1. Who we are
This Privacy Policy is issued by JTR Labs LLC (“JTR Labs,” “we,” “us,” or “our”), located in the United States. It covers the Vesper application for iPhone, iPad, and Mac (App Store name: Vesper: Private AI Study) and this informational website.
Privacy questions and requests: [email protected].
2. Privacy at a glance
- No Vesper account is required.
- Imported PDFs, notes, slide photos, lecture audio, transcripts, extracted text, generated study material, quiz history, mastery, and learning progress are stored and processed on your device.
- Supported AI generation uses Apple’s on-device Foundation Models. Optional Mac drafts can use a local companion model you install; the iOS binary does not contain GGUF or MLX weights. There is no Vesper cloud-model fallback.
- JTR Labs does not operate an app-content server and does not receive copies of your course material through the app.
- The current app contains no advertising SDK, third-party analytics SDK, cross-app tracking, or network analytics.
- We do not sell personal information or share it for cross-context behavioral advertising.
- Apple processes App Store purchases and subscription activity under Apple’s own terms and privacy practices.
- App data may participate in Apple system backups according to your settings.
- This website uses no account, form, advertising, or marketing analytics. Hosting infrastructure can process ordinary request and security logs.
- If you email us, we receive the address and content you choose to send.
3. Scope
This Policy applies to the Vesper application for iPhone, iPad, and Mac (the “App”) and this informational marketing website (the “Site”), together called the “Services.”
It does not govern Apple’s App Store, Apple Account, iCloud, device backup, Files, Speech Recognition, Vision, Foundation Models, or other Apple services, or a third-party storage provider you choose. Those services handle information under their own terms and privacy notices.
4. Information processed by the App
Materials you choose to import
The App can accept supported PDFs you select through Apple’s system file or share interfaces; pasted notes; slide or board photos; and lecture recordings you capture or import. A source may contain names, educational records, notes, voice, images, or other personal or sensitive information. Vesper does not know what a file contains until you select it for local processing.
The App can create and store a managed local copy, file name, size, cryptographic hash, page count, duration, processing status, extracted or OCR-recognized text, OCR confidence, transcripts, timestamps, page references, source spans, search index entries, document chunks, concepts, source excerpts, and citations. These remain in the App’s local container.
Generated study content
The App can locally generate and retain quiz questions, answer choices, explanations, evidence references, flashcards, cloze cards, study guides, grounded course answers, packet outlines, dual-source comparisons, practice material, recommendations, briefings, and study plans. Generated content stays on your device unless you deliberately export or share it.
Learning and progress information
To deliver learning features, the App stores courses, exam dates, quiz attempts, answers, scores, hints, confidence selections, learning events, mastery estimates, review schedules, streaks, XP, levels, quests, achievements, usage limits, entitlement state, widget due counts, and preferences. This information is not used to create an advertising profile.
Local operational information
The App creates local identifiers, timestamps, processing checkpoints, hashes, and privacy-filtered diagnostic events needed to operate, recover, secure, and troubleshoot local workflows. Production logging is designed not to contain raw document content. Vesper does not transmit these local events to a network analytics provider.
5. Device permissions
The App requests system permissions only when a feature needs them. You can deny or later revoke them in iOS, iPadOS, or macOS Settings.
- Files / document picker. Required to import a PDF or audio file you choose. The App receives only the item you select.
- Photo library or camera. Used when you add a slide or board photo. Images are processed on device.
- Microphone. Used when you record lecture audio. Recording stays local.
- Speech recognition. Used to transcribe lecture audio on device. Audio is not uploaded to JTR Labs.
- Notifications. Optional local study reminders. There is no remote push server operated by JTR Labs.
Apple system frameworks involved in these features may process data under Apple’s policies. We do not use these permissions for advertising.
6. On-device AI, OCR, and Mac companion
Supported generative features use Apple’s on-device system language model through the Foundation Models framework. Optical character recognition uses Apple Vision. Relevant excerpts from your selected material, instructions, generated responses, and—when you enable page-aware answers on a supported iOS 27 device—up to two relevant rendered PDF pages are processed locally on your compatible device.
On a 16 GB or larger Mac, an optional companion path can draft from the same local notebook index using models that live in Application Support on that Mac. PDFs are not uploaded. GGUF and MLX weights are not inside the iOS app.
