Privacy policy

Last updated: 8 October 2026.

Who we are

Vesper and Vesper Kids are free, open-source (GPL-3.0) Android apps. The source code is atgithub.com/dculussoftwares/vesper.

Without an account

You can use the app without signing in. Your blocked apps, schedules, limits and usage statistics stay on your device. We do not receive them. The only exception is the optional AI feature described below.

What we collect if you sign in or link a phone

• Account: your email address, display name and a unique account ID (Firebase Authentication). If you use Google sign-in, Google gives us your email and name; we do not receive your Google password.
• Child phone status: the phone's name and model, whether it is online, when it was last seen, its battery level and whether it is charging, and the app that is currently in the foreground (Cloud Firestore).
• Child phone app activity: the list of launchable apps installed on the child phone (package name and label), and daily usage per app (minutes and number of opens), so a parent can see screen time and choose apps to block (Cloud Firestore).
• Rules and messages: the blocks, limits and schedules a parent sets, commands sent to the child phone, and the requests (for example "more time") and alerts (for example a revoked permission) exchanged between the two phones (Cloud Firestore).
• Notification token: a push token for each parent phone, used to deliver notifications (Firebase Cloud Messaging).
• Link codes: a short-lived code and the child phone's model, used once to link the phones. They are valid for five minutes and are then deleted automatically; deletion can take up to a day after expiry.
• Firebase SDK data: the Firebase services above process technical data needed to operate and secure them, such as app instance and installation identifiers, IP address, and device and app attestation signals (Firebase App Check with Play Integrity). We do not use Firebase Analytics or Crashlytics and do not collect advertising IDs.

AI block builder

If you use the option to describe a block in a sentence, such as "block Instagram after 9 pm", that sentence is sent to Google's Gemini model through Firebase AI Logic, and the reply is used to fill in the block form. Do not put personal details in the sentence. If the AI is unavailable, the app interprets the sentence on your device instead. We do not keep the sentence unless you choose "Report a bad result": after you confirm what will be sent, that sentence and the draft the AI produced are stored with your account so we can improve the feature. Google processes the sentence under its Firebase and Gemini API terms.

Permissions

The app uses Usage Access and an Accessibility service only to detect which app is in the foreground so it can block it and measure screen time. On a phone without an account this stays on the device. On a child phone that a parent has linked, the current app and daily usage are sent to the linked parent as described above. We do not read the content of any app, keystrokes, messages or the screen.

Why we use it

Only to run the features above: signing you in, linking a parent and a child phone, showing screen time, enforcing blocks and delivering requests and alerts. No profiling and no ads.

Where it is stored and who processes it

Account and device data is stored in Google Cloud Firestore and Firebase Authentication, and is encrypted in transit (HTTPS/TLS) and at rest by Google. Access rules limit each account's data to its owner and the phones linked to it. Google Firebase processes it on our behalf. We do not sell it, do not share it with anyone else and do not show ads.

How long we keep it

Account and device data is kept until you delete it: unlinking a phone deletes that phone's data, and deleting your account deletes everything stored with it. Link codes stop working after five minutes and are deleted automatically, which can take up to a day. Firebase may keep short-lived technical logs and backups for a limited period before they are overwritten.

Deleting your data

You can delete your account and all data stored with it in the app (Profile, Delete account and all data) or on the account deletion page. You can also unlink a single phone from the app. Data kept only on your phone is removed by uninstalling the app.

Children

Vesper Kids is installed by a parent or guardian on their child's phone and is controlled by that parent. Children do not create accounts or enter personal details. The data collected from the child phone is available only to the linked parent account and is deleted when the parent unlinks the phone or deletes the account.

Contact

Open an issue atgithub.com/dculussoftwares/vesper/issues.