Vesper Privacy Policy

Myworkingmemory LLC provides Vesper. This Privacy Policy explains how information is handled in the app, its share extension and Home Screen widget, related support communications, and Vesper product or support pages that link to this Policy.

1 The Company and the scope of this notice

“Company,” “we,” “us,” and “our” mean Myworkingmemory LLC. “You” means the person whose information is involved. The Company’s contact details appear in Section 20. We are responsible for the information practices described here, including our handling of support communications and records we receive from Apple.

The Terms and Conditions are a separate agreement about use of the Services. Acceptance of the Terms does not provide consent to processing that separately requires your permission. A feature-specific notice provides additional information about its particular processing. An unrelated provider’s website, app, account, or service is governed by that provider’s own practices and applicable law. This distinction does not remove our responsibility for providers acting on our behalf.

2 Information handled through the Services

Vesper processes savings entries, amounts, dates, notes, currencies, targets, contribution and payment schedules, reminder preferences, selected pictures, screenshots, PDFs and text, recognized text, voice input, edits, and related settings on your device. Savings records, saved plans, local recovery copies, basic use counts, and selected shared-source copies are stored locally. Myworkingmemory LLC does not receive your savings amounts, entry dates, notes, source files, voice recordings, transcripts, or saved plans through the app’s analytics. If you turn on Share product analytics, the Company receives the limited events and random installation identifier described in Section 7. You may separately choose to send us information in a support email or attachment; we then receive what you send, together with the communication information supplied by your email service. Review your message and attachments before sending them.

Platform and website information

Apple provides the app with product and verified transaction information needed to determine purchase access. The Company may receive the sales, proceeds, refunds, usage, and diagnostic reports Apple makes available to developers under its rules and your applicable choices. Those reports are separate from the records and documents you process.

When you open a website, your browser communicates an IP address and technical request information, such as the requested address and browser details, to the website’s hosting infrastructure so it can deliver the page. Hosting and security services may also process request logs to operate and protect the site. Opening a product, privacy, or support page does not attach the app’s local savings records or selected source files. Reading a page bundled inside Vesper does not itself load the public website; following an external link can do so. Turning off the app’s optional analytics does not mean that browsing the web or sending email occurs entirely on your device.

3 Purposes of processing

Local processing carries out the recording, editing, calculations, planning, recognition, storage, purchase-access, reminders, widget display, imports, recovery, and export operations you request. Preferences and local counts support continuity, appropriate offers and review prompts, and information you may choose to provide when seeking help. Vesper does not use your recorded savings to initiate a bank transfer or payment. When you enable optional product analytics, the limited events described in Section 7 help the Company understand use, purchase and restoration outcomes, product reliability, and where users encounter difficulty.

For information the Company receives, we use it as reasonably necessary to respond to a communication; investigate and resolve a reported problem; provide requested product information; maintain accurate support, transaction, and administrative records; protect security and prevent fraud or misuse; verify and handle a rights request; document consent, notices, or agreements actually provided to us; comply with applicable obligations; and establish, exercise, or defend legal claims. Website request information supports delivery, reliability, and security of the requested pages. Feedback may help us improve the product without giving us access to your local records and documents.

We use a support attachment to address the matter for which it was supplied and related lawful recordkeeping. We do not treat the act of requesting support as permission to publish the attachment, sell it, or use it for unrelated advertising. A materially different purpose requires the notice, legal basis, and consent, if any, that applicable law requires.

4 Local storage and access

Savings records and saved plans are held in the app’s device storage. Its Apple App Group container holds copies of material you deliberately share into Vesper and a limited snapshot used by the Home Screen widget. The main app, share extension, and widget use the information needed to perform their respective functions. The widget can show your recorded balance and the remaining target amount when the relevant access and privacy settings permit it. The Company does not provide an account-based cloud savings ledger, remote ledger administration, or automatic savings-record synchronization between your devices.

Vesper’s savings records, local recovery copies, preferences, and shared-container information may be included in Apple’s backup or device-transfer mechanisms according to the data type, your settings, and Apple’s actual behavior. Vesper does not represent that all of this data is excluded from device backups. Its app-protection preference is stored for the current device and is not designed to migrate through iCloud Keychain or a device backup. Source photos, files, and exported copies may separately be backed up or synchronized by Photos, Files, a cloud provider, or another service you use. Do not rely on the Company to recover work; keep independent backups and exports before deleting the app, replacing or resetting a device, or removing its storage. Section 11 explains the limits of deletion and recovery copies.

