Effective 25 July 2026
This policy applies to the Ochre app for iPhone, iPad, and Mac (the “app”) and this website. Ochre is provided by [Legal entity — to be completed at incorporation] (“Ochre”, “we”, “us”).
From the app: nothing. Ochre is local-first. Everything you enter — your business details, clients, products, invoices, payments, attachments — is stored on your device using Apple’s on-device database. Nothing leaves your device unless you choose to send it: sharing a document, emailing it, printing it, or saving a backup. It never reaches a server operated by us, and we have no ability to read it.
We do not require an account, a sign-up, an email address, or a password to use the app. We do not embed advertising, analytics, tracking, or third-party SDKs that collect your information.
Ochre does not sync until you turn sync on. A new install keeps your books on that device and nowhere else. There are two ways to put them on another device you own, and both run through your own Apple ID rather than any system of ours.
Switching on iCloud sync in Settings lets your devices keep the same books in step. Your records — businesses, documents, customers, vendors, products, payments and expenses — are mirrored into the private database of your own iCloud account. A private database is readable only by the Apple ID that owns it: not by other users, not by us. We operate no server in this path and receive no copy, no key, and no notification that it happened. What travels is governed by Apple’s Privacy Policy and your iCloud terms.
Sync needs a signed-in iCloud account and available iCloud storage. If either is missing, Ochre keeps working normally on the device and tells you what it is waiting for. You can switch sync off at any time; doing so leaves the books on your device intact.
You can instead create an encrypted backup from within the app (see “Backups” below) and open it on the other device. When you choose to save that backup to iCloud Drive, it travels there the way any file you save to iCloud Drive does, under the same Apple terms above. We never see the backup or its contents.
Backups you create are encrypted files stored where you choose (on your device or a location you pick), protected by a passphrase that only you hold. We never receive your backups or your passphrase. If you lose the passphrase, a backup cannot be recovered — by anyone, including us.
Client and contact details you enter live in your local store on your device, the same as the rest of your data. When you choose to send an invoice, receipt, statement, or export, that file leaves your device only through the channel you pick at that moment (email, share sheet, print, save, or an encrypted backup to iCloud Drive). We are not a party to that transmission.
When you download or purchase the app, Apple processes that transaction and may provide us with aggregate, non-identifying sales and crash information through App Store Connect, under Apple’s terms. This does not include the contents of your books.
Ochre is a business tool and is not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect information from children.
Because your data lives on your device, you are in direct control of it: you can view, edit, export, back up, or permanently erase all of it at any time from within the app (Settings → Data → Erase all data), which wipes it from that device. Backups you’ve saved separately — including any saved to iCloud Drive — are not touched by an erase; delete those yourself if you want them gone too.
If this policy changes, we will update this page and revise the effective date above.
Questions about privacy, or a request about your data? Contact support.