorised app access
  • Optional iCloud Sync uses Apple's end-to-end encrypted CloudKit private database

13. Data Retention

Your document data is retained on your device for as long as you use the app or until you delete it. Arenk does not hold copies of your data on any server, so there is no server-side retention period to describe. If you delete the VisaVault app, iOS will remove all associated local data. If you have iCloud Sync enabled, a copy may remain in your iCloud account until you remove it.

14. Third-Party Services

VisaVault integrates with the following Apple platform services only:

  • Apple CloudKit (optional iCloud Sync)
  • Apple StoreKit 2 (in-app purchases)
  • Apple Sign in with Apple (optional account)
  • Apple UNUserNotificationCenter (local push notifications)
  • Apple LocalAuthentication (Face ID / Touch ID)

We do not integrate with any non-Apple third-party services, advertising networks, or data brokers.

15. International Transfers

Because Arenk does not collect or process your personal data on our servers, we do not transfer your personal data internationally. If you use iCloud Sync, Apple may store your data in data centres globally in accordance with their privacy policy and applicable law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the App Store release notes or within the app. Your continued use of VisaVault after any changes constitutes your acceptance of the updated policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: