Privacy Policy

Who we are

Vesper is a prayer and reflection app provided by the Vesper developer, referred to here as we, us, or our.

For privacy questions or requests, contact vesper.help.support@gmail.com.

Information kept on your device in Vesper 1.2

The app stores these items locally and does not automatically send them to our AI service or subscription provider:

• Your journal entries, saved prayers, reflections, and mood selections.
• Your optional name, faith preferences, selected goals, and reminder settings.
• Your reading and memorization progress, assessments, and streaks.

The app shares selected Scripture, progress, and membership state with its widgets through storage on the same device.

Widgets do not make their own network requests.

Reminders are local notifications scheduled on your device after permission; they are not marketing messages.

Vesper does not provide a journal account or its own cloud synchronization service.

Device backups may include local app data according to your Apple settings.

If you use a share action or send us content for support, the information you choose to share is handled by the destination you select.

Optional AI prayer generation

Before the first AI prayer request, the app asks whether you want to share your intention for AI generation.

After you agree, tapping the AI generation action sends the text in the intention field over an encrypted connection to our Cloudflare Worker, which forwards that text to the Anthropic API to create a response using Claude.

We do not automatically attach your name, journal history, mood, or reading progress.

The text you type is not automatically anonymized or redacted and may include information that identifies you or reveals your beliefs, health, or other personal circumstances.

Please share only what you want processed for that request and avoid including another person's confidential information.

Our Worker receives device verification and network information to secure the request, but it does not forward your App Attest identifier, RevenueCat customer identifier, or incoming IP address to Anthropic.

The Worker does not save or log the prayer text or generated response.

Anthropic processes and may retain the submitted text and response under its API policies, described below.

You can stop AI processing by not submitting further requests; with an active membership, you can use bundled prayers and the local journal without AI.

Device verification and service limits

We use Apple App Attest to verify legitimate app installations and protect AI access from abuse.

Our Cloudflare service stores installation verification records, public-key information, replay-prevention state, and prayer-generation attempt and quota counters.

These records are linked to an installation and are used for service functionality, fraud prevention, and enforcement of membership and service usage limits, including allowances in earlier app versions.

The service receives the incoming IP address as part of a network request and uses a keyed hash of it for stored rate-limit records.

Hashing does not make these security records anonymous.

The service also checks membership status with RevenueCat using an identifier derived from the verified installation.

Purchases and membership

Apple processes App Store payments, and RevenueCat validates purchases, provides the native paywall, and manages subscription entitlements.

RevenueCat receives a custom customer identifier and purchase, subscription, and entitlement information.

The identifier can be associated with the app installation and is kept in secure local storage so resetting preferences does not erase the subscription association.

Existing identifiers may be linked or transferred during an explicit purchase restoration to preserve access on a verified device.

We use these records to verify membership access to Vesper and understand subscription performance through RevenueCat's dashboard and paywall tools.

Any trial depends on the selected product and eligibility confirmed by Apple through StoreKit; a trial is not guaranteed.

Membership expiry restricts app access but does not erase your locally stored journal entries or progress.

Vesper does not receive your full payment card details or Apple Account password.

Subscription records and installation identifiers are linked data; the absence of a Vesper login does not make them anonymous.

Analytics and earlier versions

Vesper 1.2 does not initialize PostHog analytics and does not use Sentry for crash monitoring.

There is no advertising identifier collection or advertising tracking integration in this version.

Subscription analytics provided by RevenueCat and security-related generation counters remain active as described above.

Earlier releases, including Vesper 1.1.1, use PostHog for product analytics and may continue sending this information until you update:

• Your entered name, Christian tradition preference, spiritual goal, and notification preference when onboarding is completed.
• Selected moods, feature interactions, generation counts, and whether a journal body exists.
• Subscription package and price information, customer or device identifiers, device information, and localized error messages.

Tradition, spiritual goals, and moods may reveal religious beliefs or other sensitive personal information and may be associated with your name or analytics identifier.