- Prompts, excerpts, and model responses are not sent to servers operated by JTR Labs.
- The App does not use a third-party cloud model or enable an Vesper cloud fallback.
- JTR Labs does not receive or use your materials to train a model.
- Temporary page images use protected local storage and are deleted after the model request completes.
- Availability depends on compatible hardware, the installed model, operating-system settings, language, and region.
Apple controls its operating-system frameworks. Apple may process diagnostics that you independently choose to share under your Apple device settings and Apple’s privacy terms. Briefing speech uses Apple’s on-device synthesizer; audio is not uploaded.
7. Widgets and local reminders
With your permission, the App can show a Home Screen widget and schedule local study reminders. Those surfaces display a due count only. They are designed not to include document text, course names, quotes, or filenames. Scheduling is local. Nothing is uploaded to JTR Labs.
Notification text may appear on the lock screen according to your preview settings. You can change authorization, previews, and delivery in system Settings.
8. Exports you choose
Study-guide PDFs and Anki packages are written on your device. Sharing uses the system share sheet. Destinations you pick (Messages, Mail, Files, another app, AirDrop) process the file under their own policies. Vesper does not upload the export to a JTR Labs server.
9. Purchases and subscriptions
If you purchase Vesper Pro, Apple processes the transaction through the App Store and StoreKit. The App can locally receive and verify Apple-signed information such as the product identifier, transaction identifier, purchase date, renewal or expiration date, refund or revocation state, billing-grace state, and current entitlement status.
JTR Labs does not receive your Apple Account password or full payment-card or bank-account details. In the current architecture, the App does not send StoreKit transactions to a JTR Labs server. Apple separately controls billing, purchase history, refunds, and subscription management. See App Store & Privacy.
10. Backups and user-selected storage providers
Vesper does not provide app-managed cloud sync. Depending on your device and backup settings, App data—including imported documents, audio, transcripts, and generated study information—may be included in iCloud Backup, a Finder/Time Machine backup, or another Apple-supported system backup.
Apple, not JTR Labs, operates those backups. We cannot access, restore, or independently delete a backup. Deleting an item in the App does not necessarily remove a copy already contained in an earlier backup, and restoring an older backup can restore earlier App data.
If you select a file from iCloud Drive or another Files provider, that provider processes the file while storing or delivering it. Its policy applies to that activity. The App receives only the file you choose through the system interface.
11. Information processed through this Site
The Site has no account, contact form, advertising, behavioral analytics, marketing tracker, or intentionally set cookie. It does not use browser storage for profiling.
Hosting and content-delivery infrastructure may automatically process ordinary request information: IP address; request time; requested page or file; browser and device headers; referring page when supplied; response status; coarse region derived by infrastructure; and security or abuse-prevention events. This information is used to deliver and secure the Site, diagnose errors, and prevent abuse—not for advertising or cross-site profiling.
Routine infrastructure logs are kept for the hosting provider’s configured operational period, typically no longer than needed for security and delivery.
12. Support email
If you email [email protected], we receive your email address, the message, any attachments you include, and standard mail metadata. We use that information to respond, troubleshoot, and keep a record of the request.
Do not send course materials, database exports, credentials, payment details, government identifiers, health information, or other sensitive information unless we specifically request a minimal excerpt. Email providers involved in delivering the message process it under their own policies.
You can ask us to delete a support conversation by emailing the same address. We may retain a limited record if required to comply with law, prevent abuse, or complete an accounting or tax obligation.
13. Purposes and legal bases
Information is processed only as needed to import, display, search, and organize selected material; perform OCR or transcription; generate and validate grounded study content; run quizzes and reviews; preserve progress; recover interrupted work; schedule reminders; verify local entitlements and limits; deliver and secure the Site; respond to support; prevent abuse; comply with law; or establish and defend legal claims.
Where a legal basis is required, processing generally relies on performance of a contract or steps you request, legitimate interests in Site security and support balanced against your rights, compliance with legal obligations, or consent for optional permissions such as notifications and microphone access. You can withdraw device permission through Settings; withdrawal does not make earlier lawful processing unlawful.
14. When limited information may be disclosed
JTR Labs cannot disclose locally stored study content because it does not receive it through the App. Limited information may be processed by:
- Apple, for App Store distribution, transactions, operating-system services, diagnostics you enable, and backups you choose.
