Frequently Asked Questions

No. The local vault needs no Travel Document Vault account or server. Your documents are stored on your device by default. If you choose to enable optional Pro cloud backup, your vault is end-to-end encrypted on-device before upload to your own iCloud (iOS) or your own Google Drive (Android), sealed with a recovery code only you hold. We do not receive your cloud backup and cannot read its encrypted document contents. Neither can Apple or Google.

Sentry is a crash reporting tool that helps us find and fix bugs. It is disabled by default and sends absolutely nothing when turned off. If you choose to enable it in Settings, it sends sanitised technical crash diagnostics. Session replay is a separate opt-in. Crash reports are sanitised to reduce personal data, and document files are not intentionally attached.

Pro is a one-time purchase that unlocks unlimited profiles, unlimited documents, combined PDF export, encrypted cloud backup to iCloud or Google Drive, and custom reminder timing. You pay once - no subscription, no recurring charge, and no trial that quietly starts billing you.

Yes. Your purchase covers every update within the current major version (v1.x), including bug fixes, security patches, and new features. Improvements driven by user feedback, like usability changes and new document types, are part of those normal updates. If we ever release a v2.0 with a substantially rebuilt feature set, that may be a separate purchase, but we would give early adopters advance notice and preferential pricing. People who trust the app early are the reason it gets better, and that is not something we take for granted.

Pro users: Enable encrypted cloud backup in Settings - Cloud Backup. Your vault is encrypted on-device with your recovery code before it reaches iCloud (iOS) or Google Drive (Android). On a supported device on the same platform, use the same cloud account. Open Cloud Backup in Settings, choose your backup and restore it with your recovery code. Restoring replaces the local vault. Document contents are encrypted; the cloud provider can see backup metadata such as counts, timestamps and device information. We see nothing.

Everyone: Use the free Vault Export (.tdvault) in Settings and import it on any device. System backups (iCloud or Google) reinstall the app but cannot restore your documents - system backups do not transfer the device-bound encryption key, so export before you switch phones.

Yes, completely. The core app has no server and does not need the internet to function. Scanning, viewing, exporting, and reminders all work offline. Features that need a connection include store purchases and restoration, update checks and downloads, and optional cloud backup (Pro) to your own iCloud or Google Drive account. Changing your recovery code while cloud backup is on also needs a connection.

The app is available in over 40 languages, including full right-to-left support for Arabic, Urdu, and Farsi. Your phone's language is detected automatically, and you can change it any time in Settings. If something reads oddly in your language, we genuinely want to know. Drop us a line at support@traveldocumentvault.com and it will directly influence the roadmap.

Your documents live on your device, not on our servers, so they do not disappear if we stop releasing updates. Access to your saved vault does not depend on a Travel Document Vault server; future operating-system compatibility cannot be guaranteed. You can also export an encrypted copy of your vault, subject to export size limits and readable attachment files.

Travel Document Vault was built by Mustafa Hafeez, a senior software developer with years of professional experience building privacy-respecting applications, and a parent who needed this app for his own family. Privacy is not a marketing line. The local vault needs no Travel Document Vault account or server. Enable App Lock to restrict access on an unlocked phone. Optional cloud backup uses your own iCloud or Google Drive, end-to-end encrypted with a recovery code only you hold. That is a deliberate engineering decision, not a policy that could be changed with a settings toggle.

By default, all your data is stored exclusively on your device. We have no servers that hold your documents and no Travel Document Vault user accounts. When you save a document, it stays in your phone's secure storage area. Pro users can enable optional Your Own Cloud backup, which sends an end-to-end encrypted copy of your vault to your own iCloud or Google Drive account. We still cannot read it.

Pro users can enable encrypted cloud backup in the app (Settings - Cloud Backup). Your vault is encrypted on-device with your recovery code before it is uploaded to your own iCloud (iOS) or your own Google Drive AppFolder (Android). We have no access to your data. Document contents are stored encrypted; some backup metadata remains readable.

There is no cloud database on our servers. We never see your documents.

