---
title: "Local-first privacy — CraftedBills"
description: "CraftedBills stores the working state in a local, versioned SQLite database. Imports, OCR, matching, review, reports and backups work locally; only explicit integrations such as KSeF need a network connection."
canonical_url: https://craftedbills.com/features/local-first-privacy/
alternate_language_url: https://craftedbills.com/pl/funkcje/prywatnosc-local-first/
content_type: marketing-page
language: en
---

# Your documents stay on your devices by default.

CraftedBills stores the working state in a local, versioned SQLite database. Imports, OCR, matching, review, reports and backups work locally; only explicit integrations such as KSeF need a network connection.

**Core local-first architecture in the current MVP**

## Privacy that follows the architecture

- **Originals remain unchanged:** PDF bytes, KSeF XML and bank source records are preserved rather than silently rewritten.
- **Secrets stay outside SQLite:** KSeF and Fakturownia tokens stay in the system Keychain, available only after the device is unlocked.
- **Offline work remains useful:** You can import, OCR, match, review and report without continuous internet access.

## How local-first works

1. **Versioned local database** — SQLite uses migrations, transactions, rollback and a recovery snapshot.
2. **Managed document copies** — The app preserves an original and records its fingerprint and source.
3. **On-device processing** — PDF extraction and Apple Vision OCR run locally on macOS and iOS.
4. **Explicit network boundaries** — The interface shows when KSeF or another integration connects outside the device.

## Available in the current MVP

- Local SQLite and recovery snapshot
- Private local file permissions and iOS data protection
- Keychain-based secrets
- Local backup and validated restore
- Offline import, OCR, matching and reporting

## Planned next

- Encrypted export archives
- Optional encrypted synchronization
- Organization roles and retention policies for future SaaS

## Product boundaries

- Public, read-only marketing website.
- The current MVP works locally on macOS and has an iOS simulator build. KSeF TEST and Fakturownia publishing adapters are ready for controlled credential-based validation; production KSeF remains disabled.
- CraftedBills is software and an app that help solo entrepreneurs navigate the process of preparing settlement documents and handing them over to accounting.
- No public API, authentication, checkout, payment or agent actions are available on this website.