The app reads text you deliberately paste into an input field and photos or files you select through the relevant picker. It does not continuously inspect your clipboard or scan your photo library in the background. Camera use requires your selection of the feature and the relevant permission. The share extension receives material you select in another app and retains a local shared copy until you clear it. Voice input requires microphone and speech-recognition permission; Vesper requests on-device English recognition and offers typed input when that capability is unavailable. Vesper does not deliberately record and save an audio file as part of that feature. Apple’s keyboard dictation or another input tool you independently choose has its own practices.

5 Copies, sharing, and exports

Copying the analytics ID or other text through a system text control places the selected material on the system clipboard. Operating-system features such as Universal Clipboard may make it available elsewhere according to your Apple settings. Sharing or exporting sends content to the recipient, app, file provider, or storage location you select. A destination may upload or retain its own copy under its terms and settings. CSV exports and monthly PDF reports contain the savings information included in those outputs. A Vesper backup contains the saved document, including records marked as deleted and saved settings, targets, and schedules; it therefore can contain more than the currently visible history. Treat it as sensitive even if you previously removed entries from the active ledger.

Share with a friend sends Vesper’s App Store link through the sharing destination you select. That action does not attach your savings history, source documents, reports, or backup. Sharing the app is separate from exporting savings information. Vesper does not insert a promotional app link into your recorded entries or use the Share with a friend action to give the Company access to your messages or contacts. A messaging app or other recipient you choose may process and retain the link and your accompanying message under its own practices.

Export and sharing operations may involve temporary copies managed by the app, the operating system, or the file provider you choose. Vesper uses Apple’s file-export interfaces and does not represent that closing an export interface immediately deletes every temporary or destination copy. An interruption, an operating-system decision, a provider’s retention, or a cleanup failure can leave a copy until later cleanup or removal. We do not represent that every temporary or recipient copy is immediately or irreversibly erased. Protect and manage exported material through the relevant device, app, storage location, and provider.

Deleting a savings entry removes it from the active history and calculations but retains a marked record in the saved document for recovery consistency; it is not secure erasure. Clearing a shared-source copy removes that inbox copy, not its original source. Neither action deletes clipboard content, a recovery file, an exported copy, an operating-system backup, or a recipient’s record. The Company cannot retrieve or erase material that exists only on your device or in an independent recipient’s system. You must manage those copies through the relevant app, device, or provider. See Section 11 for further retention and deletion details.

6 Purchases and Apple services

Apple’s App Store and StoreKit handle purchases, purchase restoration, and applicable platform redemption and refund processes. Vesper receives the product and transaction-verification information needed to assess access, including relevant product identifiers, transaction or entitlement status, refund or revocation information, and verified original-app purchase information used to recognize qualifying earlier paid-app owners. It retains local purchase-access state. Transaction verification may involve information that is not included in the app’s analytics. If optional analytics are enabled, selected purchase and restoration events and controlled result labels may be transmitted as described in Section 7; full StoreKit transaction identifiers and receipts are excluded from that analytics payload.

The Company does not receive your full payment-card number through Vesper. Apple handles Apple Account and payment information under its own terms and privacy policy. The Company may receive developer transaction and reporting information as described in Section 2, and may retain records actually received for support, accounting, dispute, or legal purposes.

Restoring a purchase restores the applicable entitlement, not deleted savings records, source files, plans, or backups. Removing the app does not request a refund. Apple controls the independent records and privacy choices associated with its services. Vesper’s separate local recovery tools work only with copies that remain available and satisfy the app’s validation requirements; a purchase restoration does not retrieve those copies from the Company. User-initiated backup import adds eligible missing entries and does not replace current edits, deletion records, or saved planning and reminder settings.

A review request opens Apple’s review interface. The app may record that it requested the interface or opened a review link, but it does not read the rating you select. A review you publish on the App Store is subject to Apple’s publication rules and may be visible to the Company and the public in the form Apple provides.