These legacy analytics events do not intentionally include the prayer intention or journal body text.

The older app configuration sends events to PostHog's EU endpoint for product improvement and troubleshooting. See PostHog's privacy policy.

Disabling analytics in this version does not automatically erase information previously sent to a provider.

Contact us with questions or requests about earlier-version data.

Service providers and website visits

• Anthropic: processes the intention you choose to submit and the generated prayer. Anthropic privacy policy.
• Cloudflare: hosts our AI gateway and its installation, security, and usage-limit records, and handles request network information. Cloudflare privacy policy.
• RevenueCat: processes customer identifiers and purchase records for membership functionality and subscription analytics. RevenueCat privacy policy.
• Apple: provides App Store payments, purchase restoration, App Attest, device backups, and notification permissions. Apple privacy policy.
• Vercel: hosts this website and handles ordinary request information, such as IP address, browser information, requested URL, and request timing, to deliver and secure the site. Vercel privacy policy.

This website does not request access to your app journal and does not include an advertising tracker or a separate analytics SDK.

If you email support, we receive the email address, message, and attachments you choose to send through our email provider.

Our service providers may process information in countries other than your own.

We use information to provide the requested service, protect it from abuse, manage purchases, respond to support requests, and meet applicable legal obligations.

We do not sell personal information or use it for cross-app advertising tracking.

Retention

• Local journals, progress, and preferences: remain on your device until you delete them or remove the app, subject to separate device backups. Installation and subscription identifiers retained in secure storage are separate and may survive app removal.
• AI text and responses: are not persisted by our Worker. Anthropic's standard API policy provides for deletion within 30 days, with exceptions for agreed retention arrangements, safety enforcement, covered-model safety requirements, and legal obligations. We do not promise zero retention. See Anthropic's current retention policy.
• Installation and quota records: are retained for service security and usage-limit enforcement and currently have no automatic deletion schedule.
• Hashed IP rate-limit records: are removed during later requests after their rate-limit window expires; expiration does not guarantee immediate deletion from storage.
• Purchase records: remain with Apple and RevenueCat under their retention practices and applicable billing, fraud-prevention, and legal requirements, including after cancellation or local deletion.
• Earlier-version analytics: previously submitted PostHog records may remain under the applicable retention configuration; updating the app or resetting local data does not delete those records. Contact us about requests concerning these records.
• Support and hosting records: may be retained to resolve requests, operate and secure the website, and meet legal obligations under the applicable provider policies.

Deleting local data and making privacy requests

Use Delete All Local Data in Vesper Settings to remove locally stored prayers, journal entries, progress, streaks, and preferences.

This is a local reset, not deletion of a Vesper account; the app does not have an account registration system.

The reset does not cancel a subscription or delete purchase history, retained subscription identifiers, abuse-prevention counters, server security records, information already processed by Anthropic, or separately stored device backups.

The local reset does not currently erase cached analytics records left by earlier app versions; Vesper 1.2 does not send those records.

To cancel a subscription, use your Apple Account subscription settings. See Apple's cancellation instructions.

For access, correction, deletion, portability, restriction, objection, or other privacy requests available under the law where you live, email vesper.help.support@gmail.com.

We may need information to verify a request and locate installation or purchase records, but do not send your Apple Account password, payment card details, or private journal content.

Some records may need to be retained for fraud prevention, billing, or legal obligations.

You may also have the right to withdraw consent for future optional processing or complain to your local data protection authority.

We respond to requests within the time required by applicable law.

Children and security

Vesper is not intended for children under 13, or below the age required to consent to the service where they live.

If you believe a child has submitted personal information to us, contact us so we can review the request and take appropriate action.

We use encrypted connections, device attestation, and server-side access controls to protect service requests.

No storage or transmission method can guarantee absolute security.

Changes to this policy

We update this page when our practices change and revise the date above.

Where required, we provide additional notice or request consent for material changes.

This policy explains processing; visiting this page is not consent to submit your journal or to use optional AI.