Vesper

Privacy Policy

Last updated: October 13, 2026

Data controller

Under Turkey's Personal Data Protection Law No. 6698 (KVKK), the data controller for your personal data is Oğuzhan Karadeniz, an individual, who develops and runs Vesper. Contact: destek@vespercard.com

What we collect

• Account details: email, username, display name, profile photo; when you sign in with Apple or Google, the name and email those services share.
• Your recordings: the audio, its duration and waveform; its transcript, if you allowed transcription; if you also turned on friend suggestions, up to 3 interests (e.g. poetry, family) and the recording's language drawn from the transcript.
• Voice Reading (Vesper+): the recording you make for a reading and the four moments measured from it (peak, silence, flow, last breath), your constellation, your symbol notebook, your readings, the ratings you give them and the readings you have used. If reading personalization is on and you have given transcription consent, also: the transcript of the reading recording, short summaries drawn from your cards' transcripts (theme, feeling, who you were speaking to; no names or numbers) and numeric summaries of your recording habits (e.g. how many of your cards you keep to yourself, how often you record at night, your sealed cards).
• Your cards: photos you add, title, signature, theme and card images; on Vesper+, the photo you pick for an AI background and the generated background.
• 10 November Voice Archive: if you choose to leave a card in the archive, its voice, image and, if you chose so, your name are published for anyone to listen to when the archive opens; the basis is your explicit consent, and you can take it back anytime.
• Special days: the name, type and date of a day you add, and a friend you optionally link to it; only you see them. Reminders are scheduled on your device; an upcoming special day may also be mentioned in a reminder notification we send you.
• Your birthday (day, month, year; an optional feature): the year is only used to tell you your age on the day. Only you can see it; it is never shown to other users. If a year under 18 is picked, the birthday is not saved; the attempt is recorded against your account.
• Age declaration: the 18+ declaration you give with "Accept and start" on the consent screen is recorded against your account, with the policy version and time.
• Social data: your friends, people you block, cards and reactions you send to friends, and reports you submit. An email address you type to find a friend is used only for matching.
• Print files: the print files you buy (your card's front and back, your optional dedication) and, if you choose "Someone else", the recipient's email address.
• Purchases: subscription status and dates, the products you buy (product, amount, date, store transaction ID), your seal and print file credits. Your card and payment details never reach us; Apple or Google takes the payment.
• Consents: the type, text version and time of consents you give or withdraw.
• Device and usage: your device's push token so we can send notifications; in-app usage events (e.g. card created, shared, played); error and crash reports; to prevent abuse, the Apple/Google check result confirming the app is an unmodified Vesper, and the IP address of "Decode" requests.
• Voices left from the web: someone without the Vesper app can leave a voice of up to 30 seconds, plus a name they type, on your public card or a voice guestbook you open, through vespercard.com. The voice and name go only to you; you can delete them at any time, and they're permanently deleted when your account is deleted. To prevent abuse we don't store the sender's IP address, only an irreversible digest (for rate limits and “block the sender”). You can stop receiving voices from the web at any time (your card's menu → Voice replies from the web).

We don't show ads, we don't track you across apps or websites, and we don't sell your data.