7 Analytics, diagnostics, and advertising

Vesper’s app and extensions do not contain an advertising SDK, a third-party analytics SDK, or session replay, and do not request permission for cross-app advertising tracking. The app does include a direct connection to PostHog for optional product analytics. Share product analytics is off by default. Local aggregate event counts are maintained whether or not it is enabled; those local counters are not themselves automatically uploaded as a usage summary. With the setting off, Vesper does not initiate product-analytics uploads. With it on, permitted events are sent to the Company’s PostHog project through its U.S. collection endpoint. These events describe app launches and updates, entry starts and completions, offers viewed or dismissed, product loading, purchase and entitlement results, restoration, export attempts and outcomes, and review requests. Events can include a controlled entry-point label, a broad entry-count range, a result label, and a previous app version.

The analytics payload also includes a random installation identifier, app and bundle identity, version and build, platform, development or production context, store environment, and event-schema version. PostHog receives event timing and technical network-request information when delivering and processing the events. The installation identifier links events from the same installation; this is pseudonymous information, not a promise of anonymous data. The payload excludes savings amounts, entry dates, notes, goal or payment details, source photos and documents, recognized text, voice recordings or transcripts, imported and exported files, and StoreKit transaction identifiers. The app requests that PostHog not create a person profile or enrich events with IP-derived location. Those requests do not mean that a server handling an internet request cannot receive an IP address or other technical request information.

You can turn Share product analytics off in Settings to stop future analytics requests initiated by Vesper. A request already in progress may still finish, and turning the setting off does not delete events already received. Copy analytics ID lets you include that identifier in a request about Company-held analytics. Vesper’s analytics controls consist of the toggle and ID-copy option; Settings does not provide a readable event-summary export. If you send an analytics ID, diagnostic information, or an attachment to support, we receive what you send with your message; review it first. You can ask about access or deletion under Section 14 without enabling analytics or purchasing an Expansion Pack.

Apple may make diagnostics and aggregated platform information available to the Company under Apple’s settings and choices. Vesper does not include a separate automatic crash-reporting service to the Company. A diagnostic file you deliberately send can contain more information than the limited product-analytics payload, so inspect it and remove unnecessary private content. Apple’s developer reports and any diagnostic communication you choose to send are separate from the savings records and selected source files that the app keeps locally.

We do not sell the personal information handled under this Policy or share it for cross-context behavioral advertising, and do not use it for targeted advertising as those terms are defined by applicable U.S. privacy law. A necessary service-provider disclosure or a business transaction is handled under Section 10 and applicable law. We will not introduce an advertising, tracking, or analytics practice requiring additional notice or consent without first providing the legally required disclosure and choice.

8 Recognition and other automated features

Recognition of selected images and scanned or imported documents uses Apple’s on-device Vision, VisionKit, and related PDF capabilities. Vesper’s voice feature requests Apple’s on-device English speech recognition and does not fall back to a Company cloud speech service when that capability is unavailable. The app does not send your selected documents or voice input to a cloud generative-AI provider to recognize or process them, and the Company does not receive your local savings records, source documents, or transcripts for model training. This describes the app’s recognition path; it does not characterize the independent practices of a recipient to whom you send material or an operating-system input feature you separately use. Optional product analytics remain governed by Section 7 and do not contain that source content.

The app applies automated rules to calculate balances and hypothetical savings scenarios, parse amounts and dates, suggest contribution schedules, and recognize verified purchase access, including qualifying earlier paid-app access. These functions operate on information and assumptions supplied through the app; they do not initiate transfers, assess creditworthiness, or decide whether a contribution is affordable for you. Vesper is a savings-recording and planning utility and does not provide a Company service for making legally or similarly significant decisions about employment, credit, housing, healthcare, insurance, or another person’s eligibility. A user’s independent use of Output does not authorize the Company to make such a decision.

9 Service providers

We use providers for email, website hosting, security, optional product analytics, professional advice, and other functions needed to operate the Company and respond to requests. PostHog processes the limited analytics described in Section 7 for the Company when you enable that feature. Those providers may process Company-held information as needed to perform the service for which they are engaged, subject to the arrangements and legal duties applicable to that relationship. Engaging a provider does not give it access through Vesper to your local ledger, documents, or voice content that the app does not transmit.

