Privacy Policy

1. Who we are

Vest Self is an app that turns your goals into daily tasks, helps you track and verify your progress, and lets you put real stakes behind your commitment.

Vest Self ("we", "us") is responsible for the personal information described in this policy. You can reach us at any time at hello@vestself.app.

This policy covers the Vest Self app and this website, vestself.app.

2. What we collect

Information you give us

• Account details — your name, email address, and phone number if you sign in with it. If you sign in with Google or Apple, we receive your name and email address from them.
• Your goals — the answers you give us about what you want to achieve, where you're starting from, what success looks like, and how much time you can commit each week.
• Your progress — the tasks you complete or miss, sessions you track, streaks, and any proof you choose to add, such as photos, videos or notes.
• Accountability and community — if you invite an accountability partner or connect with friends, the details you share to invite them, and the progress you choose to share.
• Commitments — if you put money behind a goal: the amount, the tasks and milestones it's tied to, and a record of refunds and penalties.
• Messages — anything you send us when you contact support.

Payment information

All payments are handled by Stripe. Your card details go directly to Stripe and we never see or store your full card number. Stripe shares a limited record with us — such as the card brand, the last four digits, and whether a payment or refund succeeded — so we can show you your history and handle refunds.

Information collected automatically

• Device and app information — device type, operating system, app version, language, and crash reports, so we can keep the app working.
• Notification tokens — if you allow notifications, so we can remind you about your tasks.

3. Google Calendar

If you connect Google Calendar, Vest Self does two things:

1. Adds your plan's sessions as events in your main Google Calendar. Each event is marked as created by Vest Self, and we only ever change or delete those events, never your own events or other calendars.
2. Reads when you are busy (start and end times only) so your plan avoids your existing commitments. We cannot see event names, descriptions, locations or attendees. Busy times are checked only when your sessions are added to your calendar and are not stored.

We never sell or share your Google data, never use it for ads, and never use it to train AI models. You can disconnect at any time in the app or at myaccount.google.com/permissions. When you disconnect or reset your account, you can have Vest Self remove the events it added.

Vest Self's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your information

• To build your plan — we use your goal answers to break your goal down into daily tasks.
• To run the app — to create your account, schedule your tasks, send reminders, and show your progress.
• To verify progress — to check the proof you submit and decide whether a task was completed.
• To handle commitments — to take payments, issue refunds as you earn them back, review missed tasks, and resolve disputes.
• To keep Vest Self safe — to prevent fraud and abuse, and to meet our legal obligations.
• To improve the app — to understand what's working and fix what isn't.
• To talk to you — to answer your questions and send you important updates about your account. We'll only send marketing emails if you've agreed to them, and you can unsubscribe at any time.

We don't sell your personal information, and we don't use it for advertising.

5. Our legal bases

If you're in the EU, the UK or anywhere with similar laws, we rely on these legal bases:

• Contract — to provide the app you signed up for, including your plan, tracking and commitments.
• Consent — for connecting Google Calendar, sending notifications, and marketing emails. You can withdraw consent at any time.
• Legitimate interests — to keep the app secure, prevent fraud, and improve Vest Self, in ways that don't override your rights.
• Legal obligation — to keep payment and tax records where the law requires it.

6. Who processes data for us

We use a small number of trusted providers to run Vest Self. They process data only on our instructions and are bound by contracts that protect it.

We may also share information if the law requires it, to protect the rights and safety of our users, or as part of a merger or sale of the business — in which case this policy would continue to apply to your information.

7. International transfers

Some of our providers are based in the United States or process data outside your country. When we transfer personal information out of the EU or UK, we rely on recognised safeguards, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

8. How long we keep it

• Your account and app data — for as long as your account is open. When you delete your account, we delete it within 30 days.
• Payment records — for as long as tax and financial laws require, which can be up to several years after a payment.
• Backups — deleted data may remain in encrypted backups for up to 30 more days before it's overwritten.
• Waitlist sign-ups — until the app launches and we've invited you, or until you ask us to remove you.

9. Deleting your data

You can delete your account at any time from Profile → Settings in the app, or by emailing hello@vestself.app from the email address on your account.

We'll confirm once it's done. Deleting your account removes your goals, progress, proof and profile. If you have an active commitment, we'll settle it first — any amount you've already earned back will still be refunded.

10. Your rights

Depending on where you live, you have the right to:

• access the personal information we hold about you;
• correct it if it's wrong;
• delete it;
• get a copy of it in a portable format;
• object to or restrict how we use it;
• withdraw your consent at any time.

To use any of these rights, email hello@vestself.app. We'll respond within one month. If you're unhappy with how we've handled your information, you can also complain to the data protection authority where you live.

11. This website and the waitlist

If you join the waitlist, we collect your email address, the goal you share with us, and how you found us (for example, Instagram or a direct visit). We use this to invite you when Vest Self launches and to understand what people want to achieve. Sign-ups are sent to us by email through Web3Forms and stored in a private Google Sheet.

This website uses Vercel Web Analytics to count visits. It doesn't use cookies and doesn't track you across other websites. Fonts and icons are loaded from Google Fonts and unpkg, which receive your IP address in order to deliver them.

12. Security

We protect your information with encryption in transit, access controls, and by working only with providers that meet high security standards. No system is perfectly secure, but if a breach affects your personal information, we'll tell you and the relevant authorities as the law requires.

13. Children

Vest Self is for people aged 18 and over. We don't knowingly collect information from anyone under 18. If you think a child has given us their information, contact us and we'll delete it.

14. Changes to this policy

We'll update this policy as Vest Self grows. If we make a significant change, we'll let you know in the app or by email before it takes effect. The date at the top shows when it was last updated.

15. Contact us

Questions about your privacy or this policy? Email hello@vestself.app.