Privacy

1. Privacy at Arca

Arca uses the information you provide to run your account and financial workspace. Financial records are linked to your user ID, and database Row Level Security rules restrict signed-in users to their own records. Arca does not currently use analytics, advertising, or third-party tracking.

2. Information we collect

Arca handles the information needed to provide its account and financial features:

• Your email address and, if you add it, your full name.
• Your Supabase-generated user ID.
• Your settings and preferences.
• Transactions and activity, budgets, goals, goal contributions, and recurring rules that you create or that Arca generates from those rules.
• System timestamps used for ordering records and settings changes.

Reports and insights are calculated from your existing financial records when needed. Arca does not store them as a separate set of analytics data.

Passwords are handled by Supabase Auth. Arca's application code does not read or store your password.

3. How we use your information

• To create and secure your account and keep you signed in.
• To send account emails, including confirmation and password recovery.
• To show and manage your transactions, budgets, goals, and recurring activity.
• To apply your display, language, date, number, currency, and timezone preferences.
• To calculate the reports and insights shown inside Arca.

4. Where your information is processed

Arca's Supabase project uses Frankfurt, Germany as its primary region (AWS eu-central-1) for authentication and database services. Arca is hosted on Vercel, and account emails are delivered through Resend. These providers process information as needed to supply those services. Arca does not claim that information stays only in one country.

5. Service providers

Arca relies on the following providers to operate V1:

• Supabase — authentication, sessions, and database services.
• Resend — delivery of account emails.
• Vercel — application hosting.

6. Cookies and browser storage

Arca V1 uses only the browser storage needed for account sessions and a small interface preference:

• Supabase authentication and session cookies that keep you signed in.
• A short-lived, first-party password-recovery cookie used to protect the reset-password flow. It expires after 15 minutes and is cleared when the flow is completed.
• A first-party localStorage preference that remembers the Activity page size you selected.

Arca does not currently set analytics or advertising cookies.

7. How long we keep information

Arca retains your account and financial information while your account exists. When a valid account deletion request is completed, Arca intends to delete the account and its associated application data.

Optional Supabase project backups and point-in-time recovery are not enabled. We do not make promises here about provider or infrastructure logs, backup copies, or their retention because those details have not been verified.

8. Your choices and rights

In Arca, you can edit your email, optional full name, and preferences. You can also create, edit, and delete your own transactions, budgets, goals, and recurring rules, subject to the history rules described below.

For privacy questions or requests to access, correct, or delete your account data, contact us at arcasupport1@gmail.com.

9. Account and data deletion

Arca V1 does not have a self-service account deletion button. To request account and data deletion, email arcasupport1@gmail.com. Self-service account deletion is planned for V2.

• Deleting a recurring rule keeps transactions it generated in the past.
• Funded goals must first be withdrawn to £0. Removing an empty goal from the Goals page preserves its contribution history.
• Transactions and budgets can be deleted normally by their owner.

10. Security and access

Supabase Auth handles passwords and authentication sessions. Arca links financial records to the signed-in user's ID, and Row Level Security restricts each user to their own financial records. Arca's application does not currently include analytics, advertising, or third-party tracking.

11. Changes to this notice

We may update this notice when Arca's features, providers, or data practices change. The date at the top of this page shows when the notice was last updated.

12. Contact us

Contact Arca about privacy questions, access requests, correction requests, or account and data deletion requests at: