VaultCap — everything you own, encrypted on your device
Version: 5.4.3
Your entire financial and personal life. Encrypted. Offline. Always with you.
VaultCap by Capricorn Systems is a zero-knowledge personal vault built as a PWA. No accounts. No subscriptions. Network features (imports) are opt-in and off by default. All data stays on your device, encrypted with AES-256-GCM.
Example stories
Illustrative day-in-the-life stories (fictional personas) with screenshots and captions:
What It Does
VaultCap replaces a dozen fragmented apps with one encrypted vault — managing banks, cards, investments, loans, documents, family, identity, and more across Pakistan, the UK, and the UAE.
Finance
- Banks & accounts across PK/UK/UAE with IBAN tracking
- Cards with expiry alerts and camera OCR scan
- Investments with P&L tracking (stocks, crypto, mutual funds, sukuk)
- Loans with partial payment tracking and overdue alerts
- Cash in multiple currencies
- Expenses & subscriptions
- BC/Committee (rotating savings) with turn tracking
- Prize bonds & savings certificates
- Credit score tracking (Experian, Equifax, TransUnion, ECIB)
- Zakat calculator with live nisab and hawl tracking
- Income tax calculator (UK, Pakistan, UAE)
- Live FX rates and precious metals prices
Identity & Documents
- Passport, NIC, driving licence, visa — 12 document types with expiry alerts
- SIM cards, email accounts, digital logins, gadgets with warranty tracking
Family Vault
- Family profiles with linked documents, banks, and cards
- BC committee organiser with member tracking
Assets
- Property, vehicles with MOT/road tax/insurance expiry alerts
- Gadgets and personal assets with P&L
Security
- AES-256-GCM encryption via Web Crypto API
- PBKDF2 key derivation (600,000 iterations, SHA-256)
- IndexedDB encrypted storage — vault ciphertext stays on device (optional FX/metal rates + logo proxy are opt-in network)
- PIN brute-force lockout (30s → 5 min → vault wipe)
- Decoy PIN — shows empty vault to protect under duress
- Offline-first — core vault works with no internet; rates/logos use cache + privacy proxy when online
- CSP —
script-src 'self' (no 'unsafe-inline' / 'unsafe-eval'); UI actions via data-act + Act delegate
Features
- Smart Add — describe what to add; on-device Smart Parser pre-fills the form
- Smart Import — paste text or files; rules-based Smart Parser extracts structured data
- Smart Help — in-app assistant answers PIN, backup, banks, and more (no cloud AI required)
- Live rates — real-time FX (PKR/GBP/AED/USD) and gold/silver prices
- PDF export — full financial summary as print-ready PDF
- Reminders — unified timeline for document expiry, MOT, BC turns, loan due dates
- Multi-country — filter by Pakistan, UK, UAE
- Dark & light modes — plus system appearance on supported devices
- 60+ bank logos with real favicons
- QR sync — transfer vault between devices via QR code
Architecture
VaultCap/
├── index.html # App shell + CSP; loads boot scripts + dist bundle
├── dist/ # Generated bundle — run npm run build:js
├── js/
│ ├── boot-*.js # Cache-bust, VER, SW register (external for CSP)
│ ├── bundle-order.json # Module load order for bundler
│ ├── core/ # Crypto, PIN, Act/ActHelpers, store, router
│ └── modules/ # Banks, cards, family, etc.
├── scripts/build-bundle.mjs
├── css/ # base, layout, components, themes
├── landing.html # Marketing landing page
├── docs/
├── assets/banks/ # Bundled bank logos (privacy: no Google at runtime)
└── sw-v51.js # Service worker (offline PWA · vaultcap-v100)
Stack: Vanilla JS · Web Crypto API · IndexedDB · Tesseract.js · 100% free · v5.4.3 · no account
Getting Started
Live: https://shamikhahmed.github.io/VaultCap
Install (all devices): https://shamikhahmed.github.io/VaultCap/install.html
Launch plan: LAUNCH.md
No account. PIN unlocks this device. Recovery key + backup key protect restore. Data encrypted on-device (AES-256-GCM).
| Device | Install |
|---|
| iPhone / iPad | Safari → Share → Add to Home Screen |
| Android | Chrome → Install app / Add to Home screen |
| Windows | Edge/Chrome → Install VaultCap |
| Mac | Safari Add to Dock / Chrome Install |
App Store / Play / Microsoft Store need developer accounts + review — website PWA ships first.
iPhone test checklist
Documentation
Demo PIN: 123456 — load demo data from Settings → Load Demo
Local dev:
git clone https://github.com/shamikhahmed/VaultCap.git
cd VaultCap
npm ci
npm run build:js # required — dist/ is not committed
npm run serve # http://127.0.0.1:8765
Tests: npm run test:e2e (builds bundle first). XSS audit: npm run audit:xss.
GitHub Pages / deploy: push to main runs .github/workflows/pages.yml (npm run build:js then publish). Local: always npm run build:js before serve — index.html loads dist/vaultcap.boot.js (app chunk lazy).
Screenshots: npm run gallery (or npm run capture:screenshots) then commit assets/screenshots/ + screen-gallery.html embed. Viewer: screen-gallery.html or npm run gallery:view.
Roadmap
About
Shamikh Ahmed
Director, NEWS Logistics · Founder, TheSolution360
MSc Logistics & Operations Management, Cardiff University
MSc Accounting & Finance, BPP University London
Karachi, Pakistan
VaultCap was built to solve a personal problem: managing finances across three countries with no single app that understood BC committees, prize bonds, Pakistani banks, UK accounts, zakat, and expat financial complexity.
License
Source-available. See LICENSE.
VaultCap © 2026 Shamikh Ahmed
