This Privacy Policy explains how Martin Condet ("we", "us", or "our") collects, uses, and protects your information when you use the Arc mobile application ("App").
We are committed to protecting your privacy and ensuring you understand how your data is handled. Arc is designed with privacy in mind—we collect only what's necessary to provide the service.
1. Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the data controller is:
Martin Condet
France
privacy@try-arc.app
2. Information We Collect
2.1 Account Information
| Data | Purpose | Legal Basis |
|---|---|---|
| Anonymous ID | Identify your account without personal info | Contract performance |
| Apple ID (optional) | Enable Sign in with Apple | Consent |
| Age | Verify eligibility (13+) | Legal obligation |
2.2 Arc Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Arc names & details | Display and track your arcs | Contract performance |
| Rules & dailies | Track your commitments | Contract performance |
| Reflections & check-ins | Store your progress notes | Contract performance |
| Conquest goals | Define arc completion criteria | Contract performance |
2.3 Photos
| Data | Purpose | Legal Basis |
|---|---|---|
| Before photo | Document starting point (private, "burns" on completion) | Consent |
| Daily photos | Visual progress documentation | Consent |
2.4 Data We Do NOT Collect
- Accountability contacts: Names are stored locally on your device only—never uploaded
- Location data: We do not track your location
- Device contacts: We never access your phone's contact list
- Health data: We do not integrate with HealthKit or similar
3. How We Use Your Data
We use your information to:
- Provide and maintain the Arc service
- Enable features like public arcs and encouragements
- Process Arc credit purchases via Apple
- Implement the patron sponsorship system
- Improve the App based on anonymized analytics
- Respond to your support requests
- Comply with legal obligations
4. Third-Party Services
We use trusted third-party services to operate Arc:
4.1 Firebase (Google)
Authentication and database services. Firebase processes your account data and arc information.
4.2 Amazon Web Services (AWS)
Photo storage via S3. Your photos are stored securely in AWS infrastructure (US region).
4.3 RevenueCat
Subscription and in-app purchase management. RevenueCat processes purchase information provided by Apple.
4.4 TelemetryDeck
Privacy-focused, anonymized analytics. TelemetryDeck does not use cookies, does not collect personal data, and cannot identify individual users.
4.5 Apple
Sign in with Apple and payment processing via the App Store.
5. Data Sharing
We do not sell your personal data. We share data only:
- With your consent: When you make an Arc public or participate in sponsorship
- With service providers: Third parties listed above, under contract to protect your data
- For legal reasons: When required by law, court order, or to protect rights and safety
Sponsorship Disclosure
When you sponsor another user through an Arc credit purchase, your first name or username may be revealed to the sponsored user. Similarly, if you receive a sponsored credit, you may see your sponsor's name.
6. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure appropriate safeguards through:
- EU-U.S. Data Privacy Framework compliance by our processors
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions where applicable
7. Data Retention
When you delete your account, all your data is permanently deleted immediately. This includes your account information, arcs, reflections, and photos. There is no recovery period—deletion is final.
We may retain anonymized, aggregated data for analytics purposes, but this cannot be used to identify you.
8. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Delete your personal data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Revoke consent for consent-based processing
To exercise these rights, contact us at privacy@try-arc.app. We will respond within 30 days.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. For France, this is:
CNIL (Commission Nationale de l'Informatique et des Libertés)
www.cnil.fr
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Secure authentication via Firebase and Apple
- Access controls limiting who can access data
- Regular security reviews of our infrastructure
While we strive to protect your data, no system is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
Arc is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately at privacy@try-arc.app and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email before they take effect. The "Effective Date" at the top indicates the latest revision.
12. Contact Us
For questions, concerns, or to exercise your rights:
Email: privacy@try-arc.app
Response time: Within 30 days