Privacy policy

1. What stays on your device

Vera stores calendar entries, notes, tasks, projects, reminders, check-ins and settings in a local database. If you connect Outlook, fetched mail, calendar data and saved mail drafts are also stored locally.

Vera does not upload your workspace to a Vera cloud account. The app has no recurring licence checks, device registration, advertising trackers or automatic analytics or crash-report uploads to us. Local diagnostic logs are written on your device.

The database, local logs and exported backups are not encrypted by Vera. Anyone with sufficient access to those files may be able to read them. Device encryption and Windows account security are separate protections you control.

2. Optional Microsoft and Outlook connection

Local features do not require a Microsoft account. If you connect one, Vera communicates directly with Microsoft for sign-in and the mail and calendar operations you enable. These exchanges do not pass through Vera’s purchase or download service.

The connection requests permission to read your basic profile, access and change calendars and mail, send mail when you choose to send, and maintain access between sessions. Microsoft handles sign-in; we do not receive your Microsoft password or any account details.

Refresh tokens are kept in Windows Credential Manager. Access tokens are held in memory. Tokens are excluded from Vera’s database backups.

Outlook sign-out clears stored credentials, cached mail and connection links. It preserves local calendar entries, mail drafts and content you copied into notes, tasks or other local records. Signing out does not delete your Microsoft account or its online data.

Remote email images are blocked by default. If you enable them, the image host may receive your IP address and request details, and a tracking image may reveal that a message was opened. Following an external link also contacts its destination.

3. Purchases and secure downloads

We use Lemon Squeezy for checkout and payment records, and Cloudflare for the website and secure downloads. These services are separate from your local workspace.

Purchase records may include your name, email address, order reference, product/version, amount, tax or billing details, payment status and refund history. Lemon Squeezy and its payment providers process payment details; Vera does not store full card numbers or card security codes.

Website and download requests expose technical information such as IP address, browser or client details, requested resource and time. We and our hosting providers may process it to deliver files, prevent abuse, resolve failed downloads and secure the service. We do not need your calendar or mail content to verify a purchase.

We use order information to fulfil purchases, provide eligible downloads, process refunds, answer support requests and meet accounting or legal duties. We do not sell your personal information or use your workspace content for advertising.

4. Support correspondence

If you email veracalendar.support@gmail.com, we receive your email address, message and any attachments you choose to send. Support mail is handled through Google’s Gmail service.

Send only what is needed to explain the issue. Logs, screenshots and backups can contain private information. We do not automatically receive them. Do not send passwords, access tokens, payment card details or a full database unless we have discussed a suitable, limited way to diagnose the problem.

5. Website storage

The Vera website stores your selected theme in your browser’s local storage. This preference is not a Vera account and is not used to track you across sites. Clearing this site’s browser storage removes it.

The current website has no advertising or analytics trackers. Hosting and checkout providers may use their own storage and security technologies when you use their services. Their notices explain those practices.

6. Service providers and overseas processing

Information needed for the services above may be handled by Lemon Squeezy and its payment providers, Cloudflare, Google, and Microsoft if you connect Outlook. We may also disclose information where legally required or necessary to handle a purchase dispute.

These providers operate internationally and may process information outside Australia. Their role depends on the service: Microsoft manages your connected account; Lemon Squeezy manages checkout as merchant of record; Cloudflare provides hosting and delivery; Google handles support email.

Provider notices: Lemon Squeezy, Cloudflare, Google and Microsoft.

7. Retention and removal

Local data stays under your control. Backups, note history and recoverable or deleted records may remain in database files; deleting a visible item is not a secure erasure of every copy. Uninstalling Vera should not be assumed to remove your database, logs or exported backups.

For records we hold, we retain purchase information as needed to fulfil your purchase and meet accounting, dispute and legal obligations. Support messages are retained as needed to resolve and follow up issues. Technical logs are retained only as long as needed for delivery, security and troubleshooting, then deleted or de-identified.

Ask us to delete personal information we hold that is no longer needed. Some records may need to be retained by law or for unresolved disputes. We cannot remotely erase files on your device or independently delete records held by Microsoft or a payment provider.

8. Access, correction and privacy concerns

Contact veracalendar.support@gmail.com to request access, correction or deletion, or to raise a privacy concern. We may ask for proportionate proof of identity before disclosing or changing purchase records.

We will assess your request, explain any information we need, and respond within applicable legal time limits. Where your local law provides further rights, including objection or portability, you may ask to exercise them.

If a concern remains unresolved, you may contact the relevant privacy regulator, including the Office of the Australian Information Commissioner where it has jurisdiction.

9. Policy changes

We may update this privacy policy from time to time to reflect changes to Vera, our service providers, legal requirements or our information-handling practices. The current version will be published with its effective or last-updated date. If a change materially affects how we collect, use or disclose personal information, we will provide appropriate notice before the new practice begins and obtain consent where required by law.