Vera Echo Privacy Policy

Effective date: June 27, 2026
Last updated: August 21, 2026

Vera Arcana LLC (“we,” “us,” or “the company”), parent site vera-arcana.com, operates Vera Echo, a browser and desktop application for structured, evidence-based exploration of topics from two cooperative perspectives. Public inquiries go through Vera Arcana, not personal contacts.

This policy explains what data the app touches, where it goes, and what we do not collect.

Summary

For ordinary play, API keys and most settings stay on your device (browser localStorage or desktop webview).
When you click Ask, your question is sent to the AI provider you use (your own API key, or school platform AI under a school or district license).
Session exports can be saved locally on your device unless you email them or use Classroom Vault.
Educators (Classroom Vault): if you use an educator license and save to Classroom, session transcripts are stored on Vera Arcana servers under the teacher account so the teacher can download them. See Educators section below.
We do not use advertising trackers or sell personal data.

Information stored on your device

The app may store the following locally:

Data	Where	Purpose
AI provider API keys	localStorage	So you do not re-enter keys each launch
Game preferences (primary AI, bookmarks, rules skip flags, etc.)	localStorage	App settings and session state
Brain background question pool and daily question	localStorage	Preloaded example questions (Brain subsystem)
Beta legal notice / tester agreement acceptance	cookie / localStorage	Required gate for private beta access
Exported session files	Documents\Vera Echo Sessions\	Backups and Past Sessions recall

We do not automatically upload this data to developer servers.

Information sent over the network

When you use features that require the internet, data leaves your device as follows:

AI providers (your choice)

If you enter an API key and click Ask, Bookmark, Compare, or related actions, the app sends your question text (plain text), conversation context, and bookmarks to the provider you selected. That transmission goes directly to that provider’s API endpoints, not through servers operated by Vera Echo.

Each provider has its own privacy policy and terms. You are responsible for reviewing those policies before use.

Brain daily questions (creator-signed feed)

The hidden Brain background component may fetch a creator-signed JSON feed over HTTPS to load a daily example question and optional question pool. The app verifies an Ed25519 signature in the Rust backend before accepting any Brain content. This feed is published only by the Vera Echo author; your game content is not sent to that feed request.

Cast to TV (local network)

Cast to TV starts a small HTTP server bound to your local network IP so a TV or phone on the same Wi‑Fi can mirror game state. This traffic stays on your LAN. A random pairing token is required to read cast state.

Opening links

Setup screens and email export may open provider billing pages, webmail compose windows, or Grok in your browser. Those services are third parties outside this app.

Feedback (optional)

If you use the in-app Feedback form and send email, you choose what to send and which mail provider to use. Feedback is not transmitted to us automatically.

Information we do not collect

Operate accounts or login systems for Vera Echo
Collect names, emails, or contact details unless you voluntarily send feedback
Sell or rent personal data
Run developer-controlled telemetry, analytics, or advertising SDKs inside the app
Receive your API keys on any server we operate

Educators and Classroom Vault

Teachers and schools may create an account at vera-echo.com/educators under a school or district license and optionally use Classroom Vault.

Account data: email, password hash, optional display name / organization name, expected class size, license key, and license status for access control.
Classroom Vault: when the game is used with an educator license and Save to Classroom (or auto-save) is used, we store session content the teacher chooses to keep: questions, AI answers, bookmarks, and Learning check takeaways. This is for teacher review, debriefs, and work samples (for example IEP / 504 documentation the teacher downloads).
Retention: vault sessions default to about 90 days, then expire; teachers may delete sessions earlier from the educators portal.
No student accounts in the current Classroom Vault product. We ask teachers not to enter student legal names. Team nicknames or side labels (Team A / Team B) are preferred.
We do not sell student or classroom data. Vault content is not used for advertising.

Children’s privacy

Vera Echo is not directed at children under 13. We do not knowingly collect personal information from children. Educator features are intended for teacher-run sessions; schools remain responsible for classroom use and any education records they download.

Data retention and deletion

localStorage: Clear app data by removing keys in Settings or uninstalling the app. Beta builds may also offer a clean-start path on launch.
Session exports: Delete files in Documents\Vera Echo Sessions\ at any time.
Third-party AI providers: Retention is governed by each provider’s policies and your account settings with them.

Security

Release and Microsoft Store builds do not embed API keys in source.
API keys are stored only in localStorage on your device.
Cast to TV requires a pairing token and binds to your LAN IP rather than all network interfaces.

No method of transmission or storage is 100% secure. Use strong, provider-specific API keys and revoke keys you no longer need.

Microsoft Store

If you install Vera Echo from the Microsoft Store, Microsoft may collect installation and store-related data under Microsoft’s privacy statement. That collection is separate from this app.

Changes to this policy

We may update this policy when the app changes. The Last updated date at the top will change when we do. Material changes for Store listings will be reflected in Partner Center.

Contact

Questions about this policy or Vera Echo privacy practices:

Product (Vera Echo): feedback@vera-echo.com
Company (Vera Arcana LLC): vera-arcana.com · corporate@vera-arcana.com