Some providers, including Apple for its independent platform operations and a recipient you select, determine their own purposes and practices. Their role is different from a provider acting solely for the Company. No provider arrangement eliminates all operational or security risk. Contact us if you need information about the provider categories relevant to a request you sent us.

10 Disclosures, legal requests, and business transactions

For information we actually hold, we may disclose it to service providers assisting an authorized purpose; professional advisers, auditors, insurers, or others who reasonably need it for the relevant matter and are subject to appropriate duties; recipients you direct or authorize; or a public authority or other recipient where legally justified.

We may preserve, access, or disclose that information when reasonably necessary to comply with an applicable obligation or enforceable legal process; protect a person’s vital interests or lawful rights; address security, fraud, or misuse; enforce an agreement; or establish, exercise, or defend a legal claim. We assess the request and may seek clarification, narrow it, challenge it, or decline it where appropriate and lawful. We do not promise notice of every request where notice is prohibited or not legally required.

Information may also be reviewed or transferred in a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, or sale of relevant business assets, including appropriate due diligence. Such handling remains subject to applicable confidentiality, notice, and privacy obligations. This clause does not convert local savings records that we never received into a Company asset or grant us remote access to those records.

11 Retention and deletion

Local savings records and plans remain while the relevant storage is retained. Deleting an entry marks it as deleted and removes it from active history and totals; its amounts, date, note, and identifiers may remain in the saved document so older backups do not silently restore it. Vesper may also retain a previous local copy, a separately preserved unreadable file after recovery, and a temporary in-memory undo state. A full backup can include marked-deleted records. You can separately clear shared-source items from the inbox. A refund or revocation does not instruct the app to delete your savings work. Local preferences, usage counts, installation identity, and purchase-access state remain while their relevant storage is retained, and device-keychain items have Apple’s separate retention behavior. Removing the app generally removes its app-local data, subject to Apple’s actual shared-container, backup, keychain, and device behavior; merely offloading the app can retain its data. This is not a secure-erasure promise. Manage independent exports, device backups, and recipient copies separately.

For Company-held information, retention depends on the category and purpose. Support messages and necessary attachments are retained for the time reasonably needed to investigate, answer, and document the request and related follow-up. Privacy requests, dispute notices, opt-outs, and relevant acceptance records may need to be retained to establish and honor the choice, demonstrate compliance, or address a claim. Transaction and financial records actually received may be kept for applicable accounting, tax, fraud, and legal requirements. Website and security records are kept only for a proportionate delivery, reliability, security, or incident purpose. Optional analytics are retained according to the product-improvement and reliability purposes described in Section 7, the applicable provider arrangements, and lawful access, deletion, or preservation requirements. Turning analytics off stops new requests initiated by Vesper; it does not by itself remove previously received events. We do not claim a fixed automatic deletion period that has not been established for the relevant records.

In determining the period, we consider whether the matter is active, the sensitivity and necessity of the information, applicable limitation or recordkeeping periods, a reasonably anticipated dispute, and a legal preservation duty. When information is no longer reasonably needed, we delete or dispose of it, subject to lawful exceptions and ordinary backup or archive cycles.

Deletion from an active mailbox or system may precede removal from an archive or backup. A lawful preservation obligation can delay deletion. We do not promise immediate deletion of every copy or removal of records the law permits or requires us to keep. You may ask about the criteria applicable to a particular record. We cannot restore or erase savings records that exist only on your device.

12 Security

The app uses Apple’s application sandbox, an App Group container for its share extension and widget, and file-protection controls for its savings records, local previous copy, and shared-source files. The optional app-protection feature uses Apple’s device-owner authentication through Face ID, Touch ID, or the device passcode, depending on your device. Vesper receives the authentication outcome, not your biometric templates or device passcode. A device-local keychain preference records whether app protection is enabled. When enabled, Vesper is designed to cover the app when it becomes inactive and hide amounts in its widget and saving reminders. Operating-system rendering and refresh behavior can affect when a display changes. These measures do not replace device access controls, make a recipient’s copy private, or prevent a person with authorized access to your unlocked app from obtaining a copy. Exported CSV, PDF, and backup files are not separately locked by Vesper’s app-protection setting; protect them at the destination.

