Privacy Policy

Last updated: October 31, 2026

Data controller

Under Turkey's Personal Data Protection Law No. 6698 (KVKK), the data controller for your personal data is Oğuzhan Karadeniz, an individual, who develops and runs Vesper. Contact: destek@vespercard.com

What we collect

• Account details: email, username, display name, profile photo; when you sign in with Apple or Google, the name and email those services share. If you sign in with email, a 6-digit one-time sign-in code is sent to your address; it is valid for a short time and used only to verify that sign-in.
• Your recordings: the audio, its duration and waveform; its transcript, if you allowed transcription; if you also turned on friend suggestions, up to 3 interests (e.g. poetry, family) and the recording's language drawn from the transcript.
• Voice Reading (Vesper+): the recording you make for a reading and the four moments measured from it (peak, silence, flow, last breath), your constellation, your symbol notebook, your readings, the ratings you give them and the readings you have used. If reading personalization is on and you have given transcription consent, also: the transcript of the reading recording, short summaries drawn from your cards' transcripts (theme, feeling, who you were speaking to; no names or numbers) and numeric summaries of your recording habits (e.g. how many of your cards you keep to yourself, how often you record at night, your sealed cards).
• Your cards: photos you add, title, signature, theme and card images; on Vesper+, the photo you pick for an AI background and the generated background.
• 10 November Voice Archive: if you choose to leave a card in the archive, its voice, image and, if you chose so, your name are published for anyone to listen to when the archive opens; the basis is your explicit consent, and you can take it back anytime.
• Special days: the name, type and date of a day you add, and a friend you optionally link to it; only you see them. Reminders are scheduled on your device; an upcoming special day may also be mentioned in a reminder notification we send you.
• Your birthday (day, month, year; an optional feature): the year is only used to tell you your age on the day. Only you can see it; it is never shown to other users. If a year under 18 is picked, the birthday is not saved; the attempt is recorded against your account.
• Age declaration: the 18+ declaration you give with "Accept and start" on the consent screen, or by continuing on the sign-in screen, is recorded against your account, with the policy version and time.
• Social data: your friends, people you block, cards and reactions you send to friends, and reports you submit. An email address you type to find a friend is used only for matching.
• Print files: the print files you buy (your card's front and back, your optional dedication) and, if you choose "Someone else", the recipient's email address.
• Purchases: subscription status and dates, the products you buy (product, amount, date, store transaction ID), your seal and print file credits. Your card and payment details never reach us; Apple or Google takes the payment.
• Invite source: if you arrived through a card link within the first 7 days of your new account, the card link you came from (the card and its owner) is recorded. Nobody gets a reward, badge or perk for it; the record is deleted when your account is deleted.
• Consents: the type, text version and time of consents you give or withdraw.
• Device and usage: your device's push token so we can send notifications; in-app usage events (e.g. card created, shared, played); error and crash reports; to prevent abuse, the Apple/Google check result confirming the app is an unmodified Vesper, and the IP address of "Decode" requests.
• Voices left from the web: someone without the Vesper app can leave a voice of up to 30 seconds, plus a name they type, on your public card or a voice guestbook you open, through vespercard.com. The voice and name go only to you; you can delete them at any time (a deleted voice or guestbook waits in "Recently deleted" for the same period as cards, then is permanently erased), and they're permanently deleted when your account is deleted. To prevent abuse we don't store the sender's IP address, only an irreversible digest (for rate limits and “block the sender”). You can stop receiving voices from the web at any time (your card's menu → Voice replies from the web).
• Live support: the text and times of your support messages, the page you wrote from and the source tag of the link you came from; if you wrote without signing in, the email address you optionally left for our reply. To prevent abuse we don't store your IP address, only an irreversible digest (for rate limits).

We don't show ads, we don't track you across apps or websites, and we don't sell your data.

