Privacy policy

Updated 2026-10-13

vemry is an application on your computer, and your notes never leave your disk. Data reaches our server only when you sign in to an account, use hosted AI credit, capture from a phone or send feedback from the app, and this page says exactly which data.

Without an account

The application has no telemetry, no account and reports nothing. It reaches the network in five situations only, each started by something you did: the AI endpoint you configured, a web page you opened, images in the Reader, ad-blocking rules you subscribed to, and Check for updates. With your own API key, your requests go straight from your computer to the vendor you chose; our server takes no part and sees nothing. Apart from these, when you press Send in the app's feedback dialog, what you wrote reaches our server, account or not; the section on feedback below says what it carries.

What we store once you sign in

Account: your email address. Sign-in uses a one-time code; there is no password.

Devices: the name, platform, app version and last-used time of each device you signed in on, plus a token stored only as a hash. You can revoke any device on the account page.

Orders and balances: what you bought, when, for how much, and your current balance. The payment itself is handled by the payment processor; we never see card numbers.

Usage counts: each call through hosted credit writes one row: time, feature, model, peak or off-peak, token counts, amount. The row contains nothing you sent and nothing the model answered.

Phone captures, only if you pair a phone: the text of each capture (and, when you share a page from the phone, its link and title), the time on your phone when you wrote it, and when it reached the server. A capture waits on the server until your computer takes it, stays seven more days so your phone can show that it landed, and is then deleted; one your computer never takes is deleted thirty days after it arrived. For each paired phone we keep the name it gave at pairing, when it was paired, when it last sent a capture, and a token stored only as a hash. You can unpair a phone at any time in the app's settings.

Feedback you send

When you send feedback from the app, signed in or not, we keep what you wrote, its kind (problem, idea or question), when it was sent, a reply address (your account's when signed in, the one you typed when not, or none) and, only if you leave them ticked, the app version, the operating system, the interface language and the current model's vendor and model id. The dialog lists those diagnostics line by line before you send. Nothing from your vault is attached, and no IP address is kept.

Feedback is forwarded to our support mailbox through the email sending service so that it can be read and answered. It is kept on the server for a year and then deleted; feedback sent while signed in is deleted at once when you delete the account. To have feedback sent without an account deleted, write to support@vemry.app.

What we do not store

Prompts and answers are not stored. The relay forwards your request unchanged to the model vendor and streams the answer back unchanged; nothing is saved, cached or used for any training along the way.

No IP addresses. The counters used for rate limiting live in memory and are never written to the database. No names, none of your notes and none of the pages you opened, apart from the phone captures on their way to your computer described above.

Third parties

Models: hosted requests go to DeepSeek, with Zhipu as the fallback line. Their own policies apply to what reaches them. Your privacy zones never reach any model, because the application removes them before sending.

Payments: processed by a merchant of record, Waffo Hong Kong Limited or Paddle.com, whichever the payment page shows. What you enter on the payment page reaches only them; we receive the outcome and an order number.

Email: verification codes, receipts and the feedback forwarded to our support mailbox are delivered by an email sending service.

Who is responsible

vemry is operated by Pang Yexing, an individual based in Beijing, China. A postal address is available on request by e-mail. Contact: support@vemry.app. The person responsible for personal data is the operator.

Where your data is processed

The account service, the relay, the phone-capture inbox and the feedback you send run on a server in Hong Kong.

When you use hosted credit, the relay forwards your request to the model vendors named on this page (DeepSeek, with Zhipu as the fallback line), whose servers are in mainland China. The relay itself stores neither the prompt nor the answer.

The sign-in code is delivered by an email sending service. Payments are processed by Waffo Hong Kong Limited or Paddle.com, the merchants of record named on this page.

Without an account, without hosted credit and without sending feedback, no data reaches our server at all: in each of the five situations above, the request goes straight from your computer to the party you chose.

Logs

The server's access log records the path, status code, user id, duration and token counts, and is deleted after 14 days. The log contains no request bodies.

Deleting your account

One action on the account page. Your email is replaced by an irreversible hash, every device token and every paired phone stops working, any remaining balance is forfeited, and the feedback you sent while signed in is deleted. Phone captures still on the server are deleted on the schedule above, at most thirty days after they arrived. Order and ledger records are kept, as payment records cannot legally be deleted.

Retention and deletion

The server's access log is deleted after 14 days. A phone capture is deleted seven days after your computer takes it, or thirty days after it arrived if your computer never does. Feedback is deleted a year after it arrives, or at once when the account it was sent from is deleted. Other account data is kept for the life of the account. On deletion your email address is replaced by an irreversible hash and every device token and paired phone stops working; order and ledger records are kept, as payment records cannot legally be deleted.

If you are in the EEA, the UK or Switzerland

The legal basis for processing your email address, device records, orders, usage counts and phone captures is performance of the contract: without them there is no account, no settlement and no way to carry a capture to your computer. The international transfer made by the hosted relay rests on the explicit consent you give at sign-in; phone captures pass through the server in Hong Kong because carrying them to your computer is the service you ask for when you pair a phone. Feedback is processed on the basis of your consent, given by sending it so that we read and answer it; you can ask for it to be deleted at any time.

Neither Hong Kong nor mainland China has an adequacy decision. The transfer rests on your explicit consent at sign-in and on the fact that prompt text is not stored. You can withdraw that consent at any time and use your own API key instead; the application is just as complete.

You have the right to access, rectify, erase and port your personal data, to object to processing, to withdraw consent, and to complain to the supervisory authority in your country. To exercise them, write to support@vemry.app; erasure is also one action on the account page.

If you are in Japan

The cross-border provision notice the APPI requires: the destination is Hong Kong, and, when you use hosted credit, the model vendors in mainland China. The personal-data rules of these jurisdictions differ from Japan's. The measures taken are: prompts and answers are not stored, device tokens are kept only as hashes, phone captures are kept at most thirty days after they arrive, feedback at most a year, and account data is deleted on request.

If you are in Korea

The separate cross-border items PIPA requires. What is transferred: your email address; the device name, platform and app version; usage count rows; and, if you pair a phone, the text and times of your phone captures and the phone's name; if you send feedback, its text, its reply address and the diagnostics you left ticked. Prompt text only passes through in transit and is not stored. To whom: the operator of the relay (see Who is responsible on this page) and the model vendors DeepSeek and Zhipu. In which country: Hong Kong for the relay, mainland China for the model vendors. For what purpose: to provide the account and hosted credit and to settle usage. How long it is kept: for the life of the account (phone captures on the schedule above, at most thirty days; feedback at most a year), and after deletion as described under Retention and deletion on this page. How to refuse: do not sign in and do not send feedback; the local editor needs no account.

Contact

Questions go to support@vemry.app; security reports to security@vemry.app.