A system-level device backup (iCloud Backup, Google Backup) reinstalls the app but does not restore your documents - system backups do not transfer the device-bound encryption key. To move your vault to a new phone, use cloud backup (Pro) or the free Vault Export.

Yes. Vault Export (.tdvault encrypted backup file) is free for everyone. Go to Settings, Export vault, and the app creates a password-protected file you can save to Files, iCloud Drive, or share off-device. The app also keeps automatic local backups on your device every few minutes, at no cost. Cloud backup to your own iCloud or Google Drive is the Pro option. No backup feature traps your data.

Yes. Your documents are encrypted on disk within the app's storage. This protects against direct file extraction (if someone accesses the device's physical storage, the raw files are unreadable without the decryption keys).

• Encryption on Disk: Stored vault attachment originals are encrypted; viewing, scanning and sharing can create temporary readable copies.
• App Lock: Add a second layer of defence by enabling PIN, Face ID, or Touch ID in the app settings.

Important: Maximum security requires a strong device passcode. If your device is unlocked, the encryption keys may be accessible to whoever holds the phone.

No. We don't use any analytics SDKs, advertising networks, or tracking services. Optional Sentry crash reporting stays off unless you turn it on in settings. Cloud backup (Pro), store purchases and updates also use external services. Crash reports contain sanitised technical diagnostics. Reports are sanitised to reduce personal data and do not intentionally attach document files.

All your data on this phone is permanently deleted when you uninstall the app. There's no way to recover it afterward unless you made a Vault Export or turned on cloud backup, since we don't store anything externally. Before deleting: Export your documents or create an encrypted backup file (.tdvault) via Settings to save them elsewhere.

Yes. The original images and PDFs stored in your vault are encrypted. Viewing, scanning and sharing can create temporary readable copies. Encrypted stored originals cannot be read without their decryption keys.

For maximum security: We recommend enabling App Lock and using a strong device passcode. See our Privacy Policy for complete details.

Show to Another Person is a protected display mode for moments when a border officer, hotel receptionist, or airline agent needs to see a document on your screen. With PIN lock set up, tap the icon to open a full-screen view with screenshot and screen-recording protection enabled by default, subject to device support and your settings. Close the protected view, then unlock the vault with your PIN or enabled biometrics.

This display mode does not upload your documents. Set up PIN lock first so closing the protected view locks access to the vault. Without PIN lock, the viewer does not restrict access to the rest of your vault.

When you set up App Lock, the app generates a unique recovery code that's your safety net if you ever forget your PIN. Save it somewhere safe - your password manager, a printed note, anywhere you trust.

If you forget your PIN, enter your recovery code on the PIN screen. The recovery code unlocks the app without deleting your documents; App Lock remains enabled.

If neither your PIN nor enabled biometrics can unlock the app and you have no recovery code, you may need to erase the local vault and restore a saved backup. Save your code when prompted. While you still know your PIN, you can generate a new one in Settings → Security.

Auto-Erase is intended to erase this phone's vault after repeated incorrect PIN attempts. Do not rely on it as a guaranteed safeguard. It is on by default once you set a PIN. Turn it off in Settings → Security if you'd rather keep your data after failed attempts. A completed local erase removes this phone's vault; recovery requires an independent usable backup.

Important: Create a vault export backup before you rely on Auto-Erase. That way, if it ever triggers accidentally, you can restore from your backup. Keep an independent backup and its required password or recovery code before relying on Auto-Erase.

Yes. Travel Document Vault is available on Android. Download it free on Google Play. Android supports encrypted on-device storage, OCR scanning and expiry reminders. With Pro, you can use unlimited profiles, batch PDF export and custom reminder timing.

Yes, using encrypted Vault Export. Export an encrypted backup from your current device (Settings, Export vault), transfer it to your new device (via email, cloud storage, or direct transfer), then use Settings, Import backup to restore your documents, which replaces anything already on the new device.

This works across platforms because the encryption format is universal. You'll need the same password you used when exporting the vault. Pro purchases restore within the same platform and store account; switching between iOS and Android requires a separate Pro purchase (see "Can I restore my purchase on a new device?" below).