Why we collect it

• To create, store and share your cards with friends, and to play a shared card's audio via "Decode".
• If you allow transcription: to transcribe your recording and keep the transcript for personalized commentary features based on what your recordings say, which we plan to offer later. Transcription is optional and only happens with your explicit consent: you're asked once after you save your first card, or you can turn it on in Profile › Settings › Account & data; without it recording, cards and sharing work the same. The first of these features is the voice reading described below. The transcript isn't shown to you or other users in the app, and it's included in your "Download my data" copy; it's also used for the content screening below and (if you turn them on) friend suggestions.
• Voice Reading (Vesper+): to write you a reading from the measured moments of your voice. If personalization is on and you have given transcription consent, the reading is built for you from the transcript of the reading recording, your card summaries, the numeric summary of your recording habits and a short memory of your earlier readings; if it is off, only the measurements of your voice are used. A reading is text written with AI, not a prophecy; it is never used to make any decision about you. The rating you give a reading is used to improve your next readings and reading quality. You can turn personalization off at any time with the reading switch in Profile › Settings › Account & data.
• Reading from a received card (Vesper+): when you ask for a reading from the voice on a card someone sent you, four moments measured on your device from that card's audio (peak, silence, flow, last breath) are used to write your reading. The sender's audio file is never sent to the AI provider or transcribed, and the sender's name and identity are not sent either. The reading is visible only to you.
• To send notifications (a card arrived, a sealed card opened, reminders); you can turn notification types off in settings.
• If you leave your birthday, to leave you a small gift on the day (a seal credit or a note) and tell you about it; that note tells only you your age. Your age never goes to other users, analytics or AI; it is not used for anything else.
• The age declaration and attempts to enter a year under 18, to be able to show that Vesper is for people aged 18 and over.
• To prepare a print file you bought, email it to you or the recipient you choose, and keep it in My prints.
• To understand how the app is used and improve it, fix errors, prevent abuse and fraud, and review reports; for this, card text and the text of your transcribed recordings (including recordings you haven't shared) pass through an automated word filter, and our moderation team may review matches.
• Ad measurement (optional): if you allow it, to measure which ad or link brought you to the app and a few steps (sign-up, first card, starting a Voice Reading, starting a trial, purchases), so we can tell whether our ads work.
• If you turn on friend suggestions with your explicit consent: the interests drawn from your recordings (e.g. poetry, longing, family), to suggest people to you and you to others. Suggested people see your username, display name, profile photo and the interests you share; the content of your recordings is never shown. Because interests come from transcripts, no new interests are drawn while transcription is off. You can turn this off any time from the Friends screen; when you do, the interests drawn from your recordings are deleted.

Legal grounds and how we collect it

We collect your data automatically through the app, our website (vespercard.com) and email, and process it on these legal grounds under KVKK Art. 5:

• Entering into and performing our contract with you: your account, recordings and cards, friendships and sends, notifications, print files and purchases; for a gift print file, the recipient's email address (also legitimate interest: delivering the file to them).
• Legal obligation: keeping any legacy print order and invoice records for the legally required period; lawful requests from authorities.
• Establishing, exercising or defending a right: report and moderation records (including automated rule screening of transcripts), the record of consents you gave.
• Legitimate interest (provided it doesn't harm your fundamental rights and freedoms): security and abuse prevention (e.g. IP address on "Decode" requests, app attestation), error and crash reports, usage statistics to improve the app.
• Explicit consent: transcribing your voice and keeping the transcript (optional; asked once after your first card, or turned on in Settings); processing your photo for an AI background and transferring it to Ideogram (optional; asked separately on first use); friend suggestions (extracting interests from the transcript). The basis for transfers abroad is set out separately under "Who we share it with". You can withdraw explicit consent at any time; withdrawal doesn't affect processing done before. Turn off transcription in Profile › Settings › Account & data › "Personalized suggestions from my recordings" (this deletes your transcripts); turn off friend suggestions from the Friends screen; for your AI background consent, write to destek@vespercard.com.
• Explicit consent (KVKK Art. 5(1); for users in the EU, GDPR Art. 6(1)(a)) — ad measurement: done only if you tick the separate box on the consent screen or in Profile › Settings › Account & data. You can withdraw it there at any time; withdrawing also resets measurement data on this device.

We don't aim to collect special categories of data such as health, religion or sex life; if they come up in a recording we don't process them separately, and we never use your voice to identify you.

Who we share it with

We share your data only with service providers (data processors) that work on our behalf to run the service:

