Vesper Privacy Policy
Last updated: 6 October 2026
Scope and controller
This policy applies to Vesper: Draw Light & Sound, published by Aurea Via Ltd, company number 16732300. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact contact@aurea-via.co.uk for privacy questions.
Drawing and local data
Vesper stores drawings, session history, and session reflections on your device. Private session history and reflections are not included in cloud backup. You can export your local data from Settings. Vesper generates sound within the app; it does not record your microphone.
Accounts and cloud backup
Vesper uses Firebase Authentication to create a guest identifier and, if you choose to sign in, to manage your account using email or Sign in with Apple. We process your account identifier and email address for authentication and account management. Cloud backup for signed-in Plus accounts uploads drawings, strokes, names, intentions, drawing notes, settings, and saved session compositions to Firebase Firestore and Storage. Do not include sensitive personal information in content you upload.
Optional assisted exploration
If you request assisted exploration or session composition, the content required for that request, such as drawing geometry, selected elements, a name, intention, and language, is sent through our backend to Anthropic to generate a response. Results and related request records may be stored to provide the feature and manage usage allowances. This feature is optional. Avoid including sensitive personal information. Generated content is for creative reflection and is not medical or professional advice.
Subscriptions
Apple processes App Store payments. RevenueCat processes purchase history, subscription status, product and transaction identifiers, and your Vesper account identifier to validate purchases, restore access, manage entitlements, and provide subscription analytics. We do not receive your payment card details.
Analytics and technical data
Vesper uses Firebase Analytics and, when configured, Mixpanel to understand app use and subscriptions. These services process app and installation identifiers, device and operating system details, interaction events, screen names, subscription events, and approximate location derived from network information where provided by the service. Events can be linked to your Vesper account identifier. Drawing text and private session reflections are not sent as analytics events. Backend services process technical request data, including IP addresses, for operation, security, and troubleshooting. We do not sell personal data or use it for third-party advertising or tracking across other companies’ apps and websites.
Notifications and support
If you enable notifications, we store a push token, language, and notification preferences to deliver service notices and the updates you request. You can disable notifications in your device settings. If you contact support, we process the message and contact details you provide to respond. Please avoid sending private drawings or sensitive information unless necessary for your request.
Why we process data and who receives it
We process account, cloud content, and purchase data to provide requested services and subscriptions; technical and analytics data to operate, secure, and improve the app; and support information to answer requests. Where applicable, we rely on performance of our contract, legitimate interests in reliable services and product improvement, or your consent for optional activities. Service providers include Google Firebase, RevenueCat, Mixpanel, Anthropic, Expo notification services, and Vercel hosting. Apple separately processes App Store and Sign in with Apple data under its policies. Providers may process data outside the UK or EEA, subject to applicable transfer safeguards.
Retention and deletion
We retain cloud account content while your account remains active and as needed to provide the service. Use the account deletion control in Vesper to request deletion of your Firebase account and associated cloud content. Subscription cancellation and account deletion are separate: cancelling in Apple Account settings stops future renewal, and deleting your Vesper account does not cancel an Apple subscription. Purchase, security, support, and provider records may remain for applicable legal, fraud-prevention, or operational retention periods. Contact us to request deletion or access relating to those records. Uninstalling the app removes local app data, subject to device backups.
Your choices and rights
You can use core drawing and local saving without a personal sign-in, choose whether to use cloud and assisted features, export local data, disable notifications, and delete your account in the app. Under applicable law you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent where processing relies on it. Contact contact@aurea-via.co.uk. You may also complain to the UK Information Commissioner’s Office or your local supervisory authority.
Children and policy updates
Vesper is not intended for children under 13 to create cloud accounts or use online services. If you believe a child has supplied personal data, contact us so we can investigate and arrange deletion. We will update this policy when practices change and show the revision date here.