Why we collect it

• To create, store and share your cards with friends, and to play a shared card's audio via "Decode".
• If you allow transcription: to transcribe your recording and keep the transcript for personalized commentary features based on what your recordings say, which we plan to offer later. Transcription is optional and only happens with your explicit consent: you give it with a separate box on the sign-up consent screen (if you joined earlier, you're asked once when you open the app), or you can turn it on in Profile › Settings › Account & data; without it recording, cards and sharing work the same. The first of these features is the voice reading described below. The transcript isn't shown to you or other users in the app, and it's included in your "Download my data" copy; it's also used for the content screening below and (if you turn them on) friend suggestions.
• Voice Reading (Vesper+): to write you a reading from the measured moments of your voice. If personalization is on and you have given transcription consent, the reading is built for you from the transcript of the reading recording, your card summaries, the numeric summary of your recording habits and a short memory of your earlier readings; if it is off, only the measurements of your voice are used. A reading is text written with AI, not a prophecy; it is never used to make any decision about you. The rating you give a reading is used to improve your next readings and reading quality. You can turn personalization off at any time with the reading switch in Profile › Settings › Account & data.
• Reading from a received card (Vesper+): when you ask for a reading from the voice on a card someone sent you, four moments measured on your device from that card's audio (peak, silence, flow, last breath) are used to write your reading. The sender's audio file is never sent to the AI provider or transcribed, and the sender's name and identity are not sent either. The reading is visible only to you.
• To send notifications (a card arrived, a sealed card opened, reminders); you can turn notification types off in settings. When your card is heard for the first time by someone other than you, you get a notification; it doesn't include who listened or the card's title. You can turn it off in Notification settings › Your card was heard.
• If you leave your birthday, to leave you a small gift on the day (a seal credit or a note) and tell you about it; that note tells only you your age. Your age never goes to other users, analytics or AI; it is not used for anything else.
• The age declaration and attempts to enter a year under 18, to be able to show that Vesper is for people aged 18 and over.
• To prepare a print file you bought, email it to you or the recipient you choose, and keep it in My prints.
• To understand how the app is used and improve it, fix errors, prevent abuse and fraud, and review reports; for this, card text and the text of your transcribed recordings (including recordings you haven't shared) pass through an automated word filter, and our moderation team may review matches. The invite source record is also used for this, to understand whether card links bring in new people.
• Ad measurement (optional): if you allow it, to measure which ad or link brought you to the app and a few steps (sign-up, first card, starting a Voice Reading, starting a trial, purchases), so we can tell whether our ads work.
• If you turn on friend suggestions with your explicit consent: the interests drawn from your recordings (e.g. poetry, longing, family), to suggest people to you and you to others. Suggested people see your username, display name, profile photo and the interests you share; the content of your recordings is never shown. Because interests come from transcripts, no new interests are drawn while transcription is off. You can turn this off any time from the Friends screen; when you do, the interests drawn from your recordings are deleted.

Legal grounds and how we collect it

We collect your data automatically through the app, our website (vespercard.com) and email, and process it on these legal grounds under KVKK Art. 5:

• Entering into and performing our contract with you: your account, recordings and cards, friendships and sends, notifications, print files and purchases; for a gift print file, the recipient's email address (also legitimate interest: delivering the file to them).
• Legal obligation: keeping any legacy print order and invoice records for the legally required period; lawful requests from authorities.
• Establishing, exercising or defending a right: report and moderation records (including automated rule screening of transcripts), the record of consents you gave.
• Legitimate interest (provided it doesn't harm your fundamental rights and freedoms): security and abuse prevention (e.g. IP address on "Decode" requests, app attestation), error and crash reports, usage statistics to improve the app, the invite source of a new account that arrived through a card link (first 7 days, no reward) and the notification that a card was heard for the first time (without the listener's identity).
• Explicit consent: transcribing your voice and keeping the transcript (optional; given with a separate box on the sign-up consent screen, or turned on in Settings); processing your photo for an AI background and transferring it to Ideogram (optional; asked separately on first use); friend suggestions (extracting interests from the transcript). The basis for transfers abroad is set out separately under "Who we share it with". You can withdraw explicit consent at any time; withdrawal doesn't affect processing done before. Turn off transcription in Profile › Settings › Account & data › "Personalized suggestions from my recordings" (this deletes your transcripts); turn off friend suggestions from the Friends screen; for your AI background consent, write to destek@vespercard.com.
• Explicit consent (KVKK Art. 5(1); for users in the EU, GDPR Art. 6(1)(a)) — ad measurement: done only if you tick the separate box when you sign up (on the sign-in or consent screen) or turn it on in Profile › Settings › Account & data. You can withdraw it there at any time; withdrawing also resets measurement data on this device.

We don't aim to collect special categories of data such as health, religion or sex life; if they come up in a recording we don't process them separately, and we never use your voice to identify you.

