Privacy Policy

Who we are

Arc is a logbook and social app for skydivers, operated by [operator name and address]. For anything about your data, write to [privacy email].

What we store and why

• Account: your email address and password (stored hashed), or your Apple / Google sign-in.
• Profile: name, legal name, photo, weight, home dropzone, jump and tunnel totals, skill self-assessment, social links and app settings.
• Logbook: your jumps and tunnel sessions, including signatures (the signer's name, role and licence number) and pages you import by scan or file.
• Documents: licence, ratings, AAD, reserve repacks and insurance details, including the photos and PDFs you add.
• Emergency & medical: your emergency contact, and — only with your explicit consent — blood type, allergies, medication and conditions.
• Social: friends, posts, comments, likes, chat messages, events, reviews, and dropzone / tunnel suggestions and photos.
• Reports and feedback: reports you send about people or content, bug reports (with screenshots) and feedback.
• Technical: your device's push token and platform, and a daily counter of document scans.

We use this to run Arc for you: your logbook and documents, your profile, friends and chats. We don't sell your data and don't use it for advertising.

Location: Arc uses your phone's location on the device to centre the map and find nearby dropzones. It isn't sent to or stored on our servers.

Health data

Blood type, allergies, medication and conditions are health data. Arc only stores them after you agree, and you choose whether your friends can see them — so a friend at the DZ can help in an emergency. You can change that choice or withdraw your consent anytime in Emergency & medical; your medical info is then deleted.

Who can see what

• Anyone signed in to Arc: your name, photo, home dropzone and jump totals (e.g. in search, friend suggestions and on your profile), reviews you write and events you make public.
• Your friends: your full profile including your email address, your logbook and tunnel log, posts, skill ratings and emergency contact — and your medical info if you chose to share it.
• Only you: your documents and insurance, personal details, scans, and medical info you didn't share.
• Chats: the people in the chat. Messages are encrypted in transit but not end-to-end — we and our hosting provider could technically access them. We only look at them to handle a report or when the law requires it. Message previews can appear on your lock screen.
• Us (moderation): reports, and dropzone / tunnel suggestions and photos before they're published. These are also sent to our private moderation workspace on Slack.
• Photos in posts and events are stored at long, unguessable web addresses; anyone who has such a link can open the photo.

Service providers

We use these providers to run Arc. They process data only for us:

• Supabase — database, sign-in, file storage and server functions. Servers in Zurich, Switzerland.
• Anthropic (Claude) — reads the logbook pages and documents you scan to fill in the fields. The images are sent only when you scan. USA.
• Expo — delivers push notifications: your push token and the notification's title and text (including message previews). USA.
• Apple and Google — push delivery to your phone, and sign-in if you choose it.
• Open-Meteo — weather forecasts for dropzones. Your phone requests them directly, so Open-Meteo sees your IP address and the dropzone's location.
• Slack — our moderation notifications (reports, suggestions, bug reports).

Links to websites, maps, meteoblue and webcams open or load content from those third parties under their own privacy terms. Where data goes outside Switzerland / the EU, we rely on standard contractual clauses or an adequacy decision.

Legal basis

We process your data to provide the service you signed up for (contract), with your consent for health data and push notifications, and based on our legitimate interest in keeping Arc safe (moderation, preventing abuse and spam). You can withdraw a consent anytime; this doesn't affect what happened before.

How long we keep it

As long as you have an account. Settings → Delete account removes your account and everything in it — profile, logbook, documents, files, posts, chats — right away. Backups are overwritten within [30] days. Before deleting, you can export your logbook as an Excel file and your skydiver profile as a PDF.

Your rights

You can access, correct, export and delete your data, withdraw consent, object to processing, and complain to a data protection authority — in Switzerland the FDPIC, in the EU the authority of your country (e.g. the Austrian DSB). Most of this you can do in the app; for anything else write to [privacy email].

Age

Arc is for people who are old enough to skydive and at least [16] years old.

Changes

If we change this policy in a way that matters, we'll tell you in the app before it applies.