Effective 12 July 2026
This policy applies to the Ochre app for iPad and Mac (the “app”) and this website. Ochre is provided by [Legal entity — to be completed at incorporation] (“Ochre”, “we”, “us”).
From the app: nothing. Ochre is local-first. Everything you enter — your business details, clients, products, invoices, payments, attachments — is stored on your device using Apple’s on-device database, and synced across your own devices through iCloud (Apple’s CloudKit) under your Apple ID. That data flows between your devices and Apple; it never reaches a server operated by us, and we have no ability to read it.
We do not require an account, a sign-up, an email address, or a password to use the app. We do not embed advertising, analytics, tracking, or third-party SDKs that collect your information.
If you are signed into iCloud with iCloud Drive enabled, Ochre uses Apple’s CloudKit to keep your data consistent across your devices. That processing is governed by Apple’s Privacy Policy and your iCloud terms. You can turn sync off by signing out of iCloud or disabling iCloud for the app in your device settings.
Backups you create are encrypted files stored where you choose (on your device or a location you pick), protected by a passphrase that only you hold. We never receive your backups or your passphrase. If you lose the passphrase, a backup cannot be recovered — by anyone, including us.
Client and contact details you enter live in your local store and your iCloud, the same as the rest of your data. When you choose to send an invoice, receipt, statement, or export, that file leaves your device only through the channel you pick at that moment (email, share sheet, print, save). We are not a party to that transmission.
When you download or purchase the app, Apple processes that transaction and may provide us with aggregate, non-identifying sales and crash information through App Store Connect, under Apple’s terms. This does not include the contents of your books.
Ochre is a business tool and is not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect information from children.
Because your data lives on your device and in your iCloud, you are in direct control of it: you can view, edit, export, back up, or permanently erase all of it at any time from within the app (Settings → Data → Erase all data), which removes it from your devices and your iCloud.
If this policy changes, we will update this page and revise the effective date above.
Questions about privacy? Email hello@ochreinvoice.com.