Privacy policy

Last updated: April 20, 2026

Vereme, Inc. (Delaware C-corp), with operations supported by ES5 Pte Ltd (Singapore), explains how we process personal data when you use Vereme.

Data we process

• Account. Email address, authentication data, and optional profile details you provide.
• Chat. Messages you send to Vereme and Vereme's replies. We use these to operate the service and, as described below, to understand the emotional context of what you tell us.
• Emotional context. How you're feeling, as you describe it to us or as we infer it from the words in your messages. See "How Vereme understands how you're feeling."
• Photos. Images you upload for analysis (for example, skin, wardrobe, or styling photos), processed to deliver recommendations.
• Voice (if you use voice input). When you speak to Vereme, your speech is converted to text by your device's own browser before it reaches us. We receive and store only the resulting text. We do not receive, process, or store audio recordings of your voice.
• Payments. Billing-related data handled by Stripe. We do not store full card numbers on our servers.
• Technical. IP address, device and browser metadata, approximate location derived from IP, and cookies or similar technologies used for security and analytics (subject to your consent where required).

How Vereme understands how you're feeling

Vereme is designed to recognize the emotional context of what you share, so it can respond with care and tailor its suggestions to where you are. We do this in two ways: from what you tell us directly (for example, when you log a mood or use emotion-tracking features), and by analyzing the text of your messages to infer how you're feeling.

This inference is based on your words — the text of what you write or, for voice input, the text your browser produces before it reaches us. It is not based on your face, your voice, or any physical or physiological measurement. You can review and delete your emotion history in settings.

Keeping you safe

Vereme reviews conversations for signs of crisis, acute distress, or disordered eating, so it can respond appropriately and point you toward support. We treat this safety signal as our most protected category of data: it is pseudonymized using a one-way process that obscures your identity, it is accessible only to Vereme's internal safety systems, and it is never licensed, sold, aggregated for licensing, or used to influence any product recommendation.

Interaction patterns you can opt into

Separately from your account and chat content, you can choose to share optional information about how you use the app — not what you look like and not what you say. You can turn each type off in settings, which deletes the stored history for that type. For your first 14 days after sign-up we only collect these (we do not use them to change your recommendations) so the picture settles before it informs anything.

• How you take your photos — Retakes, camera flips, and timing around your photos, so Vereme notices when photo moments feel easy or hard. The images themselves are never part of this signal.
• How quickly you answer — Pauses before you tap: a quiet signal of which questions feel simple and which feel loaded.
• When you open the app — The rhythm of your visits, mornings versus midnights, so check-ins arrive when they're actually welcome.
• Where you linger — What you slow down on, so Vereme learns what genuinely holds your interest — not what you politely scrolled past.
• How you write to Vereme — Your typing rhythm: speed and pauses, never the keystrokes' content — one more signal of how you're feeling, beyond the words.

How we use data

We use this information to provide and secure the service, understand your emotional context, personalize recommendations, process payments, communicate with you, comply with law, and improve Vereme. Our recommendations and personalization are generated automatically from your own data; they are there to help you decide and do not by themselves produce legal or similarly significant effects. We do not sell your personal data.

Aggregated insights

We may combine anonymised, aggregated patterns across users (for example cohort benchmarks and peer comparisons) to improve guidance. You can opt out of contributing to new aggregates in Settings → Privacy & data. Opting out does not remove you from aggregates already computed; it stops new contributions going forward. See our methodology page for detail.

Your rights to access, export, and request deletion remain as described below.

Editorial data licensing — three-tier model

Vereme operates a three-tier data model and licenses only the middle tier to third-party partners.

• Tier 1 — operational safety signals. Crisis, distress, and eating-disorder telemetry. Pseudonymized via a one-way HMAC. Never licensed, never aggregated for licensing, never used to drive any recommendation. Visible only to Vereme's internal operational systems.
• Tier 2 — anonymized, cohort-floored product-experience aggregates. Mean dimension scores, retention curves, and repurchase rates per product. This is the only tier that may be licensed. Every aggregate enforces a minimum cohort of 100 distinct users; no row traceable to fewer than 100 users is ever published. Freeform notes, cycle data, and any safety-flag content are excluded by construction.
• Tier 3 — internal product analytics. De-identified usage statistics that drive product decisions inside Vereme. Not licensed, not exported.

Buying licensed access to Vereme's data does not change the products Vereme recommends to anyone. Recommendations are computed from your own experience data only. The recommendation engine has no read access to data-partner contracts, and the data-licensing pipeline has no read access to recommendation-engine code. The separation is structural and verified daily by a brand-neutrality audit; aggregate results are published at /data-partners/audit-summary.

You can opt out of contributing to Tier 2 aggregates at any time. The opt-out also removes you from future aggregates; aggregates already published are not recallable, but the cohort floor of 100 means no single record can be recovered from any historical aggregate.

Processors and infrastructure

We rely on subprocessors that may process data on our behalf, including: Anthropic, OpenAI, Google (cloud and AI services), Together AI, Pinecone, Mem0, Stripe, Google Cloud Storage, Sentry, BetterStack, Mixpanel, Resend, Loops, and our IP-geolocation provider. Where photos are analyzed, specialist image-analysis providers may process those images. Contracts and safeguards appropriate to the processing apply.

International transfers

Vereme operates across the United States, Singapore, and the markets where you use it, so your data may be transferred internationally.

Data retention

We retain data only as long as needed for the purposes above or as required by law. You may request deletion subject to legal and contractual exceptions (e.g. billing records). For lifecycle stages (active, paused, cancelled, dormant, and erasure), see our data retention policy.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or object to certain processing, and to withdraw consent where processing relies on it. You can exercise these through the in-app contact flow or our support email. We will not discriminate against you for exercising these rights.

Children

Vereme is not directed to children, and we do not knowingly collect data from anyone below the minimum age for their market.

Changes to this policy

We may update this policy as Vereme changes. When we make material changes, we will update the date above and, where appropriate, notify you in the app.

Contact

Questions about this policy can be sent through Vereme's contact page or support email.

Vereme's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Raw or derived Google user data is not used to develop, improve, or train generalized or non-personalized AI and/or ML models.