1. At a glance
- Vera has no account: no email, no password. We do not ask who you are.
- What you tell the app is used only to write, read aloud and paint for you, through the AI services named in section 5, and only after you agree. It is stored against a random identifier, not against a name or an email.
- The apps you seal, the photos on your vision board and how you feel when you open a sealed app stay on your phone.
- We do not sell your data, share it with advertisers or data brokers, or use your letters or answers to train models.
- You can delete your answers, letters and pictures at any time in the app: Journey → Settings → Delete my data.
2. Who controls the data
Vera is made by Pairmind Limited. Pairmind Limited is the data controller for the information described in this policy.
Pairmind Limited
7/F, MW Tower, 111 Bonham Strand
Sheung Wan, Hong Kong
hello@pairmind.dev
3. Data kept on your device
Some things never leave your phone and are never sent anywhere:
- The apps you chose to seal. Apple's Screen Time framework hands Vera an opaque token for each one. We never learn the names of those apps, and neither does anyone else.
- The photos on your vision board. They are read from your library through the system photo picker and kept in the app's own storage on the device.
- How you feel, from the one-tap check when you open a sealed app, how many times today you opened one, and your gratitude notes and saved affirmations.
- What you say when you say your affirmation aloud. The microphone is on only while you are saying it, and iOS recognises the words on the phone itself (Apple's on-device speech recognition). No recording is kept, and nothing you say is sent to us or to anyone else.
Screen Time holds the lock itself. Deleting the app removes everything held on the device, apart from a random sign-in token that iOS keeps in its Keychain.
4. Data we collect
When Vera first launches it generates a random identifier: a string of characters with no connection to you, your Apple Account or your email. Everything we store is tied to that identifier and nothing else.
| Category | Examples | Where and why |
|---|---|---|
| Name | Your first name, or whatever you typed when asked what to call you | Stored on our server (Convex) so your letters can address you |
| Onboarding answers | Your age bracket, roughly how many hours a day you said you scroll, the areas of life you are working on, the choices you tap (for example your relationship status, who you would like the love in your letters to be with, whether you have or are expecting children), the people you add and your notes about them, and your free-text answers | Stored on our server (Convex) and sent through OpenRouter to write your letters |
| What you ask for later | What you type on Today to start a playlist, what you ask Vera to paint, and the things you ask us never to mention | Stored on our server (Convex) and sent through OpenRouter to write and paint for you, after a safety check (section 6) |
| Your settings | Your pronouns, the voice you pick, the language of your letters and your time zone | Stored on our server (Convex) so your letters are written and read the way you chose |
| Generated content | Letters and stories written for you, their audio recordings, the pictures painted for your vision board and stories, a fingerprint of each letter's theme, your streak and the days you finished a letter | Stored on our server (Convex) so you can read and listen again, so your streak survives a reinstall, and so no letter repeats within thirty days |
| Future-love portraits | The pencil sketches drawn for you, who they are of (him, her or them), and a short English description of how the person looks, rewritten from what you typed. Your own words are not stored | Stored on our server (Convex) so you can see them again; generated through OpenRouter |
| Identifiers | The random identifier described above, the last day it was used, and the identifier iOS gives apps from one developer (sent to RevenueCat) | Ties your letters to your install without a name, email or login, and lets us stop writing letters for an install nobody opens any more |
| Purchase History | App Store product, transaction, trial and subscription status | Processed by RevenueCat and Apple to manage your subscription |
| Product analytics and crash reports | Which screens are reached, which buttons are tapped, and what went wrong when the app crashed, under a separate random analytics identifier | Processed by PostHog to improve the app. Never your answers, your letters or how you feel |
| Kept on device | Your vision board photos, the apps you seal, how you feel, your gratitude notes | Never leave your phone |
We are direct about this because your answers are personal. They may name a specific person, an income, or something you have not told anyone. Some can reveal sensitive information, such as your sexual orientation, a pregnancy or your health. Every question can be skipped. What you do answer is stored because a letter cannot be written for you without it, and we use it only with your explicit consent, given before the first question, and only to write for you. A network request also reveals an IP address to the service receiving it.
5. How your letters are written
To write your letters and stories, read them aloud and paint your pictures, our server sends your name, your answers and anything you type later to OpenRouter, which passes them to the AI model doing the work: today Google's Gemini models write the text and paint the pictures, and your letters and stories are read aloud by xAI, ElevenLabs or Google, depending on the voice you pick. They are sent from our server, never from your phone, under the random identifier, never with an email, an Apple ID or a phone number. Your own photos are never sent: the pictures are painted from your words alone. Read OpenRouter's privacy policy.
When you ask for a future-love portrait, the choices you tap and the line you type are sent the same way. The line is first read by an AI model, through OpenRouter, to check that it does not describe a real person, a minor or anything sexual, and rewritten into a short description of how the person looks. Only that description and your choices reach the model that draws the sketch.