For information the Company holds, we apply reasonable administrative, technical, and organizational safeguards appropriate to its sensitivity, purpose, and risks. Access is limited to people and providers who need it for an authorized purpose, subject to applicable duties. We do not represent that a certification, security standard, or special regulatory status applies merely by describing these safeguards.

No storage, transmission, or security measure guarantees that unauthorized access, loss, alteration, or disclosure can never occur. Protect your device and Apple Account, examine destinations before sharing, and keep necessary independent copies. Ordinary support email is not a promise of end-to-end encrypted document delivery.

13 Security incidents

We assess suspected incidents involving information for which we are responsible and take appropriate steps in light of the circumstances and applicable law. Where notification is legally required, we provide the required notice to affected people, authorities, or others. The recipients, timing, content, and delivery method depend on the facts, mandatory deadlines, and any lawful restriction or delay. This Policy does not promise notification of every device event or every incident involving an independent provider.

14 Choices, privacy requests, and appeals

You can choose what to enter, import, retain, paste, or export; manage camera, microphone, speech-recognition, notification, and other relevant permissions in device settings; enable or disable optional product analytics; copy your analytics ID for a request; clear shared-source copies; and remove savings entries from active history as described in Section 11. Separately manage source material, recovery copies, and exports held by Apple or another recipient. You do not need to purchase an Expansion Pack to make a privacy request concerning information the Company holds. Review the information you choose to send with a request and include only what is reasonably needed.

Depending on the applicable law, you may have rights to confirm processing, access information, correct inaccuracies, delete covered information, receive a portable copy, restrict or object to processing, withdraw consent where processing relies on it, opt out of qualifying sale, sharing, targeted advertising, or profiling, and appeal a denied request. These rights are subject to their legal scope and exceptions; they are not a guarantee that every record must be erased in every circumstance.

To make a request, email dean@myworkingmemory.ai and identify Vesper, the request, and the minimum information needed to locate the relevant Company records. For a request about optional analytics, you may use Copy analytics ID in Vesper Settings and include that identifier; doing so does not require turning analytics on. We may proportionately verify identity and authority or seek clarification. An authorized agent may need to establish authority, and we may confirm the request directly with the person where law permits. Do not send a password, private key, full payment-card number, or unnecessary document content. Do not send your savings ledger merely to establish that you use the app.

We will respond within the period required by the law that applies and explain any lawful extension, refusal, limitation, or available appeal as required. You may also contact a competent privacy regulator; using this process does not waive that right.

We do not unlawfully discriminate or retaliate because you exercise a privacy right. We may retain information needed to honor a choice or demonstrate how a request was handled. We cannot obtain local savings records we never received to answer a request; you control those records in the app. Requests concerning independent Apple records or another recipient should also be directed to that provider.

15 Children and teens

Vesper is a general-purpose savings-recording and planning utility and is not directed to children under 13. The app has no Company registration account, advertising profile, or automatic upload of savings and document contents. Optional product analytics are separate and are off by default. An App Store age rating does not establish consent to data collection or replace a legal requirement concerning children. Where a child’s information would require parental authorization or other safeguards, an ordinary analytics toggle or acceptance of Terms does not replace those requirements.

We do not knowingly seek personal information from children under 13 for ordinary Company support or optional product analytics. If we learn that we received covered information from a child without a legally required authorization, we will take the steps applicable law requires, including deletion or appropriate limitation of further use. Email us if you believe this has occurred. Do not send additional sensitive information merely to report the concern. An installation identifier alone does not tell us a person’s age, and the absence of an account does not excuse a duty that applies when we become aware of covered information.

Parents and guardians should supervise device, sharing, and purchase choices appropriate to a child’s age. Local processing can involve a child’s information selected by a user even though no document is sent to the Company. A new feature or audience that requires parental notice, consent, or other safeguards must satisfy those requirements before the relevant processing begins.

16 Sensitive information and third-party documents

Savings entries, notes, plans, images, PDFs, voice input, and recognized text can contain financial details, health information, private correspondence, government identifiers, information about children, or other sensitive material. Entering savings or selecting a document for local processing does not itself send that content to the Company. The app does not integrate with HealthKit, precise-location collection, or a financial-account connection or money-transfer service. Its optional device protection uses Apple’s Face ID, Touch ID, or device-passcode authentication as described in Section 12; Vesper does not receive the biometric templates or passcode. This authentication feature is distinct from creating a Company biometric-identification database.

