Privacy Policy
Last updated: May 28, 2025
EmoryJoule ("we," "our," or "us") operates the Arc mobile application (the "App"). This Privacy Policy describes how we collect, use, and protect your information when you use Arc.
By using Arc, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide
- Account information: Email address and password (or Apple ID via Sign in with Apple) used to create and authenticate your account.
- Profile information: Display name, profile photo, and avatar preferences you choose to set.
- Health and fitness data: Workout sessions, exercise sets, nutrition logs, water intake, weight, sleep, mood, alcohol, creatine, and mindfulness entries you manually record in the App.
- Crew and social data: Groups you create or join, messages you send within the App, and your chosen visibility settings for what crew members can see.
1.2 Information Collected Automatically
- Apple HealthKit data (with your permission): Steps, active calories, heart rate, HRV, resting heart rate, sleep stages, and workout history. This data is read directly on your device and is never transmitted to our servers unless you explicitly enable crew visibility for specific metrics.
- Device information: Device type, operating system version, and crash reports used to diagnose technical issues.
- Push notification tokens: Used solely to deliver crew message notifications to your device.
1.3 What We Do Not Collect
- We do not sell your data to third parties.
- We do not use your health data for advertising purposes.
- We do not share HealthKit data with third parties.
- We do not collect precise location data.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the App and its features
- Authenticate your account and keep it secure
- Enable crew features — sharing your chosen stats with the people you invite
- Deliver push notifications for crew messages and reminders you configure
- Generate AI-powered features (Daily Brief, food analysis) using data stored locally on your device
- Respond to your support requests
- Detect and prevent fraud or abuse
3. Data Storage and Security
3.1 Local-First Architecture
Arc is built on a local-first model. Your health and fitness data is stored on your device using encrypted local storage. Cloud sync (via Supabase) is used for account authentication, crew membership, and optional backup — not as the primary data store.
3.2 Cloud Infrastructure
We use Supabase (hosted on AWS) for authentication and real-time crew features. Data stored in Supabase is encrypted at rest and in transit. Supabase's infrastructure complies with SOC 2 Type II standards.
3.3 AI Processing
Food photo analysis and Daily Brief generation use the Anthropic Claude API. Photos and health summaries sent for AI analysis are processed transiently and are not stored by Anthropic beyond what is required to return a response.
3.4 Security Measures
We implement industry-standard security measures including TLS encryption for all data in transit, row-level security policies on our database, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
4. Sharing Your Information
4.1 With Your Crew
You control exactly what your crew members see through your Visibility setting:
- Open: Crew members can see your workout details, nutrition, hydration, and crew score breakdown.
- Compete: Crew members see your workout summary and crew score only — no nutrition data.
- Ghost: You remain invisible to your crew. Your score is not calculated or shared.
You can change your visibility setting at any time from within the App.
4.2 Service Providers
We share data with trusted service providers who assist in operating the App:
- Supabase — authentication and real-time database
- Anthropic — AI processing for food analysis and Daily Brief
- Apple — push notifications (APNs), HealthKit integration, and App Store distribution
- Expo (EAS) — app builds and over-the-air updates
These providers are bound by data processing agreements and are not permitted to use your data for their own purposes.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
5. Data Retention and Deletion
Your data is retained as long as your account is active. If you delete the App without deleting your account, your data remains in our systems so you can restore it if you reinstall.
To permanently delete your account and all associated data:
- Email support@runarc.app with the subject "Delete Account" from your registered email address.
- We will delete your account and all associated data within 5 business days.
- Data stored locally on your device must be removed by uninstalling the App.
6. Apple HealthKit
Arc integrates with Apple HealthKit to read fitness and health data. In accordance with Apple's guidelines:
- HealthKit data is used solely to provide features within Arc and is never used for advertising or sold to third parties.
- HealthKit data is not shared with any third parties without your explicit consent.
- You can revoke HealthKit permissions at any time in iOS Settings → Privacy & Security → Health → Arc.
7. Children's Privacy
Arc is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@runarc.app and we will promptly delete it.
8. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing of your data
- Data portability (receive your data in a structured format)
To exercise any of these rights, contact us at support@runarc.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes constitutes your acceptance of the updated policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us:
EmoryJoule
Email: support@runarc.app
Website: runarc.app