Privacy

What we store

• Your account email and password (the password is hashed, never stored in the clear).
• Profile details you enter: name, pronouns, birth date and place (used for the astrology in your reading), and any dietary notes.
• Cycle dates you log, and the daily feelings, notes, and preferences you add.
• Photos and memories you upload, plus wishes, gratitudes, and the shared cards you and your partner make together.
• The device details needed to send you notifications: a push address or Apple device token, and the browser or app version that registered it.
• If you joined the early-access list, the email you gave us.

Who can see it

Only the two people in your vessel. Every piece of data is tied to your couple and enforced at the database level with row-level security, so no other couple can read it. Photos live in a private store and are shown only through short-lived links to your own devices. We never sell your data, never share it with advertisers, and there are no ads or third-party trackers in the app.

The person who runs Vessel can access accounts when needed to fix a problem or respond to a request from you. We do not read your private content otherwise.

Where it lives

Data is stored with Supabase (database and private file storage) and the app is hosted on Vercel; both see your traffic in order to serve it. A few other services are involved in specific moments, and each one sees only what that moment needs:

• Notifications go through Apple's push service on iPhone, and through your browser's push service (Apple, Google or Mozilla) on the web. They receive the message and a device address, not your account.
• Typing a birth place sends the letters you type to Open-Meteo's geocoding service to find the town; it does not receive your name or account.
• Some artwork and articles on the cards are loaded from the sites that publish them (the Metropolitan Museum of Art, the Gottman Institute, the Greater Good Science Center), which see the request for the picture.
• Error reports go to Sentry so we can fix crashes. They carry technical details about the error, never your reflections, notes or photos, and are not tied to your account.

Traffic is encrypted in transit.

On your device

Vessel keeps a copy of your most recent day on the device so the app opens quickly, and, on iPhone, the home-screen widgets keep the short lines they show. Signing out or deleting your account clears these. A signed-in session is kept in a cookie so you stay signed in; the iPhone app can also require Face ID, Touch ID or your passcode to open.

Keeping and deleting your data

We keep your data until you remove it. You can delete your account yourself at any time in Settings under Vessel, "Your data". Deleting your account removes your sign-in, your cycle dates and check-ins, your profile and your photo, and takes you off the early-access list. Notes, thank-yous, plans and photos you shared stay with your partner, who keeps the vessel; if you are the only person in it, the vessel is deleted with you. A separate, separately confirmed option deletes the whole vessel and both accounts at once. Export first if you want a copy: one file with your account details, cycle dates, feelings, notes, wishes, thank-yous, artwork and links to your photos that work for a while. Error reports already sent to Sentry cannot be matched to you and are not deleted. If you would rather we do it, email hi@mjm.earth and we will delete your data promptly.

Health note

Cycle tracking in Vessel is for reflection and connection. It is not medical advice and not a method of contraception or fertility planning. For medical questions, talk to a clinician.

A few more things

Vessel is intended for adults. The iPhone app shows the same Vessel you use on the web; Apple receives nothing from it beyond what any app on your phone sends Apple. This policy may change as Vessel grows; meaningful changes will be noted here. Questions about your privacy are always welcome at hi@mjm.earth.