This notice explains what information Arca collects about your family — including your children — how it's used, who else ever sees it, how long we keep it, and what rights you have as a parent or guardian. It's written for parents, since children never sign up for this app themselves.
Who this app is for
Arca is an app for families to run daily/weekly routines, track chores and rewards, and keep a shared family calendar. Arca accounts are only for parents and legal guardians who are 18 or older. A parent or guardian sets up the family account and enters their children's information; children only ever use a shared profile their parent sets up for them — they never register, provide their own information, or manage their own account.
Information we collect
About your child(ren), entered by you:
- First name and birth month and year (never the day), which Arca uses to show your child's current age
- An avatar icon you pick (Arca does not collect photos of children)
- Chore/routine completion history (which checklist items were checked off, and when) and the resulting star/reward counts
- Any calendar events, schedule blocks, or notes you or the app associates with that child
About you (the parent/guardian):
- Your email address (used to sign in with a one-time code or link we email you, or with your Google account if you choose “Continue with Google”, in which case Google shares only your name, email address and profile picture with us — we never see or store a password)
- A parent PIN you choose (stored as a one-way hash, not in plain text) for the parent view and account settings. Kids don't have a passcode: they open their own checklist on a device a parent has signed in
- The typed name and checkboxes you provide when giving consent under this notice
- Your family's country and state or region (never a city, street address or ZIP code)
- Billing details, if you subscribe: your plan, trial and renewal dates, and payment history. You enter your card on Stripe's secure payment page; Arca never sees or stores your full card number. If your family uses a tester code, no payment details are collected.
Messages you send us (optional): if you use Help & feedback in the app, we keep your message, your email address, the Arca version and the type of device and browser, so we can answer you and track the request. These are deleted along with your family's account.
Documents you choose to upload (optional feature): if you use the "upload a document to read events from it" or "Scan a flyer" feature, the photo or PDF you upload is processed as described under "Sharing with third parties" below.
Connected calendars (optional): a parent can connect a calendar by pasting its link (for example a school, sports or family calendar from Google, Apple or Outlook). Arca keeps that link private (it is never shown again in the app) and, every few hours, copies the title, date, time and location of the calendar's events for the next six months into your family's Arca calendar. It does not copy event descriptions, attendees or attachments. To do this, Arca's server downloads the calendar from wherever it is hosted; no information about your family is sent there. Removing the calendar in Arca deletes the link and every event copied from it; your original calendar is never changed. If you choose Connect Google Calendar instead, you sign in with Google and allow Arca to view your calendars (Arca can never change them). Arca then shows you a list of your calendars and copies events only from the ones you pick, the same way as above. Google's access keys are stored encrypted on our servers and are used only to read those calendars. You can disconnect in Arca at any time (which also cancels Arca's access at Google), or remove Arca's access from your Google Account's security settings. Arca's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use it only to show your family's events in Arca, never for advertising, never to train AI models, and we don't sell it or let people read it except to fix a problem you ask us about or where the law requires.
Voice features (optional): Arca can read today's plan aloud ("Read today"), and a parent can ask Arca to do things by voice ("Ask Arca", available only in the parent view). When you tap Ask Arca, the app records only until you stop talking. That recording is turned into text, used to carry out your request, and then discarded: Arca does not keep voice recordings or the text of what was said. To check that voice works reliably, Arca keeps simple usage counts for each voice request (for example "recording sent", "confirmed" or "cancelled"), the type of device and browser, and numbers such as how long the recording was. These counts never include words or audio.
App usage (to improve Arca): Arca keeps simple counts of how the app is used — which screen is open and for how long, when the app is opened, the type of device and browser, whether it's the home-screen app, and where the app hit an error. These counts are linked to your family account but never include names, anything you type or say, chore, event or reward text, which child was using the app, your IP address or your location. They stay on our own servers (we don't use outside analytics or ad companies in the app), are deleted automatically after 180 days, and are deleted right away if you delete your family account. Our public web pages, such as this privacy page, About and Support, count visits with Vercel Web Analytics, which uses no cookies and doesn't identify you. It is never used inside the app.
How we use it
Solely to run the app for your family: showing your kids' checklists, tracking completion and rewards, keeping your family calendar, and letting a parent manage all of that from a "Manage" screen. We do not use your child's information for advertising, do not build advertising profiles, and do not sell or rent it to anyone.
Sharing with third parties
We do not sell, rent, or share your family's information for marketing purposes, ever. We share information only with:
- Supabase — database and sign-in.
- Vercel — web hosting; never sees your checklist/calendar data.
- Resend — delivers the sign-in code emails we send you; sees only your email address and the code.
- Stripe — processes subscription payments. Sees your name, email address, card and billing details; never your children's information. Stripe also uses payment information to prevent fraud, as described in its own privacy policy.
- RevenueCat — keeps track of whether your family's subscription is active. Sees a random family ID, your email address and your purchase history; never your children's information.
- Google Cloud (Speech-to-Text and Text-to-Speech) — turns Ask Arca recordings into text, and turns what Arca says out loud (for example today's plan, which can include your children's first names and activities) into speech. Google processes this only to provide that service; Arca has not opted in to Google's program that would let it keep recordings to improve its products.
- Anthropic — only if you turn on AI features: reads the file you upload, or the text of a voice request, to find events or understand what you asked. Doesn't train on it, and keeps it only briefly (Anthropic's data-retention documentation).
The AI features are optional, off by default, and need their own separate consent, which you can grant or revoke any time in ☰ → Settings → Privacy (AI help for documents & voice).
