Privacy Policy

Your privacy matters

We designed Vestah to collect only the information needed to provide its features and to treat your personal information with care.

Information you provide

Depending on how you use Vestah, you may choose to store information such as:

• Contacts, pronouns, relationship details, Connections, and Circles
• Events, invitations, imported Calendar information, and recurring Event context
• Memories, Notes, Gifts, Follow-ups, and related people
• Plans, Lists, Menus, Grocery items, and preparation details
• Photos and Follow-up Artifacts you attach, including files, links, references, notes, and email content
• Household membership, invitations, roles, visibility choices, settings, and preferences
• Optional Interaction Profile choices and AI suggestions you request, review, accept, or dismiss
• Feedback and observations you voluntarily submit

You control what you add.

Vestah also processes technical and service information needed to operate the product, such as account and session identifiers, device and push-notification tokens, notification preferences and delivery results, subscription-access status, audit and security events, external-source provenance, and data-export requests.

Device Contacts

If you choose, Vestah can import specific Contacts that you select on your device.

Importing creates independent Vestah records. Your device Contacts remain authoritative.

Vestah does not automatically synchronize or write changes back to your Contacts.

AI Insights

AI Insights are optional and are disabled by default.

If you choose to enable AI Insights, Vestah may send a limited amount of information to an AI provider in order to generate a helpful suggestion.

Our design principles are:

• Only the minimum information needed for a specific insight is shared.
• AI is used to suggest—not decide.
• AI never changes your information automatically.
• Suggestions are always reviewable before becoming actions.
• AI is never used to make authorization or security decisions.

Whenever practical, identifying information is minimized before information is sent to an AI provider.

Vestah currently uses OpenAI for enabled AI capabilities. Requests are made with provider storage disabled for product history. The provider may still process requests as needed to return results, maintain security, and comply with its legal obligations. Vestah stores an AI result or proposal only when the feature needs it for review, delivery, provenance, or an accepted workflow.

Daily Content and public sources

Quote of the Day uses reviewed public quotation sources. If you enable Scripture of the Day, Vestah sends only a generic theme, search term, or public scripture reference to the selected public scripture service. Contact names, Event titles, Notes, Follow-up text, and other private Household details are not sent to scripture providers.

How your information is used

Your information is used only to provide and improve Vestah features, including:

• remembering important relationships
• preparing for upcoming events
• preserving meaningful memories
• providing optional AI Insights
• sending an optional weekly review and upcoming-week email
• improving reliability and usability

We do not sell your personal information.

Account information

When you sign in using Google or Sign in with Apple, we receive the basic account information needed to authenticate you and identify your account.

We do not receive your password.

If you send an Event invitation, provide an invitation email address, configure inbound Calendar email, or receive a Weekly Digest, Vestah processes the relevant addresses and message or Calendar content to deliver or import that request. Weekly Digest is enabled by default and can be turned off in your notification settings. If you enable native notifications, Apple Push Notification service processes the device token and privacy-limited notification delivery.

Storage

Your information is stored using Cloudflare infrastructure, including database, private object storage, queues, email routing, and application delivery services needed to operate Vestah.

Household records are available only according to their Household membership and visibility rules. Vestah personnel and service providers may process information when necessary to operate, secure, support, or improve the service. Administrative access is role-limited and audited; service providers receive only the information needed for their function.

Vestah also uses Google and Apple for authentication, OpenAI for optional AI capabilities, Apple for push delivery, and configured email services for invitations, Weekly Digests, and operational messages. Those providers process information under their own terms and privacy obligations.

Retention and deletion

Vestah keeps account and Household information while it is needed to provide the service, preserve information that members have chosen to share, meet security and operational needs, resolve disputes, or comply with legal obligations. Different records have different lifecycles.

• Ready data-export archives expire after seven days.
• Leaving or removal deletes information and files that are private only to that member; shared Household records remain for authorized members.
• Deleting a Household deletes that Household and its data for every member.
• Deleting an account removes the sign-in identity, private member information, preferences, sessions, devices, and access, subject to the Household outcomes shown before confirmation.
• Security, audit, delivery, backup, and operational records may be retained after ordinary product records change when reasonably needed for security, recovery, legal obligations, or abuse prevention.

Deletion from active systems may not remove information immediately from backup and recovery copies or records that must be retained for the limited reasons above. Such information is not restored to ordinary product use.

Feedback

If you choose to submit feedback or observations through Vestah, that information may be used to improve the product.

Feedback is never shared publicly without your permission.

Your choices

You can:

• choose what information to store
• enable or disable AI Insights
• manage private Daily Content and notification preferences
• remove information you've added
• request a personal export of supported information visible to you
• request a Household-scoped export if you are an owner
• switch between Households where you are an active member
• leave a Household without deleting your Vestah account
• delete your Vestah account from Settings without contacting support
• delete a Household and its data if you are an owner
• contact us with privacy questions

Exports are prepared asynchronously as CSV files in a ZIP archive. Ready downloads remain available for seven days. Both personal and owner-requested Household scopes include supported shared records and records private to the requester; neither includes another member's private records. The archive is a structured export of supported records, not a complete backup, and does not include attached photo or file bytes or every linked and operational record.

Leaving a Household removes your access and permanently deletes your private member information in that Household. Shared Household information remains available to its other members, with internal creator references deidentified where needed.

Deleting one Household permanently deletes that Household and its data but does not delete your Vestah account or your access to other Households.

Deleting your account removes your sign-in, private information, preferences, and access to every Household. Before deletion, Vestah shows what will happen to each Household. A Household where you are the only member is deleted; a Household with another owner remains after your membership and private member information are removed. If you are the only owner of a shared Household, you must make another member an owner before deleting your account.

Changes

As Vestah evolves, this Privacy Policy may be updated.

If changes materially affect how your information is handled, we'll update this page and revise the date above.

Contact

Questions about privacy?

privacy@ffrm.app