Who we share it with

We share your data only with service providers (data processors) that work on our behalf to run the service:

• Supabase (servers in Frankfurt, Germany; US company) — hosting of account, recording and card data, sign-in and server operations.
• OpenAI (US) — only if you allowed transcription: transcribing your voice; if you also turned on friend suggestions, extracting interests from the transcript. Writing your voice reading: the measured moments of your voice and your symbol; if personalization is on, also the transcript of the reading recording, your card summaries and the numeric summary of your recording habits. Live support messages: to prepare support reply drafts, the latest messages of the conversation may be processed by our service provider abroad, OpenAI, L.L.C. (US), with personal details such as email addresses, phone numbers and card numbers masked; our team reads and edits the draft, and no reply is sent automatically. Your name, email address or user ID are not sent to OpenAI.
• Google Firebase (US) — push notifications (your device's push token and the notification text).
• Google Analytics for Firebase (Google Ireland Ltd.; data may be transferred to the US) — only if you allowed ad measurement: app events (sign-up, first card, starting a Voice Reading, trial and purchase; product and price) and the Firebase app instance ID. This measurement exists only in the Android app; the iOS app does no ad measurement. Your advertising ID (IDFA/AAID) is never read; you are not shown personalized ads and your data is not sold.
• Sentry (servers in Germany; US company) — error and crash reports (not linked to your account).
• Resend (US) — transactional email: print files (the recipient's email address and a time-limited download link; the file itself isn't sent), account deletion confirmation; sign-in and account confirmation emails (including the 6-digit sign-in code).
• Cloudflare (US; global network) — vespercard.com: the web page of a card you share, our legal and support pages; the IP address and browser details of people who open these pages pass through this network. When someone leaves a voice from the web, bot checks use Cloudflare Turnstile. Also Cloudflare R2 (EU data region): a nightly backup of account, card, voice recording and card image data; backups are encrypted on our side, so Cloudflare cannot see their contents.
• RevenueCat (US) — in-app purchase and subscription validation: your Vesper user ID, product, transaction ID, subscription dates and technical device/app information; your email address and name are not sent.
• Apple / Google — in-app purchases, the account you choose to sign in with, and app attestation. For these, Apple and Google are separate data controllers under their own privacy policies.

Third party acting on its own behalf: Ideogram (US) — only if you choose "Generate a background with AI" on Vesper+ and give a separate consent, the photo you pick is sent to Ideogram to generate a card background. Ideogram is not a processor working on our behalf but a data controller in its own right: under its API terms it may use this data in line with its own privacy policy. It commits not to use the photos and generated images to train its model (except content flagged as violating its usage policies). When you accept a background or cancel, the photo is deleted from our servers; the copy held by Ideogram is subject to its policy. We recommend not choosing photos that show faces or people.

We have data processing agreements (DPAs) in place with Supabase, OpenAI, Google Firebase, Sentry, Resend, Cloudflare and RevenueCat that require them to process your data only on our instructions and with protection equivalent to that provided in this policy.

Transfers to providers abroad are international data transfers under KVKK Art. 9. As the basis for these transfers we have chosen the standard contract published by the Turkish Personal Data Protection Board (KVKK Art. 9(4)(c)). Status (October 1, 2026): the standard contract has not yet been signed with any provider, so the appropriate safeguard required by Art. 9 is not yet in place for these transfers. We will put the contract to the providers for signature; we will notify each signed contract to the Personal Data Protection Authority within 5 business days of signature and update this text. Write to us to find out which providers have signed it. Transcription (OpenAI) and AI backgrounds (Ideogram) are optional; if you don't allow them, your data isn't sent to these providers for these two purposes. The explicit consent we ask for these two transfers is an additional measure and doesn't replace the standard contract. The possible risk: the US may not offer the same level of data protection as Turkey, and authorities there may access your data under US law; we also show this where we ask for your permission, before you allow it.

A card you send to a friend or make public can be seen by those people; the person you send a card to can save its voice to their device as an audio file (.m4a). That copy stays on their device; we can't delete it, even if you delete the card or your account.

Who it may be transferred to

Your personal data may be transferred, only for the purposes above and only as far as needed, to these groups of recipients:

• Our service providers (data processors): hosting, transcription, push, crash reporting, email and in-app purchase services (listed above).
• A third party acting on its own behalf: Ideogram, if you consent to an AI background (the photo you pick; see "Who we share it with").
• Other users: friends you send cards to; people who open a card you made public or whose link you shared; if you turned on friend suggestions, other users who turned them on too (your username, display name, profile photo and shared interests). When you are the first to listen to someone's card, its owner may be told that the card was heard; your identity isn't included in that notification.
• For a gift print file: the recipient you choose (the file's download link, your dedication and display name).
• Authorised public bodies and courts: only when the law requires it.

