Skip to content
ARCA
Features Security Downloader Pricing Blog FAQ Get Arca free

Privacy Policy

Last updated

Arca is built so that we never see your data. This policy explains, in plain language, what the Arca app and this website do and don't collect. The two are deliberately separate, and this policy keeps them separate: the iPhone app runs entirely on your device, while this website also hosts a free video downloader that necessarily runs on a server. Each is described below.

The short version

  • No account. Neither the app nor this website has a sign-up, login, or user profile.
  • The app has no server. Your photos, videos, thumbnails, and metadata are stored and encrypted only on your device. Nothing about your vault reaches us, ever.
  • No analytics on your media. We do not and cannot see the contents of your vault.
  • Nothing auto-uploads. Backups and exports happen only when you explicitly create them.
  • The web downloader is the one part that uses a server, because fetching a video from a link cannot be done any other way. It stores no files and has no accounts — details below.

What the Arca app stores

Everything you import — photos, videos, albums, thumbnails, and the metadata manifest — is encrypted with AES-256-GCM and stored locally on your iPhone. The encryption keys are derived from your PIN and never leave the device. We have no ability to access, recover, or decrypt your vault. If you forget your PIN, not even we can restore it.

What the Arca app does not collect

  • The contents of your photos or videos.
  • Your PIN, passcode, or biometric data (Face ID/Touch ID is handled by Apple's Secure Enclave; Arca never receives your biometrics).
  • Your contacts, location, or browsing history.

Purchases

Premium purchases are processed by Apple through the App Store and by our payments provider, RevenueCat, to validate your subscription or lifetime purchase. This processing uses an anonymous app-generated identifier and transaction receipts — it is never linked to the contents of your vault. See Apple's and RevenueCat's privacy policies for how they handle purchase data.

Diagnostics

If you opt in, Apple may share anonymized crash and performance diagnostics with us through App Store Connect. These reports never include vault contents. You can disable sharing in iOS Settings → Privacy & Security → Analytics & Improvements.

Backups you create

When you create an encrypted .arcavault backup, the file is encrypted on your device before you save or move it. If you choose to store that file in iCloud Drive, Files, or another service, it is subject to that service's terms — but it remains encrypted and unreadable without your PIN.

This website

Every page on https://arca.page other than the downloader is a static page served straight from a CDN. There is no account, no login, and no tracking or advertising script of any kind. We do not sell any data.

The web downloader

The free downloader at /download/ is the only part of Arca that involves a server, and it is worth being precise about what that means. Unlike the app — which never sends anything anywhere — fetching a video from a link requires a server to go and get it.

Here is exactly what happens when you paste a link:

  • The link is sent to our server so it can look up the video. It is used for that request and nothing else. It is not stored in a database, not associated with you, and not used to build any profile — there is no account to attach it to.
  • The video streams through our server to your browser. It is never written to disk on our side and no copy is retained after the download finishes.
  • We do not keep a record of what you downloaded. There is no download history, because there is nowhere to put one.

What is logged: our hosting provider, Cloudflare, records standard request logs for the downloader endpoints — timestamp, IP address, and response status — which are used to enforce rate limits and diagnose failures. This is ordinary server operation, not analytics, and it is the honest limit of what "we don't log anything" can mean for a service that runs on the internet. If that tradeoff isn't one you want to make, the iPhone app does the same job with no server involved at all.

The downloader does not store cookies, does not fingerprint your browser, and works with third-party cookies blocked.

Children

Arca is not directed to children under 13, and we do not knowingly collect information from them. Because Arca collects no personal data, there is no child data for us to access.

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.

Contact

Questions? Email support@pacifiq.io.