Zero-knowledge
household bill
management.

NYROX is designed as a local-first application where your data remains exclusively under your control. We employ a dual-key architecture using client-side AES-GCM encryption, meaning your personal data is encrypted on your device before it ever reaches our servers. Your password is used to derive a Key Encryption Key that wraps your personal Data Encryption Key, ensuring that even as the service provider, we have no technical means to decrypt, view, or access your household records. We do not store your master password or any cleartext versions of your financial information. This zero-knowledge approach guarantees that your sensitive documents, such as bills, assets, and emergency records, remain private and inaccessible to everyone except you.

Our bill capture feature utilises Tesseract.js and PDF.js to process your documents locally on your own device. When you scan a physical bill or import a file, the entire OCR and extraction process is completed without your data leaving your hardware to contact any external third-party servers. We register as a native file handler, allowing you to open PDFs or images directly into the vault from your device's interface. To ensure accuracy, the app provides a real-time framing guide during capture, and our system enforces strict logic to separate payment due dates from contract renewal dates. This ensures that sensitive information is never uploaded for processing, maintaining the integrity of your local-first security boundary.

NYROX deliberately avoids bank integrations to maintain the absolute privacy and security of your financial ecosystem. By operating as a standalone administration tool rather than a transaction aggregator, we eliminate the need for third-party API exposure or stored banking credentials. This decision protects you from potential server-side data breaches or unauthorised access points often associated with open banking connections. Instead, you maintain control by manually ingesting your bills and documents, which are then encrypted locally. We believe this manual, deliberate process encourages a more mindful approach to household administration while ensuring your most sensitive banking data is never exposed to external networks or automated extraction services.

The Lifetime Unlock provides permanent, single-user access to the core NYROX application, including the personal vault, advanced bill field logging, and the full suite of household administration features. Purchasing this one-time license secures your access to the app's encrypted document storage, manual entry tools, and on-device OCR capabilities for your household records. It also entitles you to run the NYROX Audit on your own data and access all future platform updates for your individual account. The Lifetime Unlock does not include the optional Family Plan add-on, which is a separate subscription designed specifically for shared vault functionality. There are no recurring fees or hidden charges associated with the base lifetime ownership of the personal vault.

The Family Plan is an optional annual add-on that allows you to link two accounts together to manage shared household records. Through a secure salted invite code, the app facilitates a client-side key exchange that creates a shared vault, enabling both users to see and manage bills, sinking funds, assets, and ICE records in real-time. This system maintains zero-knowledge standards by ensuring the shared key remains stored only on the devices of the linked family members. While the plan holder manages the subscription, the second member does not need a separate Lifetime Unlock to access the shared features. If the plan lapses or is cancelled, the shared records are restricted to the primary owner, though individual personal vaults remain fully operational for both users.

Because NYROX operates on a strict zero-knowledge architecture, we do not store, reset, or recover user passwords under any circumstances. If you lose your password, the KEK required to unlock your encrypted local data cannot be derived, and access to your vault will be permanently lost. This is a deliberate security trade-off that ensures your privacy is absolute and not subject to compromise by administrative intervention. Resetting your password gives you a working login to an empty account; records encrypted under the old password stay unreadable. The verification code you can generate in Settings proves you own the account when you contact support, for example about billing, but it does not restore data and cannot unlock your vault. The only protection against a lost password is preparation while you still have access: keep your password safe, set up a device PIN, and take regular exports.

The NYROX Audit is a user-initiated, private analysis tool that examines your household data for switching windows, promo cliff hazards, and potential bundling opportunities. The process is strictly governed to protect your identity; all personal identifiers are automatically stripped from your records on your device before any data is sent for analysis. The engine reasons over categories and numerical values rather than names, account numbers, or addresses. Every audit run is saved locally so you can review your history, providing insights into your financial obligations without ever framing them as binding financial advice or an automated recommendation to switch providers. The audit serves purely as an evidence-bound diagnostic tool for your own household management.

Household benchmarks provide contextual information by comparing your logged costs against published market averages for your specific country and region. Every benchmark displayed includes the relevant period, the publication date, and the source of the data to ensure transparency. These figures are governed by a strict internal pipeline that ensures only defensible averages are surfaced, with data gaps clearly marked as insufficient rather than estimated. It is important to note that these benchmarks are provided solely for information purposes and are never framed as a recommendation or personalised financial advice to switch services. We do not promise that any specific benchmark figure is attainable for your unique household circumstances or contract terms.