- Site hosting and delivery providers, for request handling, availability, and security.
- Email providers, if you contact us.
- Authorities or affected parties, when the limited information we hold must be preserved or disclosed to comply with law, protect safety or rights, investigate fraud or abuse, or establish and defend legal claims.
- A successor operator, if JTR Labs LLC participates in a merger, acquisition, financing, reorganization, or asset transfer, subject to applicable law and the commitments in this Policy.
A party seeking your local App content generally must obtain it from you, your device, a backup provider, or another party that possesses it.
15. No advertising, tracking, sale, or behavioral sharing
Vesper does not display third-party advertising, use advertising identifiers, track you across other companies’ apps or sites, sell personal information, share it for cross-context behavioral advertising, or give study activity to schools, teachers, employers, data brokers, or advertisers.
Because sale and behavioral-advertising sharing are not part of the Services, there is no separate opt-out needed for those practices. A Global Privacy Control signal does not change the Site’s behavior because those activities are already disabled.
16. Retention and deletion
On your device
Local App information remains until you delete a document, course, or related item; use the App’s complete-data deletion control; delete the App and its retained data; or the operating system removes data through normal storage management. Coordinated deletion removes related managed files, audio, transcripts, and database records to preserve consistency.
Backup and transaction records
Earlier copies may remain in system backups controlled by Apple. Apple also retains purchase and subscription records under its policies and legal obligations. We cannot erase those records for you.
Information held by JTR Labs
Site request records follow configured hosting retention. Support correspondence is kept as described in Section 12. Because there is no App account and we do not possess your study database, we generally cannot remotely access, export, correct, or delete data stored only on your device.
17. Security
Vesper minimizes exposure by keeping study processing local. Managed files and structured study information use the app sandbox, controlled access to user-selected files, and file protection inside the App’s container. The Site is delivered over encrypted connections and uses provider access controls and security protections.
No device, storage method, model, or transmission is completely secure. You are responsible for protecting your device passcode, Apple Account, backup settings, exported files, and copies you share.
18. Your choices and privacy rights
You can choose what to import; delete individual material, a course, or all App-managed data; decline or revoke microphone, speech, photo, or notification permission; control notification previews; manage system-backup settings; manage or cancel an Apple subscription; stop using the Services; and avoid placing personal information in a support message.
Depending on where you live, you may have rights to know, access, correct, delete, restrict, object to, or receive a portable copy of personal information we hold; withdraw consent; opt out of sale or behavioral sharing; appeal a decision; and complain to a regulator. We do not sell or behaviorally share information and do not use local mastery recommendations to make legal or similarly significant decisions about you.
To exercise a right regarding information we actually hold (for example, a support email), write to [email protected] from the address you used and describe the request. We may need to verify it. We will respond within the time required by applicable law. For data that exists only on your device, use the App’s controls because we cannot retrieve it remotely.
California residents can learn about statutory rights from the California Attorney General. People in the EEA or UK can learn about data-protection rights from their local supervisory authority or the European Commission. You may appeal a denied request by replying to our decision email.
19. Children and younger users
Vesper is a general-purpose educational productivity tool. It is not specifically directed to children under 13 and is not intended as a COPPA-covered child-directed service. The App Store age rating is 4+ based on the absence of mature content, not because the product is designed for young children. The App has no public profile, social feed, advertising, or cloud collection of study material, and the Site does not solicit submissions from children.
A parent or guardian should supervise use where required by age, local law, school policy, or Apple purchase rules. Children should not send personal information through support email. If we later direct the product to children, deploy it through schools, or change it to collect information from children, we will assess and implement applicable consent, notice, contract, and student-privacy obligations before that change.
20. International visitors
Local App data remains on your device, subject to the backups and Files providers you choose. The Site and support email can be processed in the United States and in other countries where our hosting or email providers operate. If those transfers occur, they are limited to the categories described in this Policy.
JTR Labs LLC is established in the United States. If you access the Site from the EEA, UK, or another region with data-transfer rules, the information involved is ordinary website and email data, not your course library.
21. Changes and contact
This Policy may change as Vesper, its providers, or legal requirements evolve. A revised policy will show a new effective date. Material changes will receive notice through the App, Site, or another legally permitted method before taking effect, and consent will be requested where required.
Privacy contact: JTR Labs LLC, United States
[email protected]