Privacy

Privacy Policy

Effective July 28, 2026

VESTAL is built around your relationships, so it is built around your trust. This policy says plainly what we store, what we never touch, and how to erase all of it.

Who we are

VESTAL is made by Perche Creek Studios, LLC, a Missouri limited liability company in the United States. When this policy says "we" or "us," that is who it means.

Questions, requests, or complaints: phil.hotchkiss@perchecreekstudios.com. A person reads that inbox.

Where your data lives

We use exactly one backend service: Supabase, which hosts our Postgres database in Canada. Your rows are encrypted at rest and isolated by row-level security, meaning the database itself enforces that only your account can read your records. No other company receives your VESTAL data.

What syncs to our server

All of it is content you typed or chose in the app:

• The first names of the people you add, and the relationship type you pick for each one.
• Your aspiration statements, the reasons in your own words that someone matters to you.
• Context notes and connection notes you write. Connection notes can describe other people, for example "glasses, funny accent," because that is what they are for.
• Important dates and the labels you give them.
• Conversation thread topics, the short open loops you keep so the next message has something to pick up.
• Plan titles and venues for plans you make.
• Cadence goals, weekly commitment statistics, and your review history.
• Sample texts you choose to provide so drafts sound like you.
• Notification preferences and settings.
• Subscription state, meaning whether your subscription is active.
• An anonymous account identifier that ties those rows together.

That set exists for two reasons: to keep your subscription honest across devices, and so your people and rhythms come back if you reinstall or replace your phone.

What never leaves your phone

Each of these is enforced in the app's code, not just promised here:

• Phone numbers, email addresses, contact identifiers, and address book photos. When you pick someone from your contacts, only the first name comes across. On our server, each person is referenced by a random identifier and nothing else. We never receive your contacts.
• Calendar data. Free time is computed on your device. Your events, titles, and attendees are never uploaded. If you book a plan, VESTAL writes that one event to your calendar and reads nothing back out of it.
• Message content. VESTAL hands your draft to Apple's message composer. Apple tells the app only whether the message was sent or not sent. The words are never available to us.
• The text of drafts. Drafts stay on your device.
• Location. If you allow it, your location is used on the device to build a search link for a nearby restaurant or golf course. It is not stored on our server.

Accounts and sign in

When you first open VESTAL, the app creates an anonymous account for you. There is no email, no password, and no sign-up form. That account is what your rows belong to.

You can later choose Sign in with Apple so your data follows you to a new device. If you do, we also store the email address Apple provides. Apple lets you hide your real address behind a private relay address, and a relay address is all we ever see if you choose that option.

Payments

Subscriptions are sold and processed by Apple through your Apple Account. We never see your card number, billing address, or any payment details. We receive only whether your subscription is currently active, so the app knows to unlock.

What we do not do

• We do not sell your data or share it for advertising.
• We do not use your data to train AI models.
• We do not run display ads, and we never will.
• We do not embed analytics SDKs, advertising SDKs, or cross-app trackers.
• We do not build profiles of you for anyone else.

How long we keep it, and how to delete it

We keep your data while your account exists. You can erase it yourself: open Settings in the app and choose Delete account. That immediately removes your account and every row attached to it from our server. You can also email phil.hotchkiss@perchecreekstudios.com and ask us to do it for you.

Deleting your account does not cancel a subscription. Subscriptions are managed by Apple, in your Apple Account settings. Deleting the app from your phone also does not delete your server data on its own, so use Delete account if that is what you want.

Your privacy rights

Depending on where you live, including California and other states with consumer privacy laws, you may have the right to know what personal information we hold, to get a copy of it, to correct it, and to have it deleted. VESTAL gives you deletion directly in the app, and we will honor any of these requests by email at phil.hotchkiss@perchecreekstudios.com.

We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We will not treat you differently for exercising any of these rights.

Children

VESTAL is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will delete it.

Security

Data is encrypted in transit and at rest, and row-level security in the database restricts every row to the account that created it. No system is perfect, but the smaller the pile, the smaller the risk, which is a large part of why the sensitive things above never leave your device at all.

This website

getvestal.app is a static site. It sets no cookies and runs no analytics. It loads fonts from Google Fonts, which means your browser's IP address reaches Google's font servers when a page loads. That is the only third party involved in visiting this site.

Changes to this policy

If we change this policy, we will update the effective date at the top of this page. If a change materially affects how we handle your data, we will tell you in the app before it takes effect.

Contact

Perche Creek Studios, LLC, Missouri, USA
phil.hotchkiss@perchecreekstudios.com