Private by design

Only what Arc needs to work:

• Your account: email address, name, profile photo if you add one, language, time zone and a payment ID if you add one for settling up. Your password is stored only as a one-way hash.
• What you put in Arc: sheets, entries, categories, budgets, splits and the people you share sheets with.
• What Arc learns while you use it: which category each payee belongs to, and the last four digits of a card or account so it can pick the right payment method.
• Entries waiting in your inbox: the amount, date, payee and Arc’s category guess for each bank text, until you log or drop them.
• Sign-in records: the device name, app version, browser and IP address of each signed-in device, so you can see and end your sessions.
• Arc AI usage: one record per call, with ids, counts and timings. Never the text, the payee or the answer.
• Feedback you send us, and our replies.
• If you buy Pro on the web: your plan, its renewal dates, and the payment references, amounts and status Razorpay sends us. Your card, UPI or bank details go to Razorpay, never to Arc.

Cookies: two keep you signed in, and one, kept for a year, remembers which prices to show you. There are no advertising or tracking cookies. To see which pages people visit, the website counts page views with Vercel Web Analytics: it sets no cookies, doesn’t identify you, and only sees the page’s address with any ids, links or search terms removed.

• Your bank password or bank login. Arc never connects to your bank.
• The text of your messages. There’s no place in Arc’s database to store it.
• Your screenshots. They’re read on your phone or in your browser and never uploaded.
• Your contacts, location or photo library.
• Card numbers. At most, the last four digits.
• Your card, UPI or bank details when you pay for Pro. Razorpay handles the payment; Arc only hears whether it went through.

Arc reads bank texts, screenshots and dictation on your device first, with its own rules. Arc AI is asked only when those rules can’t read a format or aren’t sure of a category.

Before any text leaves your device, Arc masks account and card numbers (keeping at most the last four digits), reference numbers, phone numbers, email addresses, balances and phone-number payment handles. The amount, payee and date stay, because that’s what Arc AI needs. Arc AI checks every request and refuses any text that still looks unmasked.

Arc AI runs on Cloudflare Workers AI. It receives masked text and your sheet’s category names, and doesn’t keep either. Its answers are suggestions: Arc fills a category only when it’s sure, and otherwise asks you.

On the web, dictation uses your browser’s own speech recognition, which may send audio to the browser’s maker (Google, Microsoft or Apple). Arc shows you which one before you start. On iPhone, speech is recognised on the phone.

You can turn Arc AI off at any time in Settings. Then nothing leaves your device, and entries Arc isn’t sure of wait for you to pick.

Entries waiting in your inbox

7 days, then deleted, whether you logged them or not

Email codes

10 minutes

Sign-ins

60 days after you last use Arc on that device

Arc AI usage records

90 days, ids and counts only

Payment links

90 days, then they stop working

Your account, sheets and entries

Until you delete them or your account

Payment records for Pro

As long as tax and accounting law requires, even after your account is deleted

If you used an introductory price

A one-way fingerprint of your email, kept after your account is deleted, only so the intro price can’t be used twice

We don’t sell your data, rent it or share it with advertisers. It goes only to:

• People you choose: members of a sheet you share see that sheet’s entries, except the ones you mark private.
• Anyone you send a payment link to: they see your name, photo and payment ID, the amount and the sheet’s name. Nothing else.
• Razorpay, when you buy Pro on the web: your name, email and the mobile number you give it, to take the payment, under its own privacy policy.
• Authorities, only when the law requires it. Where we’re allowed to, we’ll tell you first.

• Turn Arc AI on or off in Settings, on the web or on iPhone.
• Edit or delete any entry, sheet or category, and drop anything waiting in your inbox.
• Mark entries private on a shared sheet, or leave a sheet.
• Export your sheets to Excel or PDF.
• See every signed-in device and sign any of them out.
• Change your email, password or profile photo, or remove the photo.
• Ask us for a copy of your data, or to correct it, at the address below.

Email us from the address on your account and we’ll delete your account, sheets, entries and profile photo within 30 days. If you share sheets with other people, we’ll check with you first about what stays with them. Self-serve deletion in Settings is on the way. If you have a Pro subscription on the web, we cancel it first, so you’re never charged again. If you used an introductory price, Arc keeps a one-way fingerprint of your email after your account is deleted, only so the intro price can’t be used twice, and for nothing else. It can’t be turned back into your email.

Arc isn’t meant for children under 13, and we don’t knowingly collect their data. If you think a child has signed up, tell us and we’ll delete the account.

When this policy changes, the date at the top changes too. If a change affects how your data is used, we’ll tell you in Arc or by email before it applies.

Questions, requests or worries about your data: write to hello.arcapp@gmail.com. We aim to answer within 30 days.