Vesper:Chat · Spaulding Labs · 2026-09-29

The short version

Vesper:Chat is built to keep what you say to her on your phone. Her mind is a language model that is downloaded once and then runs on the device. The app has no accounts, no ads, and no analytics or crash-reporting code. A few things do leave the phone, and each one is listed in section 3, with when it happens.

1. Who we are

Vesper:Chat is made by Spaulding Labs (“we”, “us”). Contact: support page, or support@vesperchat.ai.

2. What the app keeps on your phone

• Your conversation with each passenger, and the facts she picks out of it (your name, things you mention), and short summaries of past talks.
• Places you spend time, only if you allow location and leave “notice where you go” on. The app stores map coordinates and the names you give those places. It never looks up an address.
• Your settings: the rules you give her, her personality dials, what she is wearing, and which purchases this phone has (product names only).
• If you set up an outside model (section 3c), its address and model name, and your API key. The key is kept in the iOS Keychain, on this device only.
• The downloaded model files.

None of this is sent to us, because we have no server that receives it. It lives in the app’s storage on your phone, and, like any app’s data, may be included in a backup of your phone if you make one (that backup is between you and Apple).

Speech, camera and voice happen on the device: what you say is turned into text on the phone (the app requires on-device recognition, so audio is not sent to Apple’s servers for this), her voice is made on the phone, and text read through the camera is read on the phone. The app does not record or save audio, photos or video. Texts and calendar events she suggests are only drafts until you finish them yourself in Messages or Calendar. She can show reminders as notifications; they are scheduled on the phone itself, not by a server.

3. What leaves your phone, and when

a. Weather. Only when you ask her about the weather. The app sends a rough location (rounded to a tenth of a degree, about 10 km) to the weather service open-meteo.com, plus what any web request carries, such as your IP address. Nothing else goes with it. Open-Meteo’s own privacy policy applies to what they do with the request.

b. Model downloads. The first time you open the app, and whenever you add another model in SYSTEMS › LLM, the app downloads the model from Hugging Face (huggingface.co). Hugging Face is sent the name of the model repository and the usual connection details (IP address, the request itself). Nothing from your conversations goes with it. Adding a model also asks Hugging Face about it first: its name and file list. Hugging Face’s own privacy policy applies.

c. An outside model (optional, off by default). Vesper:Chat can hand her thinking to a model outside the phone. This exists only if you buy the “Outside model” unlock, enter a server address yourself, run a successful test, tick that provider, and turn it on with the LLM tile. Until then, nothing here happens. While it is on, each reply sends the provider what her model would otherwise read: her instructions, what she knows about you, the recent conversation and your latest message. The background jobs that pick out facts and write summaries use it too. The connection test also contacts the server (and, for Anthropic, sends a one-word test message).

Where it goes is your choice, and only the one you turn on: your own computer on your own network (Ollama or LM Studio, over plain http on the local network only), or a cloud provider you have your own account with, using your own API key: OpenAI, Anthropic, Google Gemini, xAI, Mistral, DeepSeek, OpenRouter, or Groq. You can also type any other address that speaks the same format. That provider receives the messages and handles them under its own terms and privacy policy, not ours. Turning the LLM tile off puts her back on the phone, and messages stop leaving it.

d. Purchases. Purchases (characters, clothes, the outside-model unlock) go through Apple’s App Store and StoreKit. The app learns only which products your Apple Account owns. It never sees your payment details.

e. Nothing else. We searched the app’s code for every place it contacts the internet. The places above are all of them. The app contains no advertising, analytics, tracking or crash-reporting code, and does not ask for permission to track you.

4. Permissions, and why

Microphone	To talk to her out loud (double-tap her).
Speech recognition	Turns what you say into text on your device. Nothing is sent anywhere for this.
Camera	Reads text from things you point it at, and shows her in AR in your room.
Contacts	Looks up a contact when you ask her to text someone. The text is a draft you send yourself.
Calendar	Adds events when you ask, and can tell you what is coming up.
Location	Lets her notice places you spend time so she can ask about them (stay on the device), and gives the rough location for weather when you ask.
Local network	Connects to a model server on your own network, only if you point her at one.
Notifications	She may ask, after you have used the app a few times, to send you a message now and then. You control how often, or turn them off, in SYSTEMS or iOS Settings.

Each is optional and asked for by iOS the first time it is needed. You can change any of them in iOS Settings at any time.

5. Children

Vesper:Chat is for adults only. The first screen asks you to confirm you are 18 or older, and the app does not open or download anything until you do. It is not directed at children, and we do not knowingly collect information from them. The app holds no accounts and sends us nothing, so there is nothing for us to collect. If someone under 18 has used it, deleting the app removes everything (see below).

6. Your choices

• Forget everything. SYSTEMS › MEMORY › forget everything about me (hold to erase). It removes her facts, the places, the past talks and the whole conversation for that passenger. There is no undo.
• One item. Swipe a fact or a place away in SYSTEMS › MEMORY.
• Delete the app. Deleting Vesper:Chat deletes everything it stored on the phone, including your API key in the Keychain and the downloaded models. We hold no copy.
• Outside model. Turn the LLM tile off, or remove the key in the LLM setup page, to stop anything going to a provider.
• Permissions. Change them in iOS Settings.

Because we receive no data about you, there is nothing for us to look up, correct or delete on our side. Data that reaches an outside provider or a service listed above is held by them; ask them.

7. Changes

If the app changes what it does with your information, we will update this page and its date before the change ships. The date below is the version in force.

8. Contact

Spaulding Labs — support@vesperchat.ai

Effective and last updated: 2026-09-29