privacy policy

last updated: may 9, 2026

arc (“we,” “our,” or “us”) is a fitness tracking app. this policy describes what data we collect, how we use it, and your rights.

data we collect

device type and operating system version (collected automatically by our infrastructure)

authentication: your email is used solely to send sign-in codes. we do not send marketing emails.
app functionality: workout data powers core features: logging, history, progress tracking, and personal records.
ai features: when you use ai-powered features (workout import, ai fill, program generation, the arc coach), the relevant inputs are sent to our ai providers (google gemini and anthropic claude) for processing. inputs may include pasted workout text, exercise names, training preferences, and coach messages. no personal identity data (email, address, phone) is included in ai requests, though your display name may appear in coach conversations.
service improvement: we may store ai inputs and the corresponding ai responses to monitor quality, debug issues, and improve our prompts and features over time. this collection is enabled by default and can be disabled at any time in iOS settings → data & privacy.

your data is stored securely on supabase (hosted on aws). all data is encrypted in transit (tls) and at rest.

we do not sell your data. we share data only with:

supabase, database and authentication provider
google (gemini api), ai workout suggestions (workout names and history only, no personal identity data)

access: view all your data within the app.
deletion: delete your account and all associated data from settings. deletion is immediate and permanent.
data portability: contact us to request an export of your data.

arc is not intended for users under 13. we do not knowingly collect data from children.

we may update this policy. material changes will be communicated through the app.

for privacy questions: jesse.l.lusa@gmail.com