Legal
Terms & Privacy
Terms of Service
1. Who we are
Vemila is a personal productivity app run by its two founders, based in the United Kingdom, trading as "Vemila". Vemila is not a registered company. You can reach us at admin@sauvia.org.uk.
2. Your account
- You must be 16 or older to use Vemila.
- You are responsible for keeping your password safe and for activity under your account.
- Provide accurate information when you sign up, and let us know if your email changes.
- One person per account. Don't share your login.
3. Acceptable use
Use Vemila for your own personal planning. Don't use it to break the law, infringe others' rights, send spam, attempt to access other users' data, probe or overload our systems, or reverse-engineer the service. We may suspend or close accounts that do.
4. Mila and AI-generated content
Vemila includes an assistant ("Mila") and other features that use AI (currently Claude, provided by Anthropic) to generate suggestions, plans and replies. AI output can be wrong, incomplete or unsuitable. It is not professional advice, whether medical, legal, financial or otherwise. Use your own judgement before acting on it. You are responsible for what you do with anything Mila produces.
To keep Vemila quick and affordable for everyone, AI features have fair-use limits, the same on every plan. At the moment Mila can plan up to 5 new goals in any hour and 15 in any 24 hours, suggest daily checks up to 5 times in any hour and 15 times in any 24 hours, and write up to 3 Weekly Reads in any 24 hours. A request counts when you make it, even if it doesn't finish. Mila's daily message allowance depends on your plan, is shown on the pricing page and resets at midnight in your time zone. To stop misuse, cope with a rise in our AI costs or keep Vemila running, we may lower any of these limits, sometimes straight away. If we do, we'll update this page and the pricing page as soon as we can. If you're on a paid plan and the new limits don't suit you, you can cancel any time from your account settings.
5. Beta status
Vemila is early software offered on an "as is" and "as available" basis. Features may change, break or be removed, and the service may be unavailable at times. We don't promise it will be error-free or uninterrupted.
6. Plans and payment
Vemila has a Free plan and a paid Productivity plan; a Studio plan will follow when Vemila Studio launches. Paid plans are billed through our payment processor, Stripe. When paid plans are live:
- Prices, what each plan includes and its limits are shown on the pricing page. Subscriptions renew automatically for the billing period you chose until you cancel.
- You can cancel any time from your account settings; your plan stays active until the end of the period you've paid for.
- We don't run trials that quietly start billing you.
- Your statutory rights, including any right to a refund under UK consumer law, are unaffected.
7. Your content
Anything you put into Vemila, such as goals, plans, notes and messages to Mila, remains yours. You grant us only the permission needed to store and process it so the app can work for you (see the Privacy Policy). We don't sell your content or use it to train AI models.
8. Ending your use
You can delete your account at any time from settings; this removes your data as described in the Privacy Policy. We may suspend or end access if you breach these terms or to protect the service or other users.
9. Liability
To the extent the law allows, Vemila is not liable for indirect or consequential loss, or for loss of data or profit arising from your use of the service. Nothing in these terms limits liability that cannot be limited by law (such as for death or personal injury caused by negligence, or fraud). As Vemila is provided to you as a personal-use service, our total liability to you is limited to the amount you paid us in the 12 months before the claim.
10. Changes and governing law
We may update these terms; if we make material changes we'll tell you by email or in the app. These terms are governed by the laws of England and Wales, and disputes are subject to the courts of England and Wales.
Privacy Policy
1. What we collect
- Account details: your email address, a securely hashed password, and your display name.
- Your content: the goals, plans, planner and activity entries you create, your daily checks and the values and notes you record, your messages to Mila, the Weekly Reads Mila writes for you (each is kept with your account, the newest on your Overview and all of them in your data export, until you clear it or delete your account), and anything you submit such as a Studio waitlist request.
- If you sign in with Google: the name, email address, Google account ID and profile-picture link that Google shares with us when you choose that option.
- How you found us: if you arrive by a link with campaign tags (its utm source, medium, campaign and content), we note those tags; if you arrive from another website without them, we note that site's host name (for example www.tiktok.com). We also note your answer to the optional "How did you hear about Vemila?" question when you sign up. These are recorded on your account when you sign up, with no cookie, and kept while it exists.
