Who we are
Vellum ("Vellum", "we", "us") is an app made by Ram Ravi, an independent developer based in the United Kingdom, who is the controller for the limited personal information described here. You can contact us any time at support@vellumexpense.com.
Information in the app
Everything you record in Vellum is stored locally on your device, in the app's private storage. This includes:
- Entries: names, amounts, dates, categories, notes and currencies.
- Cards: names, finishes, currencies, budgets and, if you choose to add them, card details such as the name on the card, number, expiry and CVV. Card details are stored in the iPhone Keychain, protected by your device, and the CVV is only shown after Face ID, Touch ID or your device passcode.
- Receipts and invoices: scans, photos, PDFs and links you attach.
- Your name and preferences, such as your currency, number format and appearance.
We don't have access to any of this information. It is not sent to us or to any third party by Vellum. If your iPhone is backed up to iCloud or to a computer, Apple's device backup may include Vellum's data, under Apple's privacy policy.
Camera, photos and files
Vellum asks for camera access only so you can scan receipts and invoices. Images are processed on your iPhone, including edge detection, enhancement and reading the total with Apple's on-device text recognition. They're never uploaded. When you pick a photo or file, Vellum only receives the items you choose.
Face ID, Touch ID and passcode
If you turn on App Lock, Face ID and Touch ID are handled by iOS. Vellum is only told whether authentication succeeded and never receives your biometric data. Your Vellum passcode is stored securely in the iPhone Keychain.
Notifications
Reminders, including the reminder before a free trial ends, are scheduled on your iPhone as local notifications. No notification data is sent to us. You can turn notifications off at any time in Settings.
Purchases and subscriptions
Subscriptions and the lifetime purchase are processed by Apple through the App Store. We never receive your payment details. Apple provides us with limited, aggregated sales and subscription reports, and Vellum checks your purchase status with Apple on your device to unlock Premium. Apple's handling of your information is described in Apple's Privacy Policy.
Backups and exports
Backups and exports (PDF, Excel, CSV and ZIP files) are created on your iPhone only when you ask for them. You decide where they go, for example Files, iCloud Drive, email or another app, and from then on they're handled by that service under its own terms.
Analytics, advertising and tracking
Vellum contains no analytics, advertising or tracking software, and does not track you across other companies' apps or websites. If you choose to share crash reports with developers in your iPhone settings, Apple may provide us with anonymous crash information to help fix problems.
This website
This website does not use cookies, analytics or advertising. It is hosted by Vercel, which, like any web host, processes technical information such as your IP address and browser type in server logs to deliver the site and keep it secure. Fonts are served by Google Fonts, which receives your IP address when the fonts load.
When you contact us
If you email support@vellumexpense.com, we receive your email address and whatever you include in your message. We use it only to reply and help you, our lawful basis being our legitimate interest in supporting our users, and we delete support emails when they're no longer needed, normally within two years.
Your rights
Under UK and EU data protection law you have the right to access, correct, delete, restrict or object to the use of your personal information, and to receive a copy of it. Because your Vellum records are stored only on your device, you control them directly: you can export, back up or delete them at any time in the app (Settings › Delete All Data). For anything we hold, such as support emails, contact support@vellumexpense.com. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
Children
Vellum is not directed at children under 13, and we don't knowingly collect information from children.
Security
Vellum relies on iOS data protection, the iPhone Keychain and optional App Lock with Face ID, Touch ID and a passcode. Keep your iPhone protected with a passcode, and keep your backups somewhere safe.
Changes to this policy
If we change this policy, we'll update the date at the top of this page and, for significant changes, mention it in the app's release notes. This policy was last updated on 1 October 2026.