The ICE Protocol is an emergency backup system consisting of two independent, PIN-protected credentials that allow trusted third parties to access your essential household records if you are incapacitated. Each emergency slot uses an independently wrapped key, and you may configure a waiting period of between 24 hours and one month, during which you will receive notifications if a request is initiated. This allows you to cancel any unauthorised or premature attempts to access your vault. Additionally, an encrypted copy of your ICE records can be kept on a trusted device and opened with its device PIN instead of a password or login; the app itself must still load over a connection before that screen can open. We prompt you every six months to confirm the physical location of your printed emergency documentation.

NYROX manages renewal dates and reminders entirely on-device, calculating them based on the contract terms and billing frequencies you have entered. Our bill reader is programmed to distinguish between payment collection dates and formal renewal or expiry dates, ensuring that only actual renewal deadlines trigger administrative alerts. These reminders surface as persistent in-app check-ins rather than relying on external email services that could be missed or intercepted. The system does not automate any external communication with your providers, and the app never sends notifications outside of your local environment. This ensures your renewal awareness is driven by your own data input and remains completely private to your household administration lifecycle.

Not without a connection, and it is worth being precise. NYROX runs in your browser, and the app has to load over a connection before any screen opens — including emergency PIN access to your ICE records. There is no installed offline copy of the app, so with no signal at all NYROX cannot be opened. Once it has loaded, most of the work happens on your device: date maths, budgeting, urgency and bill reading run locally, and your records are decrypted in your browser rather than on a server. Signing in, saving changes, the NYROX Audit, benchmarks and family sharing all need the service to be reachable. Emergency PIN access removes the need for a password or a login, not the need for a connection.

Yes. There is a voluntary 30-day goodwill refund from the date of purchase, no questions asked, and it sits on top of your statutory rights under UK consumer law rather than replacing them. It applies to the Lifetime Unlock and to the Family Plan. Where a discount or referral credit was applied, the refund is the amount you actually paid. After a refund the account returns to the free tier with its 7-item limit and your data is left intact. Requests go to support from inside the app.

NYROX is a strictly technical tool for the administration and organisation of household documentation; we do not provide, and explicitly disclaim, any financial, tax, or legal advice. The app does not act as a regulated financial advisor or solicitor, and nothing contained within the software, the NYROX Audit, or our partner benchmarks should be construed as professional guidance. While we provide tools to help you track your costs and manage your contracts, all decisions regarding switching providers, managing assets, or updating wills must be made by you in consultation with appropriately qualified professionals. We operate as an administration engine only and our platform is built to facilitate your personal record-keeping, not to substitute for expert legal or financial counsel.

Support tickets are handled directly within the app's secure interface, where you can raise issues or seek assistance during the setup and usage of your vault. To protect your privacy, we maintain a strict retention policy for all communication; every ticket marked as resolved or closed is automatically deleted from our servers 90 days after the status change. Open or in-progress tickets are never subject to this deletion schedule. Our system audit logs only the total number of tickets deleted during each weekly cleanup, never the contents, sender details, or specific subjects of those messages. This ensures that your private correspondence remains ephemeral and is not retained longer than necessary to assist with your support request.

When a Family Plan subscription is cancelled or expires, the account enters a structured lapse sequence to protect the security of your shared records. Upon cancellation, the plan remains active until the end of the current billing cycle, at which point the shared vault is locked and the household link is disabled. We provide a 14-day reclaim window during which the plan can be renewed to restore full access to shared records without any data loss. If the plan remains expired for 90 days, the shared household vault is securely purged. Throughout this entire process, your individual personal vault and private records remain completely unaffected, as they are managed under your unique account key rather than the shared family key.

You retain full ownership and portability of your information at all times, and you may export your records in a structured format whenever you require them. Our export function generates a secure, local package containing your data, which can be used to move your records to another storage solution or for offline archival purposes. These exports are generated entirely on your device, ensuring that your data is never decrypted by us during the export process. Your exported data remains your property and can be managed according to your own personal filing system, and taking an export regularly is the sensible answer to the risk of a lost password, which no code or support route can undo. This commitment to data portability ensures that you are never locked into the NYROX platform and can always retrieve your information in an accessible state.