How long we keep it

We keep your data while your account is open; the following are the exceptions:

• Temporary account (trying your first card before creating an account): if you don't link an email, Google or Apple account, this account and its data are permanently deleted after 30 days, under the same rules as account deletion. At this stage your voice stays only on your device; it is uploaded to your account once you link it.
• Cards: when you delete a card, it leaves My cards and your friends' view right away. Deleted cards and voices from the web stay in "Recently deleted" in My cards for 30 days (365 days while your Vesper+ subscription lasts; at least 30 more days after it ends); during that time you can restore them, after which they are permanently erased together with the audio, its transcript, analysis and card images.
• Recordings you don't turn into a card (ones you discard or record again): the audio file and any transcript are deleted in the first nightly maintenance run after they are 24 hours old.
• Print files: kept as long as the card exists; deleted when the card is permanently erased, when you delete your account or when the purchase is refunded. An unpaid, unfinished print file is deleted after 24 hours and a gift recipient's email address after 30 days.
• AI backgrounds: a photo you upload is deleted when you accept the background or cancel, or within 24 hours if the flow is left unfinished; the background you accept is kept while your account exists. The copy sent to Ideogram is subject to Ideogram's own policy.
• Invite source record: kept while your account exists; deleted with your account.
• Usage events and error reports are kept on our servers for 90 days, and security records containing IP addresses (e.g. "Decode" attempts) for at most 7 days.
• Voice Reading: your readings and reading recordings are kept until you delete them or close your account; when you delete a reading, its recording is deleted in the next nightly maintenance run. A count of the readings you have used (date and type) is kept while your account exists.
• Ad measurement: Google keeps measurement events for 2 months; withdrawing consent resets measurement data on this device.
• If you withdraw your transcription consent, your transcripts, the interests drawn from them, the card summaries made for readings and your personalized readings are deleted right away.
• Birthday (day, month, year): until you delete it or close your account. You can delete it at any time in Settings → Account → Your birthday.
• Age declaration and attempts to enter a year under 18: while your account is open; deleted when you close your account.
• Content that has been reported is kept for a limited time for moderation (at most 180 days after the report is resolved) and then deleted.
• Live support conversations: deleted together with their messages 180 days after the conversation is closed; a conversation with no messages for 30 days closes on its own. If you delete your account, your conversations are deleted too. Content sent to the service provider to prepare a reply draft is not stored separately by us.
• Order records and files of cards ordered as legacy physical prints (if any) are not deleted, because the law requires us to keep them.
• Class cards and event memory books: an unpaid web class card's voices are deleted 30 days after its last day. A paid class card, a memory book opened with a paid event pack and a card in a printed card order are kept for as long as Vesper provides the service. Even if you delete your account, these cards pass to the Vesper archive; parents and the teacher can keep listening, while your account and personal data are deleted. If the service ever ends, we'll tell you at least 90 days ahead and give you a way to download every voice. A parent can delete their own voice with "Delete my voice" on the page until the card is made, and afterwards by writing to our support email; if you delete the card yourself, its voices are deleted too.

Deleting your account permanently erases your account, recordings, transcripts, cards, photos and friendships. When you delete it in the app, there's a 7-day wait by default: you can open the app and change your mind during that time, and the deletion happens on its own when it ends; you can also choose "Delete permanently now" to skip the wait. What remains: report and moderation records (to fight abuse and as an audit trail, unlinked from your account); purchase and subscription event records (your Vesper user ID, product, store transaction IDs, any cancellation reason and dates; no name or email address; kept for refunds, disputes and contract claims for at most 10 years); any legacy physical print order records (order, delivery address, amount, invoice details and print file; unlinked from your account and kept as long as the law requires); a record showing the deletion was carried out (dates; if you requested deletion on the website, also your user ID and the username you typed in the form: the username is deleted after 30 days and the record after 3 years; your email address isn't kept in it). Usage statistics and error reports may remain in de-identified form. Copies in backups (database, voice recordings and card images; stored encrypted in the EU) are removed by the backup cycle within 31 days at most. Records held by service providers (e.g. push, crash reporting, transcription) follow their own retention periods. Audio files (.m4a) that a recipient saved to their device aren't in our hands, so this deletion doesn't reach them.