The app names these services and asks for your agreement on the screen before the first question, and nothing you tell it is sent before you agree. Until then Vera sends only technical data: a random install identifier to our server, usage events to PostHog, and an app-scoped identifier to RevenueCat. You can withdraw your agreement at any time with Delete my data (section 11); Vera cannot write letters without it.
6. Safety
Every letter, story and picture is written under rules that keep out sexual content, violence, hate, health or money promises and anything about self-harm. When you ask Vera to paint something or type a new playlist, the text is first checked by an AI model, through OpenRouter, for content we don't allow. If something still comes out wrong, write to hello@pairmind.dev and tell us what it was; we will look into it and remove it.
Vera is for reflection. It is not medical, psychological or financial advice. If something heavy is happening right now, please reach out to someone you trust or a free, confidential line: findahelpline.com lists them by country.
7. Analytics and crash reports
We use PostHog for product analytics and crash reports: which screens are reached and which are abandoned, which buttons are tapped, and what went wrong when the app crashed. The events are pseudonymous: they carry a random analytics identifier that is separate from the one your letters are stored under. Your answers, your letters and how you feel are never sent to it. Read PostHog's privacy notice.
8. Purchases
Apple processes payments made through the App Store. Pairmind never sees your card or bank details.
We use RevenueCat to manage subscriptions. RevenueCat receives an app-scoped customer identifier, the identifier iOS gives apps from one developer, App Store transaction data, product, trial and subscription status, the random analytics identifier (so subscription events appear in our analytics) and, if you arrived from an Apple Ads campaign, Apple's AdServices attribution token, which tells us which campaign led to the install without identifying you. Read RevenueCat's privacy notice and Apple's privacy policy.
9. What we never do
- We never read your camera roll. The system photo picker returns only the photos you select, and the app has no access to the rest.
- We never learn which apps are installed on your phone. Screen Time is designed so the app cannot.
- We never ask for an account, email address, password or phone number.
- We never sell your data, and we never share it with advertisers or data brokers.
- We never use your letters or your answers to train models.
- We never see your payment card or bank information.
10. Sharing and international transfers
We do not sell personal information. We share the data described above only with Convex (our server host), OpenRouter (letter, story, voice and image generation and safety checks) and the AI providers it passes requests to (Google, xAI and ElevenLabs), PostHog (analytics and crash reports), RevenueCat (subscriptions) and Apple (App Store and payments). That is the complete list.
Each of them processes your data only to provide its service to us, under terms that require them to protect it at least as well as this policy describes, and none of them may sell it. Pairmind is based in Hong Kong; these providers may process data in other countries. We may disclose information if required by law.
11. Retention and deletion
Delete my data. In Vera, open Journey → Settings → Delete my data. This permanently removes your profile, your answers, every letter and story written for you, their recordings and pictures, and your streak from our servers, and withdraws your agreement to the AI processing. Your profile goes at once; the rest follows within minutes. It is not behind the paywall and it never will be.
What stays after deletion. The App Store purchase record (product, dates, status) is kept while needed to manage your subscription and to meet legal duties. Analytics events already sent stay under the random analytics identifier, which never held your answers or letters, and are kept only while needed to improve Vera, then deleted or aggregated. Our server logs hold technical details such as error codes, never your answers. OpenRouter and the AI providers it uses may keep requests for a limited time under their own terms, for example to prevent abuse.
Your subscription. Deleting data does not cancel a subscription. Cancel it in your Apple Account settings: Settings › your name › Subscriptions.
On-device data remains until you delete it in the app or delete the app. For any other request, email hello@pairmind.dev.
12. Legal bases
Where required, we process your answers, including any sensitive information they reveal, and the content written from them on the basis of your explicit consent, given before the first question; purchase data to provide your subscription; and limited analytics and crash reports for our legitimate interests in operating and improving Vera.
13. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete or receive a copy of personal information, to object to or restrict processing, and to withdraw consent at any time. You can withdraw consent and delete everything yourself in the app (Delete my data), or email hello@pairmind.dev to see or delete what we hold. You may also complain to your local data-protection authority.
14. Children's privacy
Vera is not intended for anyone under 16, and we do not knowingly store anything from them.
15. Security
We use reasonable safeguards, including encrypted network connections. Your answers are sent to OpenRouter from our server, never from your phone. Recordings and pictures are stored at long, unguessable links. No method is completely secure.
16. Changes to this policy
If this policy changes in a way that affects what we store or who sees it, the app will tell you before the change takes effect. We will also change the date at the top.
17. Contact
Questions, or a request to see or delete what we hold: email hello@pairmind.dev or write to Pairmind Limited, 7/F, MW Tower, 111 Bonham Strand, Sheung Wan, Hong Kong.