Privacy Policy

Arca is operated by Pacifiq. Your vault is encrypted on your device, with no Arca account and no automatic upload of your library. Some features use the internet. This policy covers those requests as well as local storage, purchases, support, and the website at https://arca.page. Platform-specific sections apply to the iPhone or Android build you use, including test versions.

Your vault stays on your device

Arca stores imported photos and videos, thumbnails, album information, notes, and generated transcripts in encrypted files on your device. It uses AES-256-GCM with individual file keys and a vault master key protected by your PIN. We do not receive these files or hold a recovery key. We cannot reset your vault PIN or recover your library for you.

Biometric authentication is handled by your device's operating system; Arca does not receive your face or fingerprint data. Failed unlock attempts may be recorded locally, including the attempted PIN and time. If you enable break-in photos and grant camera permission, the app can also capture a front-camera image after a failed attempt. These records are encrypted locally and are not sent to our diagnostics or purchase providers. Camera use remains subject to the operating system's privacy indicators.

Permissions, exports, and backups

Photo and file pickers give Arca access to the items you choose. Camera and microphone permissions are used for the capture features you enable. The app does not request your contacts or location to operate the vault. Imported originals may contain location and other metadata supplied by their source; that information remains inside the encrypted file.

Exporting or sharing an original, copying text, or saving an encrypted backup is an explicit action. Exported media and clipboard text are outside Arca's protection and may be handled by other apps or cloud services. An .arcavault backup contains encrypted files and protected key material; it needs the PIN that protected it when it was created. Keep that PIN private. Erasing your vault does not erase copies you previously exported or saved elsewhere.

Save from Link

When you request a link download in the app, the source URL is sent to our download service so it can resolve and retrieve the requested content. The service may contact the source platform and proxy the response. Some downloads require temporary server files to combine or convert streams; those files are removed as the job is cleaned up. This is separate from your vault: the feature does not upload files already stored in it.

Our hosting and network providers process technical request information, such as IP addresses, timestamps, request details, and response status, to deliver the service, enforce limits, and investigate failures. Source platforms also receive the requests needed to retrieve their content. Avoid submitting URLs containing private credentials or information you do not want processed by a download service. There is no Arca account-based download history.

On-device subtitles

Speech transcription runs on your device. The Android build downloads a public speech model from Hugging Face when you first request transcription; that download exposes ordinary network request information to the hosting provider, but sends no audio, video, or transcript. Generated text stays encrypted in the vault unless you choose to copy or export it. See Hugging Face's privacy policy.

Purchases

Apple or Google processes payments through the store where you obtained the app. RevenueCat validates purchases and determines Premium access. This involves an app-generated identifier, purchase receipts or tokens, subscription status, and technical app and device information. These identifiers are pseudonymous, rather than a guarantee of anonymity. We do not receive your payment card details, and the purchase integration receives no vault content, PIN, or encryption key.

See the privacy policies for Apple, Google, and RevenueCat for their processing and retention practices.

App diagnostics and measurement

The iPhone app uses Firebase Crashlytics and Analytics for crash reports and basic app and purchase-screen events. These services can process app-instance identifiers, device and app versions, usage events, and diagnostic information. Reports may include the broad app state, such as whether the vault is locked, and accessibility contrast settings. Arca does not attach media, transcripts, filenames, album names, item counts, PINs, or keys to these reports.

The iPhone app also initializes the Meta SDK with automatic app events enabled and passes its app-instance identifier to RevenueCat for attribution. Advertiser ID collection is disabled in the app's Meta configuration. These integrations measure app use and purchase attribution; they do not receive vault files. See Firebase's privacy information and Meta's privacy policy. Any diagnostics you separately choose to share with Apple are governed by your device's Analytics & Improvements settings; those settings do not control Arca's third-party SDKs.

The Android build does not include Firebase or Meta SDKs. Its RevenueCat integration has automatic advertising-device identifier collection disabled. Store-provided diagnostics and purchase processing still follow the relevant store's settings and privacy policy.

This website

The website has no Arca login or advertising tracking scripts. When you tap a store link, our click-counting endpoint records the page path, destination store, date, and timestamp. That click record does not contain an IP address, cookie, or device identifier. The network request still passes through our hosting provider, Cloudflare, which processes request information to serve and protect the site. See Cloudflare's privacy policy.

Support, retention, and your choices

If you email support, we receive your email address and the information you include so we can answer your request. Please do not send your PIN or private vault contents. Support correspondence and service records may be retained as needed to resolve requests, operate the service, and meet applicable obligations. Service providers may process this information in countries other than your own, under their published privacy practices.

You control local vault data through the app, including deletion and Erase All. Manage external backups and exported copies where you saved them. For access, correction, or deletion requests concerning information we receive, contact support@trilliwon.com. Your rights depend on applicable law. We cannot identify or decrypt your local vault from a support request, and deleting the app does not cancel a store subscription. See data deletion instructions for the steps and the records a request can cover.

Children

Arca is not directed to children under 13. If you believe a child has provided personal information to us, please contact us so we can investigate and address it.

Changes and contact

We may update this policy as the app or services change. The date above identifies the latest revision. Send privacy questions to support@trilliwon.com.