Privacy policy

The short version

You sign in with Apple or Google when you set up your arc. We store what’s needed to back up your arc and run the weekly board and challenges. We never sell your data and never show your goals, targets or journal to anyone else.

What stays on your phone

Time Capsule photos, your reflections, moods and intentions, and everything you do while signed out. Your onboarding answers are kept on your phone too, including the name, age and gender you give on About you. Your goals, with where you are now and where you want to be, are backed up with your arc once you sign in, and your name becomes your display name; your age and gender are never backed up (see below).

What we store with your account

The email from your Apple or Google account (or Apple’s private relay address), display name, username, bio, link, cosmetics and pinned badges; your arc, including the goals you picked and, for each, where you are now, where you want to be and where you ended up; your missions and which ones you completed; Lock In sessions; achievements; Time Capsule text; friends, blocks, weekly board places and challenge memberships; when you accepted these terms, and your choice about emails and when you made it. Other people never see your goals.

This is stored with Supabase (EU region) behind row-level security, so only you can read your own records. Other people only ever see your name, username, bust, ring, title, pinned badges and weekly score.

Emails

If you’re 16 or over, you can tick “Email me tips and offers” when you sign up. It’s never ticked for you, and you don’t need it to use Your Arc. If you tick it, we may send occasional tips and offers about Your Arc to the email from your Apple or Google account. Every email has an unsubscribe link, and you can turn it off any time in Profile → Settings → Emails about Your Arc.

Purchases

Subscriptions, lifetime Pro and one-off purchases (packs and streak freezes) are handled by Apple and RevenueCat. We receive what you bought, whether you have Pro and when it renews, cancels or is refunded; never your card details.

Invites: if you join through a friend’s invite, we store who invited you and whether you’ve finished 3 days, so both of you can get your week of Pro. Your inviter sees only that an invite counted, not what you did.

Ads

Free users can choose to watch a rewarded ad (Google AdMob) to repair a streak, to use AI add or Build a routine, to open Insights for a day, for a free coach review, or for 3 more messages with Socrates (twice a day). Ads are requested as non-personalised, and where the law requires it you’re asked for consent first. No ads appear unless you tap to watch one.

Even for non-personalised ads, Google receives technical data from your device when an ad loads (such as its IP address and device type) to deliver the ad, measure it and prevent fraud, under Google’s own privacy policy. For the 3 more Socrates messages, Google passes your account’s random ID back to our server with the reward, so the server can add the messages; it is never your name or email.

AI features

You agree to the AI features below with the first box when you save your arc or sign in (if you signed up before that box existed, the app asks the first time you use one).

AI add: when you tap it, the mission you typed and the days you picked go to our server and, through our AI relay OpenLux, to Google’s Gemini to choose a category and XP. Nothing else about you is sent, and the text isn’t stored. To limit misuse, the server counts requests per account (or per network address when signed out) and deletes those counts after two days. You can turn AI add off in Profile → Settings.

Build a routine: when you tap it, the goal you typed and the names of your current missions are sent the same way to draft a routine. Nothing else is sent, and the text isn’t stored.

Socrates, the coach on the Coach tab: when you send him a message, what you type goes to our server and, the same way (OpenLux, then Gemini), to write his reply, with a short summary of your arc: your goals, with where you are now and where you want to be by the end of your arc, your missions (titles, kinds, schedules and targets), which of the last 14 days you did each one, your arc day and length, your level and tier, your Flame, and your age and gender if you gave them. Your name, notes and journal are never sent. The conversation is saved only on your phone; our server doesn’t store what you write, only a count of messages per account (or per network address when signed out) for the daily allowance, deleted after two days. You can clear the chat, or stop sending, from the Coach tab’s menu.

Changes Socrates suggests (a mission, a new target, a Lock In, your check-in time) only happen when you tap to confirm them. Messages the app recognises as being about self-harm or a crisis get a fixed reply on your phone that points to real help, and aren’t sent anywhere. Reporting a reply sends only the reason you picked, never the conversation.

Weekly review (Pro, or one ad-funded review a week): only when you ask for it, your mission names, schedules, targets and how often you completed each one in the last 14 days are read from your backup and sent the same way to generate suggestions. Goals, notes and journal text are never sent.

OpenLux is the relay that passes the text to Gemini, so it sees the text too; OpenLux and Google handle it under their own terms. Our server doesn’t store the text it sends.

Product analytics

To improve the app we record usage events under a random ID made on your phone. It isn’t your name, email or Apple ID, but it is a lasting identifier for this install, so these events are pseudonymous rather than anonymous. They cover which screens you open, when a session starts and ends, which reminders you open, missions completed, paywall visits and how they end, purchases, when an ad is offered and whether it was watched, and which version of a feature you saw when we test two versions (A/B tests).

The same random ID is stored with our payment provider, RevenueCat, next to your purchases, so renewals, cancellations and refunds that happen outside the app can be matched to these events. RevenueCat knows which account made a purchase, so in principle the two can be linked; we don’t use it to look up individuals.

Each event also notes a few numbers about your progress at that moment: level, streak, arc day, number of missions, whether you have Pro or are signed in, app version, your time zone, and the country from your phone’s region setting. Never your goals, names, mission text, journal text or location.

We use this only to understand what helps people stick with their arc and what makes Pro worth paying for. It isn’t sold, shared with advertisers, or used to target ads, and it’s kept for up to 24 months.

You can turn it off any time in Profile → Settings → Share usage data. Nothing more is recorded or sent while it’s off, and anything not yet sent is deleted from your phone.

Your controls and rights

Profile → Account & backup → Download my data gives you a copy of everything stored in your account as a file. Delete account permanently deletes your account and everything stored with it, and clears Your Arc on your phone. It doesn’t cancel a subscription: do that in your Apple ID settings. Notifications, emails, ads consent, usage data and your public profile can all be changed in the app.

Usage events aren’t tied to your account, so deleting the account doesn’t remove them. To have them deleted, copy your analytics ID from Profile → Settings and send it to us using the contact at the end of this page.

You can ask for a copy of your data, a correction, or deletion at any time using the contact at the end of this page. We use your data to provide the service you asked for (contract) and, for usage analytics and ads consent, our legitimate interest or your consent where required, and for emails, your consent. Data is kept until you delete your account; usage events for up to 24 months.

Who we are

Your Arc is operated by Kacper Plociennik, 2 Penman Place, Galashiels, TD1 1TS, United Kingdom, the data controller for the information above.

Contact

Email support@yourarc.co.uk.