Privacy Policy

• Account details from Google sign-in: your name, email address, profile picture and an account ID.
• What you enter: your arcs, goals and targets, daily check-ins (numbers, yes/no, times, notes and journal text), day status (rest, sick, travel), energy, templates you save (goal settings only, visible only to you), and your settings (timezone, preferences, reminder times).
• Workout and food logs (if you use them): exercises, sets, reps, weights, times and distances, saved routines, and meals with their items and estimated calories, protein, carbs and fat.
• AI coach: your chat messages, the coach's notes, reviews and replies, and how many coach requests you made each day.
• Safety records: chat messages our safety filter blocks as misuse (off-topic requests, attempts to manipulate the coach, or abuse) and coach replies you choose to report. We keep these for 90 days to review them and prevent abuse. We do not keep records of messages flagged for crisis or health reasons.
• Public profile (only if you turn it on): your handle and bio.
• Feedback you send (only if you send it): your message, an optional screenshot, the page you were on and your browser type, linked to your account so we can reply and fix bugs. Only the person who runs MyArc reads it.
• Support payments (only if you make one): Razorpay handles the payment on its own page and shares with us the amount and the name, email address and phone number you enter there, which we keep for our payment records. We never see your card, bank or UPI details.
• Notifications: for each device where you enable reminders, the push address and keys your browser gives us.
• On your device, for offline use: a copy of your last Today page, and any check-in you save without signal until it can be sent. These stay in your browser, not on our servers, and are cleared when you sign out.
• Technical: sign-in session cookies, cookies that remember your accent colour and light or dark theme, and standard request logs kept by our hosting provider. When something breaks (a page crashes, a reminder fails to send, an offline check-in can't be saved), we record the error message, the page and which account it happened to, so it can be fixed. Only the person who runs MyArc sees these.

To run MyArc: show your check-ins, scores and charts, send the reminders you set up, generate coach replies, keep the service safe, and prevent abuse. To decide what to improve, we also count how the app is used in totals (for example, how many people checked in this week or used the food log), never looking at any one person's data. We don't use your data for advertising, we don't sell it, and we don't build marketing profiles.

The coach is powered by Anthropic's Claude models. When you ask for a note, a review, a chat reply or an end-of-arc reflection (which gets your arc's summary numbers and your why), and once a day for the short motivation line on Today, we send Anthropic your goals and targets, your stats, your weekly focus if you set one, a summary of your previous arc if you've finished one, and your last 14 days of check-ins (including notes and journal text), along with your message. Each chat message is also checked by a separate Claude model for safety before the coach answers. Under Anthropic's commercial terms, data sent through its API isn't used to train its models by default; Anthropic may keep requests for a limited time under its own data policies. An automatic weekly review is written at the end of each week you've been active; you can turn it off in Settings → Notifications. Apart from that, the daily motivation line and goal suggestions (below), nothing is sent to Anthropic unless you use an AI feature.

When you name a goal while adding or editing it, the name and the kind of goal you picked are sent to Anthropic, after a short pause in typing, to suggest a setup (a spelling fix, a unit, a target, or a log that can fill it). Nothing else about you is sent with it. The suggestion is kept for 90 days without any link to your account, so the same name typed again doesn't need another request.

When you ask for a food estimate, the description and/or photo you provide is sent to Anthropic to estimate nutrition. Photos are resized on your device and sent once for analysis; MyArc never stores them. When you type a workout for AI to fill in, that text is sent to Anthropic too. The coach also sees a short summary of your last 14 days of workouts and 7 days of food, if you keep those logs (without calorie numbers if you've chosen to hide calories).

The coach can be wrong. It is not a doctor, dietitian or therapist, and nothing it says is medical advice.

• Supabase stores the database and handles sign-in. Our database is hosted in Mumbai, India.
• Vercel hosts the app. Our server functions run in Mumbai; static files are served from a global network.
• Anthropic processes coach requests, as described above.
• Google provides sign-in.
• Razorpay processes support payments, if you make one.
• Your browser's push service (for example Apple, Google or Mozilla) delivers your reminder notifications.

We share data with these providers only so they can run their part of MyArc, and we don't share it with anyone else unless the law requires it.

Everything is private until you choose to share it.

• If you turn on your public profile, anyone with the link can see: your display name and picture, handle and bio; your current arc's name, dates and progress; your daily score calendar; the goals you pick (measurements such as body weight appear only as a percentage of the way to your target, never as values); and the names and dates of your past arcs. Your arc's “why”, notes, journals and coach history are never shown. Profiles ask search engines not to index them. You can turn the profile off at any time.
• Accountability partners (people who accepted your invite link, or whose link you accepted) can see your name and picture, whether you checked in today, your daily and average score, streak and arc progress, and the goals you choose to share with them (measurements as a percentage only). They can send you nudges and cheers, which arrive as notifications. Either of you can end the partnership at any time.
• Group challenges: other members of a challenge you join see your name, picture, your consistency and streak on that challenge's goals, and whether you logged them today. Nothing else from your arc is shown.
• Share cards are images created when you ask for one. We don't publish them; you decide where they go.

We keep your data while you have an account, including feedback you send and any reply to it (you can ask us to delete a message at any time); screenshots attached to feedback are deleted 30 days after the report is resolved. Safety records are deleted after 90 days, nudges, cheers and unused invite links after 30 days, reminder logs after 7 days, and error records 30 days after the error last happened. When you delete your account, everything is permanently deleted from our database straight away (error records stay until they expire, with your account removed from them). Copies may remain in our providers' backups for a limited time until those backups expire.

• Access and export: Settings → Your data → Export downloads everything as a JSON file.
• Correct: you can edit your goals, check-ins, templates and profile at any time.
• Delete: Settings → Your data → Delete account permanently removes your account and all its data.
• Withdraw consent: turn off notifications, your public profile, or stop using the coach at any time.

Depending on where you live, laws such as India's Digital Personal Data Protection Act, 2023 or the GDPR may give you further rights. For any request or complaint, contact us at 10.abhinav.anand.01@gmail.com.

MyArc is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you believe a minor has an account, contact us and we'll delete it.

All traffic is encrypted (HTTPS). Your own data is isolated in the database with row-level security, so your requests can only reach your own records. The features that show something to other people (public profiles, partners and challenges) only ever return the fields described above. No system is perfectly secure, but we work to keep yours safe and will tell you if a breach affects your data.

If we change this policy we'll update the date above, and tell you in the app if the change is significant.

Questions about privacy: 10.abhinav.anand.01@gmail.com.