ValuMinder is a private vault — documents, photos and videos, voice memos, notes,
passwords, and a calendar — encrypted on your device with a key only
you hold. Nothing is uploaded anywhere unless you turn on Plus backup.
There are no accounts, no servers we can read, no analytics, and no tracking. We are
technically unable to read your content.
Who is responsible for this app
ValuMinder is published by Daniel Paul Pop (ForgeLabsSoft).
Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom.
Email: ForgeLabsSoft@icloud.com
What the app does with your information
Everything you add — scanned documents, photos, videos, voice
memos, notes, passwords, and calendar entries — is stored encrypted on
your device (AES-256). How that key is protected depends on the unlock
method you choose. With device unlock it is held in the device's
Secure Enclave-backed Keychain and released only to Face ID, Touch ID or your
passcode.
With an app password it is not stored at all — it is derived
from your password every time you unlock, so somebody holding your device without
your password does not have it. With password + Face ID, both are required.
One exception, stated plainly: so the app can show your expiry
timeline and send reminders without being unlocked, a small index stays outside that
encryption — the dates on your documents, what kind of document
each one is, and which vault a row belongs to. Nothing in it names you or names a
document. Everything that does — the titles of your documents, notes and
passwords, your folder names, the holder's name, the username hint you can attach to a
login, and every reference number read off a document, including passport and
national-insurance numbers — is sealed with your key like the files
are, so a copy of the app's database taken off the device shows only
ciphertext.
Calendar access is full access, used only for events the app itself
creates. When you tap “Add to Calendar”, ValuMinder writes one
event — the document's title and its date, plus the location and what to bring
if it is an appointment — into your default iOS calendar, and removes it again
if you delete the document. It never reads, changes or deletes anything else in your
calendar. That event leaves the vault. If your default calendar is an
iCloud, Google or Exchange calendar, the event syncs wherever that calendar syncs,
under that provider's protection rather than ours. It only ever happens because you
asked for it, and you can delete the event in the Calendar app at any time.
Exporting or sharing a file takes it out of the vault too. When you
share, save to Photos, or build a ProofPack PDF, ValuMinder writes a readable copy for
the app you send it to. Those copies live outside the vault and are no longer covered
by it.
Documents you scan (for the Expires feature) are read
on your device to recognise text and extract key dates. This uses
Apple's on-device Vision and, on supported devices, Apple's on-device Foundation
Models. Nothing is sent to any AI service or server for this.
Passwords are encrypted the same way as everything else: logins,
generated passwords and TOTP codes are sealed with your vault key. There is no AutoFill
extension and no iCloud Keychain integration. If you turn on Plus backup, your
passwords are included in it — sealed, so that only your recovery code can
open them and neither Apple nor we can read them. If your iPhone is part of an iCloud or
computer backup, your vault is included in that backup like any other app's data —
as ciphertext that only your unlock method or your recovery code can open.
Photo Library access is read, write and delete: the app reads your
library to find documents you may want to import, writes to it when you save an
export back to Photos, and can delete an original photo or video after you import it
— only ever the specific item you chose, and only when you ask. It never touches
anything else in your library.
Reminders are scheduled as local notifications.
Their text is generic (for example “A document expires in 14 days”) so
nothing sensitive shows on your lock screen.
Optional iCloud backup & sync (Plus)
If you turn it on, backup covers your whole main vault: the documents you
track for expiry and the scans they came from, your photos and videos, voice memos,
imported files, folders, notes, passwords, and the titles and notes of your calendar
entries. It only happens if you turn it on, and only on Plus. Your
decoy vault is never uploaded, on any plan.
What you back up goes to your own private iCloud (CloudKit)
storage. Before anything leaves your device it is
encrypted with your key, so neither Apple nor we can read its contents.
Alongside the sealed contents, iCloud stores a small amount of unencrypted bookkeeping so
the pieces can be put back together — what kind of record each one is, how many parts
it has and how large it is. None of that says what an item contains or what it is called. The only way to restore on another device is with your
recovery code, which we never receive. If you never turn this on, ValuMinder
uploads nothing. Turning sync back off stops future uploads but does
not delete what was already uploaded — see Deleting your data below.
What we never do
We never collect, sell, or share your data.
We use no analytics, crash-reporting, advertising or tracking
SDKs. The app links only Apple's own frameworks.
We have no servers that can read your content.
Children
ValuMinder is rated 4+ and is not directed at children. It collects no personal data
from anyone, of any age.
Subscriptions
ValuMinder Plus is an auto-renewing subscription processed by Apple. We do not receive
your payment details.
Deleting your data
Delete a document in the app to remove it from your device, and from your iCloud
backup if that document was ever synced. Deleting the app removes the local vault.
Turning sync off stops future uploads but does not delete what was
already backed up to iCloud. To remove that, go to
Settings → [your name] → iCloud → ValuMinder → Delete Data
from iCloud, or uninstall the app and delete its iCloud data from
Settings → General → iPhone Storage.
Your rights
Because your content never reaches us, there is nothing for us to hand over, correct or
erase on your behalf — you hold and delete it yourself, using the steps above.
Where data-protection law (such as the UK GDPR or EU GDPR) gives you rights of access,
rectification, erasure, portability or objection, they apply to personal data a
controller holds about you; we hold none.
Not legal advice
ValuMinder is a document organiser and reminder utility. Extracted dates are estimates
and may contain errors — always verify against your original documents and the
authority that issued the document. ValuMinder does not provide immigration or legal
advice.
Changes to this policy
If this policy changes, the date at the top of this page changes with it. Material
changes will also be noted in the app's release notes.