Effective 25 July 2026
This policy applies to the Ochre app for iPhone, iPad, and Mac (the “app”) and this website. Ochre is provided by Adsit.Work (“Ochre”, “we”, “us”).
From the app: nothing. Ochre is local-first. Everything you enter — your business details, clients, products, invoices, payments, attachments — is stored on your device using Apple’s on-device database. Nothing leaves your device unless you choose to send it: sharing a document, emailing it, printing it, or saving a backup. It never reaches a server operated by us, and we have no ability to read it.
We do not require an account, a sign-up, an email address, or a password to use the app. We do not embed advertising, analytics, tracking, or third-party SDKs that collect your information.
Ochre does not sync until you turn sync on. A new install keeps your books on that device and nowhere else. There are two ways to put them on another device you own, and both run through your own Apple ID rather than any system of ours.
Switching on iCloud sync in Settings lets your devices keep the same books in step. Your records — businesses, documents, customers, vendors, products, payments and expenses — are mirrored into the private database of your own iCloud account. A private database is readable only by the Apple ID that owns it: not by other users, not by us. We operate no server in this path and receive no copy, no key, and no notification that it happened. What travels is governed by Apple’s Privacy Policy and your iCloud terms.
Sync needs a signed-in iCloud account and available iCloud storage. If either is missing, Ochre keeps working normally on the device and tells you what it is waiting for. You can switch sync off at any time; doing so leaves the books on your device intact.
You can instead create a backup from within the app (see “Backups” below) and open it on the other device. When you choose to save that backup to iCloud Drive, it travels there the way any file you save to iCloud Drive does, under the same Apple terms above. We never see the backup or its contents.
A backup you create by hand is encrypted by default, protected by a passphrase that only you hold — you can turn encryption off for a specific export if you'd rather not use one. The automatic backups Ochre keeps on its own schedule are always encrypted. Either way, backups are stored where you choose: on your device or a location you pick. We never receive your backups or your passphrase. If you lose the passphrase, an encrypted backup cannot be recovered — by anyone, including us.
Client and contact details you enter live in your local store on your device, the same as the rest of your data. When you choose to send an invoice, receipt, statement, or export, that file leaves your device only through the channel you pick at that moment (email, share sheet, print, save, or an encrypted backup to iCloud Drive). We are not a party to that transmission.
The free tools under ochreinvoice.com/tools — invoice, estimate and receipt generators, pricing calculators, and the rest of that line — are separate from the app but held to the same standard. Each one runs entirely in your browser. Nothing you type into a tool page is transmitted anywhere; there is no server that ever sees an invoice number, a client name, or an amount you entered.
Some tools save a draft locally, in your own browser's IndexedDB storage, so it is still there if you come back later. That draft never leaves your device either — clearing your browser's site data for ochreinvoice.com removes it completely, the same as it would for any other local website storage.
There are no cookies and no advertising or cross-site trackers anywhere on this website. We do count page views, using Cloudflare Web Analytics: it records that a page was opened and which site linked to it, and nothing else. It sets no cookie, stores nothing in your browser, and does not build a profile of you or follow you to other sites — so we can see that, say, the estimate generator gets used more than the barcode one, and never who used it.
What that measurement cannot see is anything you type. Not a client's name, not an amount, not an invoice number, not a draft. The tools transmit none of it, to us or to anyone — there is no code on any tool page capable of sending it, which is a property of how the pages are built rather than a promise about how we behave.
The only thing on this website that deliberately sends your information anywhere is the contact form, and only if you choose to submit it — it sends the name, email address, and message you type into it, and nothing else on the site does anything comparable.
When you download or purchase the app, Apple processes that transaction and may provide us with aggregate, non-identifying sales and crash information through App Store Connect, under Apple’s terms. This does not include the contents of your books.
Ochre is a business tool and is not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect information from children.
Because your data lives on your device, you are in direct control of it: you can view, edit, export, back up, or permanently erase all of it at any time from within the app (Settings → Data → Erase all data), which wipes it from that device. Backups you’ve saved separately — including any saved to iCloud Drive — are not touched by an erase; delete those yourself if you want them gone too.
If this policy changes, we will update this page and revise the effective date above.
Questions about privacy, or a request about your data? Contact us.