Privacy Notice – Arclify (App)

This page explains how Arclify handles personal data when you install and use the app, create an account, start a trial, or purchase a subscription.

1. Who is responsible for your data?

2. What data Arclify collects

Depending on how you use the app, Arclify may process:

• Account & identifiers
  • Email address (for account login and support)
  • User ID (internal identifier)
  • Optional profile fields you provide (e.g., display name)
• App usage & habit data
  • Routines/habits you configure (e.g., training, focus, reading, evenings)
  • Your check-ins, completion history, streaks, XP, weekly review inputs
  • App settings (e.g., notification preferences if you enable them)
• Purchase and subscription data
  • Subscription plan selection (season vs monthly)
  • Trial start/end status
  • Purchase status (active/canceled/renewed)
  • Note: Payments are processed by the app stores. Arclify does not receive your full card details.
• Device and technical data
  • App version, device type/OS version
  • Diagnostics data (e.g., crash reports) where available
  • Approximate region/timezone information (to schedule seasons and notifications correctly)
• Support communications
  • If you contact support, I receive the content of your message and your contact details.
• Website analytics (marketing site)
  • On the Arclify website I measure aggregate activity only: counts of page views, link/redirect clicks (e.g., "Open App Store"), and email signups, plus a coarse traffic-source label (e.g., which campaign link was used).
  • This is not tied to you personally: the analytics stores no cookies or identifiers on your device and uses no persistent or per-visitor ID. As with any web request, my server (and my hosting/CDN provider) briefly receives technical connection data such as your IP address; I do not store it alongside the analytics counts and I do not use it to single you out or follow you across sites.
  • If you submit the website email form, it is protected by a bot/spam check (Cloudflare Turnstile).

I do not intentionally collect special categories of data (such as health information, religion, political opinions, etc.). Please do not store sensitive personal details in free-text fields.

3. Why Arclify uses your data and on what legal basis

• Providing the app and core functionality
  • Creating and maintaining your account
  • Saving your season data and progress
  • Delivering features you use (tasks, XP, streaks, weekly review)
  • Legal basis: performance of a contract (GDPR Art. 6(1)(b))
• Subscriptions, trials, and access control
  • Enabling your 7-day trial
  • Checking purchase status to unlock paid features
  • Handling renewals/cancellations and entitlement status
  • Legal basis: performance of a contract (GDPR Art. 6(1)(b)) and legal obligation where required (GDPR Art. 6(1)(c))
• App security and abuse prevention
  • Protecting accounts and preventing misuse
  • Maintaining service reliability
  • Legal basis: legitimate interests (GDPR Art. 6(1)(f))
• Analytics and product improvement
  • Understanding which features work and where users drop off
  • Fixing bugs and improving stability
  • Measuring aggregate website and campaign performance (see "Website analytics" above)
  • Legal basis: legitimate interests (GDPR Art. 6(1)(f))
  • Because the website analytics does not store or read information on your device, my position is that it does not require cookie consent under the ePrivacy rules.
• Spam and bot prevention (website)
  • Protecting the website email signup form from automated abuse using Cloudflare Turnstile
  • Legal basis: legitimate interests (GDPR Art. 6(1)(f))
• Email communications
  • Transactional emails (account, security, purchase-related)
  • Legal basis: contract (GDPR Art. 6(1)(b))
  • Optional marketing/nurture emails (if you explicitly sign up on the website)
  • Legal basis: consent (GDPR Art. 6(1)(a))
  • You can unsubscribe from marketing emails anytime.

4. Who can access your data (recipients)

I don't sell or rent your data.

Your data may be handled by trusted third parties needed to operate Arclify.

Processors (they process data on my instructions and are bound by data-processing agreements):

• Supabase (backend and database - storing your account and season data; also receives the aggregate website analytics events)
• Resend (email delivery - for transactional and marketing emails)
• RevenueCat (subscription and entitlement management)
• Cloudflare (website hosting/delivery, and bot/spam protection on the website email form via Turnstile)

Independent controller: Apple acts as an independent controller - the seller/merchant of record - for App Store payment, billing, and subscription processing, under Apple's own privacy policy, not on my instructions.

Some providers may be located outside the EU/EEA/UK (for example, in the United States). When that happens, I rely on appropriate safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework where the provider is certified.

5. How long Arclify keeps your data

• Account and season data: kept while your account is active.
• Subscription records: retained as needed for accounting/legal obligations.
• Support communications: kept as long as needed to resolve issues and maintain a support history.
• Marketing email list (website): until you unsubscribe or request deletion.
• Website analytics: kept only as aggregate, non-identifying counts; not linked to any individual.

5a. Deleting your account

You can permanently delete your account at any time from inside the app (in the app settings, and also from the paywall screen - so you can delete your account even if your subscription has expired). This permanently deletes your account and the personal data associated with it - it is a full deletion, not a deactivation.

You can also ask me to delete your data by email. If you delete your account or request deletion, I will delete or anonymize your personal data unless I must keep certain data to comply with legal obligations (e.g., accounting records).

6. Is providing your data mandatory?

• To use Arclify, you must provide an email address to create an account.
• Habit/routine data is required for the core experience (otherwise the app can't function as designed).
• Marketing email signup is optional.

7. Your privacy rights

If you are in the EU/EEA or the UK, you have the following rights regarding your personal data:

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent (for marketing emails or other consent-based processing)
• Right to object (in certain cases, including direct marketing)

To exercise these rights, email: [email protected].

Wherever you live, and regardless of which laws apply to you, I will honour requests to access, correct, or delete your personal data, and you can unsubscribe from marketing at any time.

You also have the right to complain to your data protection authority - for example: Hungary (NAIH), the UK (Information Commissioner's Office, ICO), Australia (OAIC), or Canada (OPC); if you are in the EU/EEA you may use your local supervisory authority. If you are a California resident, you have rights under the CCPA/CPRA - note that I do not sell or "share" personal information for cross-context behavioural advertising.

8. How Arclify protects your data

• Reputable providers with appropriate security practices
• Access controls (limited to me as the solo developer)
• Strong authentication and protected accounts/devices

No online service is 100% secure, but I aim to minimise unnecessary risk.

8a. Cookies and tracking technologies

The Arclify website does not use advertising or tracking cookies, and does not build a profile of you or follow you across sites. The analytics records only aggregate event counts and stores nothing on your device for analytics, so no cookie-consent banner is required.

As with any internet request, my servers and my hosting/CDN provider (Cloudflare) briefly receive technical connection data such as your IP address; I do not store it alongside the analytics counts or use it to identify you.

The only third-party technology the website loads is Cloudflare Turnstile, a privacy-friendly bot/spam check that runs only on the email signup form. To protect the site and that form from abuse, Cloudflare may set a strictly-necessary security cookie (for example, its bot-management cookie); strictly-necessary security cookies do not require consent.

Fonts are served from the Arclify website itself, so no third-party font provider receives your data. Inside the app, only the technical storage needed to keep you signed in and run the app is used.

9. Children

Arclify is not intended for children under 16. If you believe a child has provided personal data, contact me and I'll address it.

10. Updates to this notice

I may update this notice as the app evolves. I will update the "Last updated" date below, and for major changes I may notify users.

Last updated: 6 June 2026