Storage usage depends on document count and file sizes, plus vault metadata, backups and temporary files.

The app includes a few automatic backups of your vault data. Free users can add up to five documents. With Pro, there is no document-count cap, subject to your device's available storage.

Camera: To capture photos of your documents directly in the app. Photo Library: To import existing document photos you've already taken.

We never upload your photos to our servers. We have no servers that store your documents. All processing (including OCR scanning) happens on your device. If you turn on optional Pro cloud backup, the encrypted vault goes to your own iCloud or Google Drive, sealed with a recovery code only you hold. You can still add document details manually or import a PDF if you deny camera and photo permissions. If you accidentally denied permissions, you can re-enable them in your device Settings → Privacy → Camera / Photos → Travel Document Vault.

Free includes 1 profile and up to 5 documents with core tools, including OCR scanning, expiry reminders, document sharing, PIN Lock, and Biometric Lock (Face ID / Touch ID). Pro (one-time purchase*) unlocks unlimited profiles, unlimited documents, combined PDF export, encrypted cloud backup, custom reminder timing, and multi-page capture for Airline Tickets and Other Documents.

* See Pricing Policy for versioning details.

No. Pro is a one-time purchase. Pay once, all v1.x updates included, forever. No recurring charges, no subscription.

About our version policy →

Yes. Go to Settings in the app and tap "Restore purchases." On the same platform, use the store account that bought Pro; restoration requires a connection and a valid entitlement returned by the store. Note: your documents won't transfer. Only the Pro unlock.

Yes. Pro is a one-time purchase for the current major version (v1.x). You'll receive all bug fixes, security updates, and feature additions for free within that version.

If we release a major version 2.0 in the future with significant new features, that might require a separate upgrade purchase. We'll give advance notice and early-bird pricing to existing Pro users. This policy supports continued improvements to the app with a one-time purchase.

Learn more in our Pricing Policy.

Your purchase covers every update within the current major version. That means all bug fixes, security patches, and new features released within the current version line. Your app keeps working and improving at no extra cost.

If a future major version (v2.0) is ever released with a significantly rebuilt feature set, that may be offered as a separate purchase. You would never be forced to upgrade. Your current version keeps working exactly as it does today. See our full version policy for details.

All purchases are processed through the respective App Store. For refunds, you'll need to request one through Apple or Google. Please check your purchase receipt email for instructions on how to request a refund from the store where you downloaded the app.

Check that notifications are enabled for Travel Document Vault in your device Settings → Notifications. Also ensure you've added an expiry date to your document. Reminders are only scheduled when there's an expiry date.

OCR works best with good lighting and a flat document. Try adjusting the angle or lighting. If detection fails, you can always enter the expiry date manually. OCR is assistive. It's designed to help, not replace careful data entry.

Document quality depends on the source image, lighting, and the app's cropping, resizing and compression. Saved photos may be cropped, resized and compressed; OCR may enhance a temporary copy for text recognition. For best results: use good lighting (natural light works well), hold your phone steady, ensure the document is flat and fully visible in the frame, and clean your camera lens. The same applies to exported PDFs. Print quality reflects your original capture quality.

Probably not. Your data is saved automatically when you add or edit documents. A crash shouldn't cause data loss. Reopen the app and check your documents. If you're seeing issues, please contact us at support@traveldocumentvault.com.

Your vault is encrypted end-to-end using AES-256-GCM on your device before it leaves your phone. A key derived from your recovery code protects the randomly generated vault encryption key. Apple and Google can see the encrypted file on their servers, but they cannot decrypt it. Neither can we. Your recovery code unlocks the cloud encryption key; configured devices retain access for automatic backup.

Read full guide →

Your PIN is the day-to-day lock. Face ID is a fast shortcut to unlock. The recovery code is the master key for when you forget your PIN entirely. If Face ID fails, try your PIN. If you forget your PIN, enter your recovery code. If no unlock method works, you may need to reset the local vault, then restore an export or a cloud backup for which you still have the recovery code.

