Privacy Policy

Last updated: 16 April 2026

Verta is designed with privacy as a first-class concern. This policy explains what we do - and, more importantly, what we don't - with your data. Readler Ltd (as defined in our Terms) is the data controller for personal data collected via Verta.

Short version

• Your camera footage never leaves your Mac. Face detection runs locally via Apple's Vision framework. No frames are saved or transmitted.
• We don't use analytics. We don't track you on our website beyond what's strictly necessary.
• We store your email address and a licence record only to deliver and verify your purchase. Paddle.com handles payment data.
• The app makes one outbound call: Sparkle checks our appcast URL once a day to see if an update is available.

1. What Verta processes locally

When monitoring is active, Verta captures frames from your webcam and passes them to Apple's on-device Vision framework (VNDetectFaceLandmarksRequest) to detect face pose. Each frame is analysed and immediately discarded - frames are never written to disk, cached, or transmitted.

Verta also reads which application is frontmost (via NSWorkspace.frontmostApplication) so it can show you a per-app posture breakdown. This data stays local - we never send it off your device.

Posture stats, your calibration baseline, and daily history are stored in Verta's folder inside ~/Library/Application Support/ on your Mac. Your licence key is stored in the macOS Keychain. Nothing is synced, uploaded, or backed up by us. To remove every trace of Verta: quit the app, delete it from /Applications, and delete Verta's folder from Application Support. You can reach it in Finder via Go → Go to Folder… → ~/Library/Application Support.

2. What leaves your Mac

Verta makes two categories of network request:

1. Update checks. The app checks https://getverta.com/appcast.xml once every 24 hours to see if a newer version is available. This is a plain GET request; no personal data is sent.
2. Licence verification. When you activate your licence key - and periodically thereafter - Verta validates it with our licence service at getverta.com. This request includes your licence key and a one-way hash of your Mac's hardware identifier (used for seat-count enforcement), but not your name, email, or any usage data.

3. Data we collect via the website

getverta.com is hosted on Cloudflare Pages. Cloudflare automatically logs standard request metadata (IP address, user agent, referrer) for security and traffic analysis. We do not use marketing analytics, advertising pixels, or third-party trackers.

If you contact us via the support form, we receive the email address and message you submit. This data is used solely to respond to your enquiry.

4. Data we collect via Paddle

Payments are processed by Paddle.com Market Limited, who acts as our Merchant of Record and as an independent data controller for your payment data. When you make a purchase, Paddle collects:

• Your name, email, and billing address
• Payment card or other payment method details (processed by Paddle; we never see card numbers)
• The IP address and country of the purchase (for tax compliance)

Paddle shares the minimum information with us to fulfil your purchase: your email, country, and licence key. See Paddle's privacy policy for full details of what they collect.

5. Data retention

• On your Mac: all Verta data remains until you delete the app. Removing Verta and the Application Support folder erases it completely.
• With us: we keep your purchase email and licence record for the lifetime of the licence plus 7 years as required by UK tax law.
• Support emails: retained for up to 2 years after the last reply, then deleted.

6. Your rights (UK GDPR)

If you're in the UK, EU, or EEA, you have the right to access, correct, delete, or export your personal data, and to object to or restrict processing. To exercise any of these, contact us and we'll respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

7. Children

Verta is not directed at children under 13. If you believe a child has used Verta, please contact us and we'll delete any associated data.

8. Changes to this policy

We may update this policy occasionally. Material changes will be announced via the website or in-app notice at least 14 days in advance.

9. Contact

Privacy questions? Contact us and we'll respond within one business day. For formal data-protection correspondence, Readler Ltd is registered in England and Wales (Company Number 15915612); our registered office address is available on the Companies House register.