Privacy
Privacy Policy
Effective August 26, 2026
VESTAL is built around your relationships, so it is built around your trust. This policy says plainly what we store, what we never touch, and how to erase all of it.
The short version. The things you type into VESTAL sync to one server so your roster and subscription survive a new phone. Your address book, your calendar, and the words in your messages do not. We do not sell your data, we do not use it to train AI models, and we run no ads, no analytics SDKs, and no trackers.
Who we are
VESTAL is made by Perche Creek Studios, LLC, a Missouri limited liability company in the United States. When this policy says "we" or "us," that is who it means.
Questions, requests, or complaints: support@perchecreekstudios.com. A person reads that inbox.
Where your data lives
We use exactly one backend service: Supabase, which hosts our Postgres database in Canada. Your rows are encrypted at rest and isolated by row-level security, meaning the database itself enforces that only your account can read your records. No other company receives your VESTAL data.
What syncs to our server
All of it is content you typed or chose in the app:
- The first names of the people you add, and the relationship type you pick for each one.
- Your aspiration statements, the reasons in your own words that someone matters to you.
- Context notes and connection notes you write. Connection notes can describe other people, for example "glasses, blue shirt" because that is what they are for.
- The city where you met someone new, if you choose to save one. VESTAL takes a one-time location reading on your device, works out the city name from it, and syncs only that city so it follows you to a new phone. Your exact coordinates are never sent to us.
- Important dates and the labels you give them.
- Conversation thread topics, the short open loops you keep so the next message has something to pick up.
- Plan titles and venues for plans you make.
- Cadence goals, weekly commitment statistics, and your review history.
- Notification preferences and settings.
- Subscription state, meaning whether your subscription is active.
- An anonymous account identifier that ties those rows together.
That set exists for two reasons: to keep your subscription honest across devices, and so your people and rhythms come back if you reinstall or replace your phone.
What never leaves your phone
Each of these is enforced in the app's code, not just promised here:
- Phone numbers, email addresses, contact identifiers, and address book photos. When you pick someone from your contacts, only the first name comes across. On our server, each person is referenced by a random identifier and nothing else. We never receive your contacts. So that a phone number you save is not lost when you reinstall or switch phones, VESTAL stores it in your own iCloud Keychain, which is end to end encrypted and belongs to your Apple Account. It syncs between your devices and never reaches our servers.
- Calendar data. Free time is computed on your device. Your events, titles, and attendees are never uploaded. If you book a plan, VESTAL writes that one event to your calendar and reads nothing back out of it.
- Message content. VESTAL hands your draft to Apple's message composer. Apple tells the app only whether the message was sent or not sent. The words are never available to us.
- The text of drafts. Drafts stay on your device.
- Precise location. If you allow it, your device's exact coordinates are used on the device to build a search link for a nearby restaurant or golf course, and to work out the city name when you save a new connection. Those coordinates themselves are never uploaded or stored on our server. Only the resulting city name syncs, as described above.
Accounts and sign in
When you first open VESTAL, the app creates an anonymous account for you behind the scenes, before you have signed in to anything. There is no email, no password, and no sign-up form to fill out. VESTAL then uses Sign in with Apple to secure that account, as the last step of getting started, so your data follows you to a new device. We store the email address Apple provides for that Apple Account. Apple lets you hide your real address behind a private relay address, and if you choose that option, the relay address is all we ever see, never your real one.
Payments
Subscriptions are sold and processed by Apple through your Apple Account. We never see your card number, billing address, or any payment details. We receive only whether your subscription is currently active, so the app knows to unlock.
What we do not do
- We do not sell your data or share it for advertising.
- We do not use your data to train AI models.
- We do not run display ads, and we never will.
- We do not embed analytics SDKs, advertising SDKs, or cross-app trackers.
- We do not build profiles of you for anyone else.
How long we keep it, and how to delete it
We keep your data while your account exists. You can erase it yourself: open Settings in the app and choose Delete account. That immediately removes your account and every row attached to it from our server. You can also email support@perchecreekstudios.com and ask us to do it for you.
Deleting your account does not cancel a subscription. Subscriptions are managed by Apple, in your Apple Account settings. Deleting the app from your phone also does not delete your server data on its own, so use Delete account if that is what you want.
Your privacy rights
Depending on where you live, including California and other states with consumer privacy laws, you may have the right to know what personal information we hold, to get a copy of it, to correct it, and to have it deleted. VESTAL gives you deletion directly in the app, and we will honor any of these requests by email at support@perchecreekstudios.com.
We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We will not treat you differently for exercising any of these rights.
Age
You must be at least 18 years old to create an account. VESTAL is not directed at anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, email us and we will delete it.
Security
Data is encrypted in transit and at rest, and row-level security in the database restricts every row to the account that created it. No system is perfect, but the smaller the pile, the smaller the risk, which is a large part of why the sensitive things above never leave your device at all.
This website
getvestal.app is a static site and loads nothing from third parties, with one exception: the reach-out tool page runs Google Analytics, with your IP address anonymized, so we can see which question options people pick. It never receives what you type into that page or the message it composes for you. Every other page, including this one, sets no cookies and loads nothing from a third party. Even the font is served from our own site.
Changes to this policy
If we change this policy, we will update the effective date at the top of this page. If a change materially affects how we handle your data, we will tell you in the app before it takes effect.
Contact
Perche Creek Studios, LLC, Missouri, USA
support@perchecreekstudios.com