Vittora
Privacy-first architecture
Vittora has no accounts, no server-side profile, and no analytics pipeline built on your financial data. The app works for you, not on you.
Security and trust at the core
Vittora is designed so your financial data is not our business model. Your data stays on your devices and in your private iCloud. We do not sell your data, show ads, or require bank credentials.
App Lock One switch in Settings puts Vittora behind Face ID, Touch ID, or your passcode.
No bank credentials, ever
There is no bank-linking flow, so your net-banking passwords and OTPs are never requested, transmitted, or stored.
Offline-first local data
Your ledger lives in a local database on each device. Everything except iCloud sync and household sharing works with no network connection.
Private iCloud sync
Sync uses your personal iCloud private database via CloudKit. Data moves between your devices under your Apple ID — it never touches servers we operate.
App Lock with biometrics
Lock the app behind Face ID, Touch ID, or your device passcode, with configurable auto-lock timing and a privacy shield when switching apps.
Encrypted receipts and documents
Attached receipts and documents are encrypted at rest on device, and store files use Apple's data-protection attributes.
No ads, no trackers, no data selling
There is no ad network, no third-party tracking SDK, and no data brokerage. Usage milestones are counted on-device only.
No third-party finance APIs
No aggregators and no external finance services by default — nothing to breach between you and your data.
Your data stays exportable
Export transactions as CSV whenever you want, and erase everything permanently from Settings with one confirmed action.
Honest scope on tax guidance
Tax features are educational planning aids with clear disclaimers — Vittora is not filing software and never files on your behalf.