- Studio waitlist on vemila.app: if you join the Vemila Studio waitlist on our website, we store the email address you enter and when you joined, so we can email you when Studio launches. You don't need an account for this, and it isn't linked to one.
- Evening reminder: if you turn it on, whether it is on, the hour you chose and your device's time zone, plus, for each device you turn it on, the push address and the two keys your browser gives us so we can deliver it. We also keep a send log, one line per day saying a reminder went out, for 3 days.
- Technical data: basic server logs (e.g. IP address and request time) kept for security and to keep the service running.
Cookies
We do not use third-party advertising or analytics trackers. Our website, vemila.app, sets no cookies. The app, app.vemila.app, sets only these cookies of its own:
sb-api-auth-token(split intosb-api-auth-token.0,.1and so on when it is long): keeps you signed in. It lasts up to 400 days, is renewed as you use the app, and is removed when you sign out.sb-api-auth-token-code-verifier: a one-time security code used while you sign in with Google, confirm your email address or reset your password. It is removed when that step finishes in this browser. If it never does (for example you open the email link on another device), it can stay for up to 400 days.tz: your time zone (for example Europe/London), so "today" in your planner is your today. It is set once you're signed in and lasts 1 year.vemila-reauth-intent(3 minutes) andvemila-reauth(5 minutes): if your account signs in with Google only, these confirm it's really you when you ask to delete your account.vemila-recovery(15 minutes): after you open a password-reset link, this proves it was you, so only this browser can set the new password. It is removed once the new password is saved.vemila-verify-sent(1 minute): after we send a confirmation email, this stops a second one going out too soon, which would make the first link stop working.vemila-verify-email(1 hour): while you're confirming your email address, this holds the address so the page can show it and send the link again, without putting it in the page's web address.vemila_note_draft(2 minutes): if a note on one of your daily checks can't be saved, it keeps what you typed so the page can give it back to you. It is removed as soon as the note saves.vemila_task_undo(1 minute),vemila_task_move,vemila_task_copyandvemila_steps_move(2 minutes each): when you delete, move or copy tasks, or move a goal's steps on, these remember what changed, so Undo can put it back. They expire after that time.
The app also keeps a few things in your browser that aren't cookies. While you're writing a message to Mila or a new goal, what you've typed is held in this tab's session storage, so a reload doesn't lose it. It never leaves your device, and it goes when you send it, sign out or close the tab. If you turn on the evening reminder, this browser keeps a small script of ours (a service worker, /sw.js) that shows the notification, and its own push subscription, whose address and keys we store (section 1 above). The subscription goes when you turn reminders off or sign out on this device (with JavaScript off, turning reminders off removes our copy of it, which stops delivery to every device; the browser's own stays until you clear this site's data); the script stays until you clear this site's data in your browser.
2. Why we use it (legal basis)
- To provide the service: storing your content and running your account (performance of our contract with you).
- To send essential emails: confirming your address and resetting your password (contract).
- To keep Vemila secure and working: logs, abuse prevention (our legitimate interests).
- To understand how people find Vemila: the link or website you arrived from and your "How did you hear about Vemila?" answer (our legitimate interests).
- To show you the right day: remembering your time zone so your planner's "today" matches yours (our legitimate interests).
- To send the evening reminder: if you turn it on, one push notification a day at most, at the hour you chose, on a day a task or a habit is still open (your consent, which you withdraw by turning it off in Settings).
- To tell you when Vemila Studio launches: the email address you give when you join the Studio waitlist on our website (your consent, which you can withdraw at any time by emailing admin@sauvia.org.uk; we then remove you from the list).
- For payments, once paid plans are live: taking and managing your subscription (contract).
3. Who processes your data
We keep the number of third parties small and choose them deliberately. Our processors are:
- Hetzner hosts our server, located in Germany (EU). Your account and content are stored there.
- Anthropic provides the Claude AI that powers Mila and generation features. When you use those features, the relevant content is sent to Anthropic to produce a response. It is not used to train their models.
- Resend sends our transactional emails (confirmation, password reset).
- Stripe will process payments when paid plans launch. Card details go directly to Stripe; we never see or store them.
- Backblaze stores our nightly database backups in its EU Central region (Amsterdam, the Netherlands). Each backup is encrypted on our server before it is uploaded.
