Vesper — Privacy Policy

No account, no identity

Vesper has no sign-up, no login, and no account. On first launch the app generates a random identifier — 32 bytes of randomness, kept in your device's keychain — so we can count your free and purchased generations. It is not derived from your device, your name, email, phone number or contacts, it is not linked to any other identity, and we have no way to connect it to you.

Your photographs

Your photo library stays on your device. A photograph leaves your device only when you ask Vesper to re-imagine it: it is sent over an encrypted connection to our server, passed to Google's Gemini API to generate the image you requested, and the result is returned to your device. We do not build a library of your photographs on our servers, and the images you keep are stored on your device.

Generation is performed by Google's Gemini API, so the photograph you submit is processed by Google for that request, subject to Google's API terms. Vesper uses the paid tier, and under those terms Google does not use paid prompts or responses to improve its products. Google does log them for a limited period to detect abuse and to meet legal obligations, which is outside our control and worth your knowing.

The Colour Splash tool runs entirely on your device. Photographs you edit with it never leave your phone.

What we do keep

For each installation we keep usage records — how many generations were made and when, which template was used, and the state of your credit balance — because that is how the free tier and purchases work. These are numbers and timestamps, not images.

We also record anonymous usage events: which screens were viewed and which features were used, so we can see where the app confuses people and which templates are worth keeping. An event is a short name from a fixed list, a timestamp, and occasionally a detail such as which template or which product — never free text. We never record your photographs, never the words you type into search (we store only how many characters it was), and never your location. Everything here is tied to your installation identifier and nothing else — no device identifier, no advertising identifier, no name, no email. “Forget this install” deletes all of it.

When you choose a photograph, Vesper looks at it on your phone to decide which re-stagings to offer first. That examination never leaves the device, and neither does anything detailed it finds — not how many people are in the picture, not what anyone looks like. One word is sent, chosen from four: person, pet, landscape or night. It is used to put suitable templates nearer the front, it is not stored against you, and it says nothing about your photograph beyond which of those four it was.

Two optional things you can choose to tell us, and neither is on unless you turn it on:

Your city. In Settings you may type the city you are in. It is kept on your phone and sent with a request only as a plain name — “Istanbul” — so the work we show you suits where you are. You can clear it at any time and nothing remains.

A place from a photograph. Photographs sometimes carry the coordinates of where they were taken. If yours does, Vesper turns those coordinates into a place name on your phone — “Ortaköy, Istanbul” — and offers it to you as something you may add to the note on your picture. The coordinates never leave your device. Nothing is sent unless you tap it, and what is sent is the words you saw, as part of the note you chose to write. We do not store it beyond making that one picture.

Vesper never asks for location permission and never receives your location from your phone. Both of the above are things you type or tap, and neither happens on its own.

We keep one more thing, and it is worth being exact about: the country setting of your device — two letters, such as GB or TR. That is the country you told your phone you are in. It is not your location: Vesper never asks for location permission, never receives one, and nothing more precise than a country is ever recorded. We use it to show work made for where you are, and to understand where the app is and is not working.

Purchases

Payments are processed entirely by Apple through the App Store. We never see your payment details. To credit your purchases, Apple sends us a signed receipt which we verify; it contains transaction identifiers, not your identity.

No tracking

Vesper contains no advertising, no analytics SDKs, and no third-party trackers. Nothing follows you between apps or websites, and there is no advertising identifier involved at any point. The usage events described above are our own, they stay on our own servers, and they are not linked to any identity beyond the installation itself. We do not sell, share, or monetise any data.

Processors

Two companies process limited data on the studio's behalf. PostHog (EU) receives anonymous product events — which screens were used, never your photographs, never your notes — keyed by the same anonymous install identifier the studio already holds. Sentry receives crash reports from the app and the server — technical diagnostics, not linked to you, never containing a photograph. Neither receives your name, because the studio never has it.

Deleting your data

In Settings, “Forget this install” removes the pages kept on your phone, deletes our record of your installation from our servers — its identifier, its usage records, its usage events and its credit history — and then destroys the identifier on your device, so nothing can be re-created afterwards. Because we hold nothing else about you, that is everything. Any credits you had bought go with it.

Your data, in your hands

Everything the studio holds about an install is deleted the moment you ask (Settings → Forget this install). Your pages already live on your phone: sharing or saving them from the Shelf is your export. If an install is blocked for abuse, the block record — an anonymous identifier and a reason — is retained as a legitimate interest.

Children

Vesper is not directed at children under 13, and we knowingly collect no data from them — nor from anyone else, beyond what is described above.

Changes and contact

If this policy changes, the date above changes with it, and material changes will be noted in the app. Questions: hello@kaistud.io.

KAISTUDIO HQ LTD, registered in England and Wales, is the data controller for the processing described here.