Avoid sending sensitive information through support unless necessary for the matter and you have the authority to provide it. Redact information about other people when possible. If a request requires special-category or otherwise specially protected data, the Company must have the additional lawful basis or authorization applicable to that handling; a general acceptance of Terms is not a substitute. An unsolicited attachment does not authorize unrelated use. We may ask for a redacted example, restrict handling, or remove unnecessary material.

17 International processing

Myworkingmemory LLC is based in the United States. Information you send to the Company is received by a U.S.-based business, and the providers involved in communication, hosting, analytics, or support may operate in other countries. If you enable product analytics, Vesper sends the limited events described in Section 7 to the Company’s PostHog project through its U.S. collection endpoint. On-device document and voice recognition do not require a Company transfer of your source content abroad. Your own use of a cloud file provider, email service, or sharing destination may result in a separate international transfer controlled by that service or by your choices.

For a transfer by the Company that is restricted by applicable privacy law, we make the transfer only when the necessary legal conditions and safeguards are satisfied. Depending on the actual recipient and transfer, the law may recognize an adequacy decision, approved contractual safeguards, or a specifically applicable exception. You may contact us for information about the mechanism applicable to Company-held information and, where required, a copy of the relevant safeguards.

18 Regional privacy information

EEA and UK information

Where the EU GDPR or UK GDPR applies to the Company’s handling of personal information, the applicable legal basis depends on the purpose. Handling a request or providing a service at your request may be necessary to perform a contract with you or take requested steps before a contract. Support administration, reliability, proportionate fraud prevention, and protection of legal claims may rely on our legitimate interests where those interests are not overridden by the rights the law protects. Compliance processing relies on a legal obligation where the relevant law recognizes that basis. Optional app product analytics rely on your opt-in consent; you can turn them off in Settings for future requests without affecting processing already lawful before withdrawal. Consent is also used when another feature or applicable law requires it. Any additional requirement for specially protected information applies separately.

The legitimate interests referred to here are delivering and supporting the product, maintaining accurate records, keeping Services secure and reliable, preventing misuse, and establishing or defending lawful rights. We do not use this basis to bypass a consent requirement. Providing support information is generally voluntary, but we may be unable to investigate a particular issue without the details reasonably needed to understand it. The data categories, recipients, retention criteria, and international processing are described in the preceding sections.

You have the rights that apply to the particular processing, including the right to object to processing based on legitimate interests. You may complain to a competent supervisory authority, including in the EEA country where you habitually reside, work, or believe an infringement occurred, or to the UK Information Commissioner where applicable. Our contact is in Section 20.

United States state rights

Where a state privacy law applies to the Company and your information, we provide the rights, verification, authorized-agent, appeal, and nondiscrimination protections that law requires. Categories and sources of information are described in Section 2, purposes in Section 3, recipients in Sections 9 and 10, and retention criteria in Section 11. The absence of a Company account does not eliminate a right concerning support or other information we actually hold.

The app does not engage in the sale, behavioral-advertising sharing, or targeted advertising described as absent in Section 7. Where a law requires recognition of an applicable browser or device privacy signal for covered processing, we honor that requirement. A signal does not itself delete a local record or document or unsubscribe you from a communication you requested. Contact us if you need help identifying the relevant choice.

19 Changes to this Policy

We may revise this Policy when the product, information practices, provider arrangements, or legal requirements change. We provide additional notice or obtain consent when required. We will not rely on a silent webpage change to authorize a materially different use of previously collected information where the law requires more.

A future cloud, external AI, account, advertising, or materially different analytics feature would require disclosures and controls appropriate to its actual operation before the relevant processing begins. The limited optional analytics already described in Section 7 do not authorize a future upload of savings records, source documents, or voice content. This Policy does not authorize an undisclosed future upload of the local ledger or shared-source inbox. The version applicable to a processing activity and any legally required notice or consent remain relevant after a revision.

20 Contact

Email: dean@myworkingmemory.ai