- Forward Email receives email sent to hello@vemila.app and forwards it to our mailbox.
- Virgin Media hosts that mailbox, where we read and answer your emails.
- Namecheap hosts the admin@sauvia.org.uk mailbox (Private Email), where emails to our contact address arrive and where we answer them.
If you choose Sign in with Google, Google handles that sign-in as its own service, under Google's own privacy policy. It is the sign-in provider you choose, not one of our processors.
If you turn on the evening reminder, your browser's own push service delivers it: Apple (Safari and iPhone), Google (Chrome and Android), Mozilla (Firefox) or Microsoft (Edge on Windows), whichever browser you use. Through it we send one short line a day at most, saying how many tasks and habits are still open: counts only, never the text of a task or a habit. Turn it off in Settings and it stops on every device. Signing out on a device stops it on that device (with JavaScript off, turn reminders off first, which stops it everywhere). "Sign out of every other device" in Settings stops it on the others (with JavaScript off, on the device you use it from as well), and a password reset signs you out everywhere and stops it everywhere.
Some of these providers may process data outside the UK and EU.
4. How long we keep it
We keep your account and content for as long as your account is open. That includes each Weekly Read Mila writes for you, which stays with your account (the newest on your Overview, all of them in your data export) until you clear it from your Overview or delete your account. If you delete your account, your account data is deleted from our live database promptly. The one exception is our sign-in security log. It records account events such as sign-ins, sign-ups, password resets and account deletions, with your account ID, your email address and, if your account has one, your name. We keep each entry for 90 days, including after you delete your account, and then delete it.
Your evening reminder setting (on or off, the hour and your time zone) stays with your account. Each device's push address and keys go when you turn reminders off (that removes every device's), when you sign out on that device, when "Sign out of every other device" or a password reset signs that device out, or when its push service tells us the address no longer works. With JavaScript off, signing out on a device does not remove its address and keys; turning reminders off or "Sign out of every other device" does. The send log keeps one line per day, saying only that a reminder went out, for 3 days.
If you delete your account, we first cancel any subscription with Stripe. If you never made a payment, we then delete your Stripe customer record. If you have paid us, Stripe keeps the payment records (invoices and charges) for as long as tax law requires, normally six years; we remove your name, email address, phone number and addresses from your Stripe customer record and detach your saved card. Invoices already issued keep the details they were issued with.
Email addresses on the Studio waitlist on our website are kept until you ask us to remove them (email admin@sauvia.org.uk). They aren't linked to an account, so deleting your account doesn't remove them.
Our database is backed up every night. Each backup stays on our server for 14 days. Encrypted copies are also kept with Backblaze. We also keep a copy on our own computer in the UK. Old backups are cleared on a rolling basis, so anything deleted from our live database is gone from every backup within about 45 days.
Our web server keeps no access logs. If a request fails (for example while we restart the app), the error, including your IP address, is written to the server's system log, which holds roughly the last two weeks. The services that handle sign-in and database requests keep their own logs, which can include your email address, name and IP address. These are not removed when you delete your account. Each service's log is limited to 30 MB, and its oldest entries are deleted as new ones are added, so how far back a log reaches depends on how busy the service is. At our current level of use, the busiest of these logs reaches back roughly two to three weeks. The quieter ones, including the sign-in service's own log, fill much more slowly, so their entries can stay for several months; they are cleared whenever we update that service.
5. Your rights
Under UK GDPR you can ask us to: access a copy of your data; correct it; delete it; restrict or object to processing; or provide it in a portable form. You can do much of this yourself in settings (edit your profile, export, or delete your account), or email admin@sauvia.org.uk and we'll action it. You also have the right to complain to the UK's data protection regulator, the Information Commission (still known as the ICO), which took over from the Information Commissioner's Office on 30 September 2026.
6. Security
Passwords are hashed, traffic is encrypted with HTTPS, the database is not exposed to the public internet, and access to the server is restricted. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you if a breach affects you.
7. Children
Vemila is not intended for children under 16, and we don't knowingly collect their data.
8. Changes
If we change this policy materially we'll update the date above and, where appropriate, let you know in the app or by email.
Contact
Questions about these terms, your data, or anything else: admin@sauvia.org.uk. Vemila is made by Sauvia, an independent studio in the UK.