Your rights

Under KVKK Art. 11 you have the right to:

• Learn whether your personal data is processed and, if so, request information about it.
• Learn the purpose of processing and whether it is used for that purpose.
• Know the third parties in Turkey or abroad it is transferred to.
• Have it corrected if incomplete or inaccurate, erased or destroyed under KVKK Art. 7, and have those third parties notified.
• Object to an outcome against you that results solely from automated analysis.
• Claim compensation if you suffer damage from unlawful processing.

You can download a copy of your data via Profile › Settings › Account & data › "Download my data"; deleted cards that haven't been permanently erased yet are included, with the number of days until they are erased, as are your print files (the files themselves, dedication, edition and your print credits). You can permanently delete your account in the app via Profile › Settings › Account & data › "Delete my account" (after 7 days, during which you can change your mind, or right away); if you can't access the app, request deletion at vespercard.com/delete-account or by emailing the address below. You can withdraw any consent at any time: turn off transcription with the Profile › Settings › Account & data › "Personalized suggestions from my recordings" switch (this deletes your transcripts) and friend suggestions from the Friends screen; to withdraw the consent you gave for AI backgrounds, write to destek@vespercard.com. Vesper is not intended for anyone under 18.

How to make a request

Send requests about your rights to destek@vespercard.com (as allowed by Turkey's Communiqué on the Procedures and Principles of Applications to the Data Controller); if you have a Vesper account, writing from its registered email address speeds up identity verification. If you don't have an account (e.g. a print file was sent to you or someone searched for your email address), include enough information for us to identify you. State your request clearly, and include your username if you have an account; we may ask for extra information to verify your identity. We'll resolve your request free of charge within 30 days at most. If your request is refused, you find the answer insufficient or we don't reply in time, you can complain to the Turkish Personal Data Protection Board within 30 days of learning the answer, and in any case within 60 days of your request.

Contact / report a problem

For privacy questions, data requests, or to report abuse, write to destek@vespercard.com.

Where web sign-ups come from

When you arrive at vespercard.com through a link (e.g. an ad, a guide or a shared link), the short source tag in the address (e.g. ads_3) and the path of the first page you opened are kept only in this browser (local storage) for at most 30 days. No cookie is used; your name, email address, IP address or device ID are not written.

• If, within that time, you create a new Vesper account on the site or sign in with your new account, the tag, page path and time of your first visit are saved to your account once and never changed. Nothing is saved for accounts older than seven days.
• Purpose: to measure internally which promotion channel brings new members. This information is not passed to advertising companies or anyone else and is not used to track you on other websites.
• Legal basis: our legitimate interest.
• Storage: it is deleted 24 months after it was saved, or when your account is deleted, whichever comes first; it is included in "Download my data". You can remove the record in your browser at any time by clearing the site data.

Cookies and the Meta Pixel

On some pages of our website (home page, class card page, guides, printed card page) we use the "Meta Pixel" tool of Meta Platforms Ireland Ltd. only if you give your explicit consent. If you do not consent, the pixel is never loaded and no data is sent to Meta. There is no pixel in the app, on the class card start and management page, card listening pages, teacher pages, support or legal pages.

• Purpose: to measure whether our ads on Facebook and Instagram work (e.g. how many people who saw an ad went on to start a class card).
• Data: the address of the visited page and the page view; a tap on a card start button and which card it is for ("Start the class card" or, for a personal card, "Create a free voice card"); the source tag in the ad link; your IP address, browser and device information; the cookie Meta places in your browser (_fbp). The pixel does not run on pages whose address contains a card code, teacher code or card ID; your email address, name, student names, sign-in codes and voice recordings are never sent to Meta.
• Transfer: this data is transferred to Meta Platforms Ireland Ltd. (Ireland) and to servers of Meta Platforms, Inc. in the USA. Meta may also process it under its own privacy policy (facebook.com/privacy/policy). The transfer abroad is based on your explicit consent.
• Legal basis: your explicit consent. Not consenting does not limit any function of the site or of purchasing.
• Storage: your choice is kept only in this browser for 6 months, then you are asked again. The _fbp cookie lasts at most 90 days.
• Withdrawing consent: use the "Change cookie preference" link in the footer of the site pages and choose "Reject" at any time; the pixel stops and the Meta cookie is deleted. You can also delete cookies in your browser settings.
• We use no other advertising or tracking cookies.