Privacy Policy

Ropolabs ("we", "us") is a small studio. Our first product is Vespera. We collect the minimum information needed to run our services. We never sell your data, never use it to train third-party models, and never run ads against personal reflections inside Vespera. You can request export or deletion of your data at any time.

This policy covers ropolabs.com and the Ropolabs studio at the company level. Vespera, as a product, has its own product-specific privacy policy at vespera.ropolabs.com/privacy.

When you create an account in Vespera, we collect: your email address, an optional display name, your selected tradition and notification preferences, and the reflections you choose to save.

For unauthenticated visitors to ropolabs.com, we collect standard web-server logs (IP address, user-agent, referrer) for security and abuse-prevention purposes only. These logs are retained for 14 days then purged.

We use the information you provide to operate Vespera: deliver your daily verse, save your reflections, send push notifications you have opted into, and respond to your support requests.

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes. We do not use your reflections to train AI models.

Account data and product backend data are stored on servers we operate in the United States (Oracle Cloud). Data is encrypted in transit using TLS 1.2 or later. Server disks are encrypted at rest via the cloud provider's standard encryption.

We rely on a small number of third-party services:

• Cloudflare — DNS, content delivery, and DDoS protection for ropolabs.com and vespera.ropolabs.com.
• GitHub — source code hosting (private repositories).

Vespera as a product uses additional third-party services (Sendora Cloud, Apple App Store, Google AdMob, Google Gemini, banidb.com). Those are disclosed in the Vespera-specific privacy policy at vespera.ropolabs.com/privacy.

You have the right to access, correct, request export of, or delete your personal data at any time. Within Vespera, the Profile → Settings screen contains the account deletion control. Data export is available on request — email [email protected] from your registered email address.

Account deletion is a soft-delete with a 30-day retention period for legal-compliance reasons; after 30 days your data is purged from production systems. Encrypted backups are retained on a short rolling basis (typically under 60 days) for service-recovery purposes only.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

Vespera is not directed at children under 13 (or 16 in the EU / UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

If you indicate you are in crisis within Vespera, we display region-appropriate crisis-line resources before any other content. We do not log the contents of these interactions beyond what is required to render the feature.

We may update this Privacy Policy from time to time. Material changes will be announced via an in-app notification at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy questions, data requests, or complaints, email [email protected].