• Supabase (servers in Frankfurt, Germany; US company) — hosting of account, recording and card data, sign-in and server operations.
• OpenAI (US) — only if you allowed transcription: transcribing your voice; if you also turned on friend suggestions, extracting interests from the transcript. Writing your voice reading: the measured moments of your voice and your symbol; if personalization is on, also the transcript of the reading recording, your card summaries and the numeric summary of your recording habits. Your name, email address or user ID are not sent to OpenAI.
• Google Firebase (US) — push notifications (your device's push token and the notification text).
• Google Analytics for Firebase (Google Ireland Ltd.; data may be transferred to the US) — only if you allowed ad measurement: app events (sign-up, first card, starting a Voice Reading, trial and purchase; product and price) and the Firebase app instance ID. On iOS, Apple's privacy-preserving ad attribution (AdServices) token is also passed to our payment provider RevenueCat. Your advertising ID (IDFA/AAID) is never read; you are not shown personalized ads and your data is not sold.
• Sentry (servers in Germany; US company) — error and crash reports (not linked to your account).
• Resend (US) — transactional email: print files (the recipient's email address and a time-limited download link; the file itself isn't sent), account deletion confirmation.
• Cloudflare (US; global network) — vespercard.com: the web page of a card you share, our legal and support pages; the IP address and browser details of people who open these pages pass through this network. When someone leaves a voice from the web, bot checks use Cloudflare Turnstile. Also Cloudflare R2 (EU data region): a nightly backup of account, card, voice recording and card image data; backups are encrypted on our side, so Cloudflare cannot see their contents.
• RevenueCat (US) — in-app purchase and subscription validation: your Vesper user ID, product, transaction ID, subscription dates and technical device/app information; your email address and name are not sent.
• Apple / Google — in-app purchases, the account you choose to sign in with, and app attestation. For these, Apple and Google are separate data controllers under their own privacy policies.

Third party acting on its own behalf: Ideogram (US) — only if you choose "Generate a background with AI" on Vesper+ and give a separate consent, the photo you pick is sent to Ideogram to generate a card background. Ideogram is not a processor working on our behalf but a data controller in its own right: under its API terms it may use this data in line with its own privacy policy. It commits not to use the photos and generated images to train its model (except content flagged as violating its usage policies). When you accept a background or cancel, the photo is deleted from our servers; the copy held by Ideogram is subject to its policy. We recommend not choosing photos that show faces or people.

We have data processing agreements (DPAs) in place with Supabase, OpenAI, Google Firebase, Sentry, Resend, Cloudflare and RevenueCat that require them to process your data only on our instructions and with protection equivalent to that provided in this policy.

Transfers to providers abroad are international data transfers under KVKK Art. 9. As the basis for these transfers we have chosen the standard contract published by the Turkish Personal Data Protection Board (KVKK Art. 9(4)(c)). Status (October 1, 2026): the standard contract has not yet been signed with any provider, so the appropriate safeguard required by Art. 9 is not yet in place for these transfers. We will put the contract to the providers for signature; we will notify each signed contract to the Personal Data Protection Authority within 5 business days of signature and update this text. Write to us to find out which providers have signed it. Transcription (OpenAI) and AI backgrounds (Ideogram) are optional; if you don't allow them, your data isn't sent to these two providers. The explicit consent we ask for these two transfers is an additional measure and doesn't replace the standard contract. The possible risk: the US may not offer the same level of data protection as Turkey, and authorities there may access your data under US law; we also show this where we ask for your permission, before you allow it.

A card you send to a friend or make public can be seen by those people.

Who it may be transferred to

Your personal data may be transferred, only for the purposes above and only as far as needed, to these groups of recipients:

• Our service providers (data processors): hosting, transcription, push, crash reporting, email and in-app purchase services (listed above).
• A third party acting on its own behalf: Ideogram, if you consent to an AI background (the photo you pick; see "Who we share it with").
• Other users: friends you send cards to; people who open a card you made public or whose link you shared; if you turned on friend suggestions, other users who turned them on too (your username, display name, profile photo and shared interests).
• For a gift print file: the recipient you choose (the file's download link, your dedication and display name).
• Authorised public bodies and courts: only when the law requires it.

