Last updated: July 9, 2026
Summary: Paperlatch does not collect your data. Everything you open, scan, sign, or search stays on your device. We operate no servers for this app and receive nothing from it.
Nothing. Paperlatch contains no analytics, advertising, or crash-reporting software, has no user accounts, and no third-party code of any kind. It makes no network requests of its own. On Mac it ships without the outbound-network entitlement, so the operating system itself prevents the app from connecting anywhere.
Documents you scan or import are stored in the app's private storage and protected by Apple's on-device file encryption.
Information you save in the Context Vault — such as your name, address, date of birth, or Social Security number, so the app can fill in forms for you — is additionally encrypted with a key held in your device's Keychain. That key never leaves the device and is never synced to iCloud.
One consequence you should know about: because the key is marked this device only, restoring a device from backup will not restore access to your vault. The encrypted data comes back; the key does not. Paperlatch detects this and tells you.
To make search fast, Paperlatch keeps a local index of the text of your documents. That index is protected by Apple's file encryption and is deliberately excluded from your iCloud and iTunes backups. The text inside it is not separately encrypted by the app.
Paperlatch requests exactly two permissions:
It requests no photo library, microphone, location, health, motion, speech, Face ID, or tracking access.
Text recognition and the app's writing and summarizing helpers run on-device using Apple's Vision, Natural Language, Core ML, and Foundation Models frameworks. Your documents are never sent to Paperlatch servers or to any third-party AI service.
We would rather enumerate these than claim the app is hermetic.
Jane-Doe-W9.pdf. No document text or recognized text is ever sent. The watch stores nothing.This is important enough to state on the privacy page. The feature removes document metadata, annotations, and interactive form fields. It does not remove the original text of the document, which remains present and extractable in the exported file. It also does not specifically scrub EXIF or GPS data embedded in images inside a PDF. Do not rely on it to hide information.
If you open a password-protected PDF, the password is used to unlock that document and is not saved.
Paperlatch offers optional Plus subscriptions (monthly and yearly) and a lifetime unlock. Apple processes all payments and tells the app only whether an entitlement is active. Subscriptions renew automatically until cancelled; you can manage or cancel them in your Apple account settings.
Paperlatch has no accounts and no sign-in. There is nothing for you to create and nothing for us to delete, because we never receive your data in the first place. Deleting the app removes its data from your device.
Your documents live in the app's normal storage and are therefore included in your device's iCloud or computer backups. The search index is excluded from backups. The Context Vault's encryption key is never backed up. Backups are governed by Apple's privacy policy, not ours.
Privacy laws such as the GDPR and CCPA give you rights to access, correct, export, and erase personal data that a company holds about you. We hold none. We operate no servers that receive data from this app, so there is no record of you for us to produce, correct, or erase. If you believe otherwise, write to us and we will investigate.
We do not sell or share personal information, and we do not process it for targeted advertising.
If we change what Paperlatch does with your data, we will update this page and change the date above. Material changes will also be noted in the app's release notes.
Questions about this policy: privacy@rocketcitydefensesolutions.com
Support: support@rocketcitydefensesolutions.com
Rocket City Defense Solutions LLC