We do not otherwise disclose your child's information to any other third party for any reason, including for any purpose other than to provide the service you asked for.
How long we keep it, and how to delete it
We keep your family's information for as long as your family account is active. If you'd like your family's data deleted — in full, or if you'd just like to stop using a particular feature (like the AI features above) — email arca@arcaneas.com and we will act on your request. The family's creator can also delete the whole family account in the app (☰ → Settings → Delete family account). A full account deletion permanently and irreversibly removes your family's name, your children's names, birth months and years, avatars, all chore and reward history, your family calendar, and your passcodes from our database; nothing is kept afterward except an anonymous record used solely to track how many families have used the app over time: a random family ID, your family's country and state or region, the number of kids, and the dates the account was created and deleted. It contains no names, email addresses, ages or activity. Payment records (amounts, dates, your email address and the last four digits of your card — never your children's information) are kept by us, Stripe and RevenueCat for as long as tax and accounting law requires, even after an account is deleted.
Your rights as a parent or guardian
At any time, you can ask us (arca@arcaneas.com) to:
- Review the personal information we have on file for your child (you can also download a copy of your family's data yourself, any time: ☰ → Settings → Download your family's data)
- Correct or update that information
- Delete your child's information, or your whole family's account
- Stop any further collection or use of your child's information going forward
- Revoke consent you previously gave, including specifically for the optional AI features (document reading and voice requests), which you can also turn off yourself in-app, no email needed
We will not require you to provide more information than necessary to identify your family's account when honoring a request like this.
Security
Data is transmitted over encrypted connections and stored in Supabase with row-level security restricting each family's data to that family's own members. Your parent PIN is never stored in plain text. We don't have a large team or complex infrastructure — this is a small app run by Arcaneas LLC — but we apply the same basic safeguards regardless of size. Questions or concerns: arca@arcaneas.com.
Consent
Before any outside family can use Arca, each parent or guardian must read this notice and affirmatively agree to it (typing their name as an electronic signature) before any of their child's information is entered. A second, separate, unchecked-by-default consent is required specifically to turn on the optional AI features (document reading and voice requests) described above.
Changes to this notice
If we materially change what we collect, how we use it, or who we share it with, we'll update this notice, change its version number, and — where the change affects data already collected — ask for renewed consent before continuing.
Contact
Questions, requests, or concerns about your family's privacy: arca@arcaneas.com.
Arca's Children's Privacy Notice and COPPA
Adult Registration Required. Arca permits children under 13 to use and interact with the App only after a parent or legal guardian has registered the child and created or authorized the child's profile. Children under 13 are not permitted to create their own accounts, register themselves, or independently submit personal information through the App. All requested registration information and other personal information concerning a child must be provided by the child's parent or legal guardian. A parent or legal guardian who registers a child represents that the parent or guardian has the legal authority to register the child, provide information concerning the child, and authorize the child's use of the App. The parent or guardian is responsible for providing accurate information, maintaining the security of the applicable account, and supervising the child's use of the App.
No Collection of COPPA-Covered Personal Information Through Technical Means. The App does not collect from children under 13, through cookies, tracking technologies, analytics tools, or other automated technical means, any personal information as defined under the Children's Online Privacy Protection Act and its implementing regulations (COPPA). This includes persistent identifiers that can be used to recognize a child over time or across different websites or online services, precise geolocation information, photographs, audio or video files containing a child's image or voice, and other COPPA-covered personal information. The App does not track children across unrelated websites, applications, or online services and does not use information concerning children for targeted advertising, behavioral advertising, commercial profiling, or marketing. This provision does not restrict Arca's collection of information from a parent or legal guardian during registration or the parent's use of the App. Arca may use persistent identifiers solely to support the internal operations of the App, such as keeping a parent-authorized device signed in, keeping the App secure, and maintaining its functioning; these identifiers are not used or disclosed to contact a specific individual, to build a profile on a specific individual, for behavioral advertising, or for any other purpose.
Voice Assistant. Arca's voice assistant is available only in the password- or PIN-protected parent experience and is intended solely for use by adults. If a child's voice is nevertheless captured through this feature, the audio may be transmitted to our third-party speech-to-text provider solely to transcribe the request; Arca does not retain the audio recording.
Accidental Disclosure by a Child. Arca does not ask or permit children under 13 to provide personal information through the App. Nevertheless, a child could inadvertently disclose personal information while interacting with the App. Parents and legal guardians should instruct children not to enter or disclose their full name, contact information, home or school address, precise location, photographs, audio or video recordings, account credentials, or other information that could identify or contact the child. If Arca becomes aware that it has collected or received personal information directly from a child under 13, including information inadvertently disclosed by the child, Arca will take reasonable steps to delete that information promptly from its active systems and direct its applicable service providers to do the same, unless retention is required by law or is reasonably necessary to protect the security or integrity of the App. This deletion commitment does not apply to information concerning the child that was knowingly and lawfully provided by the child's parent or legal guardian as part of the registration process or the parent's use of the App. Arca retains personal information concerning a child only for as long as reasonably necessary to fulfill the purpose for which it was collected (for example, while the family account is active), after which it is deleted or de-identified unless longer retention is required by law.
Parent and Guardian Requests. A parent or legal guardian may contact Arca at arca@arcaneas.com to request access to, correction of, or deletion of personal information concerning the parent's or guardian's child, or to request termination of the child's profile. A parent can also delete a child's profile directly in the App (☰ → Manage → Family members). Arca will take reasonable steps to verify the requester's identity and authority before fulfilling the request.