How long we keep it

We keep your data while your account is open; the following are the exceptions:

• Cards: when you delete a card, it leaves your archive and your friends' view right away. Deleted cards stay in "Recently deleted" in your Archive for 30 days; during that time they can be restored with Vesper+, after which they are permanently erased together with the audio, its transcript, analysis and card images.
• Recordings you don't turn into a card (ones you discard or record again): the audio file and any transcript are deleted in the first nightly maintenance run after they are 24 hours old.
• Print files: kept as long as the card exists; deleted when the card is permanently erased, when you delete your account or when the purchase is refunded. An unpaid, unfinished print file is deleted after 24 hours and a gift recipient's email address after 30 days.
• AI backgrounds: a photo you upload is deleted when you accept the background or cancel, or within 24 hours if the flow is left unfinished; the background you accept is kept while your account exists. The copy sent to Ideogram is subject to Ideogram's own policy.
• Usage events and error reports are kept on our servers for 90 days, and security records containing IP addresses (e.g. "Decode" attempts) for at most 7 days.
• Voice Reading: your readings and reading recordings are kept until you delete them or close your account; when you delete a reading, its recording is deleted in the next nightly maintenance run. A count of the readings you have used (date and type) is kept while your account exists.
• Ad measurement: Google keeps measurement events for 2 months; withdrawing consent resets measurement data on this device.
• If you withdraw your transcription consent, your transcripts, the interests drawn from them, the card summaries made for readings and your personalized readings are deleted right away.
• Birthday (day, month, year): until you delete it or close your account. You can delete it at any time in Settings → Account → Your birthday.
• Age declaration and attempts to enter a year under 18: while your account is open; deleted when you close your account.
• Content that has been reported is kept for a limited time for moderation (at most 180 days after the report is resolved) and then deleted.
• Order records and files of cards ordered as legacy physical prints (if any) are not deleted, because the law requires us to keep them.

Deleting your account permanently erases your account, recordings, transcripts, cards, photos and friendships. What remains: report and moderation records (to fight abuse and as an audit trail, unlinked from your account); purchase and subscription event records (your Vesper user ID, product, store transaction IDs, any cancellation reason and dates; no name or email address; kept for refunds, disputes and contract claims for at most 10 years); any legacy physical print order records (order, delivery address, amount, invoice details and print file; unlinked from your account and kept as long as the law requires); a record showing the deletion was carried out (dates; if you requested deletion on the website, also your user ID and the username you typed in the form: the username is deleted after 30 days and the record after 3 years; your email address isn't kept in it). Usage statistics and error reports may remain in de-identified form. Copies in backups (database, voice recordings and card images; stored encrypted in the EU) are removed by the backup cycle within 31 days at most. Records held by service providers (e.g. push, crash reporting, transcription) follow their own retention periods.

Your rights

Under KVKK Art. 11 you have the right to:

• Learn whether your personal data is processed and, if so, request information about it.
• Learn the purpose of processing and whether it is used for that purpose.
• Know the third parties in Turkey or abroad it is transferred to.
• Have it corrected if incomplete or inaccurate, erased or destroyed under KVKK Art. 7, and have those third parties notified.
• Object to an outcome against you that results solely from automated analysis.
• Claim compensation if you suffer damage from unlawful processing.

You can download a copy of your data via Profile › Settings › Account & data › "Download my data"; deleted cards that haven't been permanently erased yet are included, with the number of days until they are erased, as are your print files (the files themselves, dedication, edition and your print credits). You can permanently delete your account in the app via Profile › Settings › Account & data › "Delete my account"; if you can't access the app, request deletion at vespercard.com/delete-account or by emailing the address below. You can withdraw any consent at any time: turn off transcription with the Profile › Settings › Account & data › "Personalized suggestions from my recordings" switch (this deletes your transcripts) and friend suggestions from the Friends screen; to withdraw the consent you gave for AI backgrounds, write to destek@vespercard.com. Vesper is not intended for anyone under 18.

How to make a request

Send requests about your rights to destek@vespercard.com (as allowed by Turkey's Communiqué on the Procedures and Principles of Applications to the Data Controller); if you have a Vesper account, writing from its registered email address speeds up identity verification. If you don't have an account (e.g. a print file was sent to you or someone searched for your email address), include enough information for us to identify you. State your request clearly, and include your username if you have an account; we may ask for extra information to verify your identity. We'll resolve your request free of charge within 30 days at most. If your request is refused, you find the answer insufficient or we don't reply in time, you can complain to the Turkish Personal Data Protection Board within 30 days of learning the answer, and in any case within 60 days of your request.

Contact / report a problem

For privacy questions, data requests, or to report abuse, write to destek@vespercard.com.