Read full guide →

You can export supported vault records and available attachments as an encrypted, password-protected backup file (.tdvault) from Settings, subject to size limits, then import it into a compatible installation of the app. Export and import transfer supported vault records and available attachments; device security settings, preferences and some internal state are not copied exactly. For step-by-step instructions, see the export-import walkthrough. (Combined multi-document PDF export is a separate Pro feature.)

Read full guide →

Ask yourself one question: are you a guest in this country, or is it your home? Guests count the days they are there, so pick Days inside - that is the one for a visitor limit such as 90 days. Residents count the days they are away, so pick Days outside - that is the one for a residence permit that allows a certain time abroad. Most people need only one of the two, and if you are unsure, Days inside is the more common choice.

With Pro, profiles help you organise each family member's documents, photos and reminders within the same vault. They do not have separate access locks. With cloud backup on, profiles sync to devices connected to the same cloud vault.

Without cloud backup, deleted items go to the trash for 30 days and are then permanently removed from your device. You can restore them at any time during that 30-day window. With cloud backup enabled, items stay in Recently Deleted indefinitely until you tap Delete Forever. See the Cloud Backup section below for details. Clearing the trash or factory-resetting your phone removes local data; recovery requires a usable independent backup.

Deleting moves it to Recently Deleted (trash). It stays there indefinitely, there is no automatic purge when cloud backup is on. The trashed document is still backed up to your cloud. To permanently remove it, go to Recently Deleted and tap Delete Forever on each item. You will see a warning that this also removes it from your cloud backup.

The app blocks some empty-vault uploads to protect existing backups; deleted records and other vault data may still sync. Recovery depends on a usable retained backup. You can restore from it using Settings, Cloud Backup, Restore from Backup.

When you enable cloud backup on a new device signed into the same iCloud or Google account, the app detects your existing backup and asks whether to restore it or start a new backup. Choose your backup, tap Restore and enter your recovery code. Both devices then share the same backup. Starting a new backup instead leaves the existing one untouched.

Yes, with Sync across devices turned on in Settings - Cloud Backup. Devices on the same platform check for changes while the app is open and connected. Some changes merge automatically; some conflicts offer a choice of versions, although note text is not shown in the comparison. To move to a new device, restore from your backup on the new device.

You need an internet connection to enable cloud backup. The app checks for existing backups in your cloud account during setup, which requires connectivity. Once enabled, the app works fully offline and syncs when you are back online.

Yes, multiple layers protect you. Deleted documents stay in Recently Deleted indefinitely (no auto-purge with cloud backup on). Permanent deletion requires a separate confirmation that warns about cloud impact. Earlier backup versions may retain the document until history retention or backup cleanup removes it. Empty-upload safeguards and retained backup versions can help after accidental deletion; keep an independent export as well.

Yes. Cloud backup is one safety layer, but no system is perfect. Cloud accounts can be lost, recovery codes can be forgotten, and unexpected sync or storage issues can happen. We strongly recommend keeping an independent copy of critical documents, such as a printed copy in a safe place or an encrypted vault export saved to separate storage. Treat cloud backup as a convenience, not your only line of defence. You are responsible for verifying your documents remain recoverable.

Your recovery code unlocks your cloud backup's encryption key; configured devices retain it for automatic backup. We have a zero-knowledge design, which means we cannot reset, retrieve, or recover it for you. Neither can Apple or Google. If you lose the recovery code and access to every configured device that retains it, your encrypted cloud backup becomes unrecoverable. Save your recovery code somewhere safe before you depend on cloud backup. A password manager, a printed copy in a secure location, or both. Verify you can read it back before you store it as your only copy.

No. Travel Document Vault is a personal organisation tool only. It does not replace official documents, verify authenticity, or guarantee compliance with any immigration requirements. Always carry your original documents when travelling and verify requirements with official government sources.

Reminders are a convenience feature and should not be your only reminder system. We are not liable for missed deadlines, expired documents, or any consequences resulting from reminder failures. Please see our Terms of Service for full details.