Winter Arc

Privacy

What we store.

Last updated 2 September 2026

The short version

By default, nothing you record leaves your device. Your commitments, check-ins, notes and streak are stored in your browser and are never sent anywhere. There is no account, and the app works completely without one.

Two things change that, and both are optional and described below: choosing to back your Arc up, and anonymous usage counting.

If you never create a backup

We hold nothing about you. Your Arc lives in your browser's local storage on the device you set it up on. Clearing your browser data, uninstalling the app or switching phones deletes it, and we cannot recover it — because we never had it.

If you turn on backup

You give us an email address, and we store two things:

  • Your email address, used only to send you a sign-in code and to identify your backup. No marketing, no newsletters.
  • A copy of your Arc — the same data that was on your device: which commitments you completed on which days, your notes and micro-wins, and your settings.

This is stored with Supabase, our database provider, and protected so that only your signed-in account can read or write it. Sign-in codes are delivered by Resend, our email provider.

Your Arc includes things you may consider personal — how you slept, what you ate, what you found difficult. We treat it accordingly: it is never sold, never shared, never used for advertising, and never read by us for any purpose other than storing and returning it to you.

Usage measurement

We count eight things to understand whether the app works: that it was opened, that setup finished, that a check-in started or completed, that a card was previewed, downloaded or shared, and that an Arc was completed.

We also record which site you arrived from — for example Instagram, Reddit or a search engine — so we know which places are worth posting in. It is a single word stored on your device the first time you open the app. It is not linked to you, and if you arrived by typing the address it is simply recorded as “direct”.

This uses PostHog, configured deliberately: no session recording, no automatic capture of what you click or type, and no personal profiles. The contents of your check-ins, your notes and your micro-wins are never included.

Deleting your data

  • Delete my Arc in Settings removes everything from this device, immediately.
  • Delete backup in Settings → Backup removes the copy stored on our server.
  • Delete my account removes your email address and your backup together, permanently.

None of these are reversible, and none of them require asking us. If something does not work, email dev.ayushkushwaha@gmail.com and we will remove it manually.

What we never do

Sell your data. Share it with anyone beyond the two providers named above. Show you adverts. Build a profile of you. Put your email address on a share card. Require an account to use the app.

Children

Winter Arc is not intended for anyone under 13, and we do not knowingly store data from them. If you believe a child has created a backup, email dev.ayushkushwaha@gmail.com and it will be removed.

Changes

If this policy changes in a way that affects what we store, the date at the top changes and the change is described here. This is version one.

Contact

dev.ayushkushwaha@gmail.com — for anything about your data, including deletion, correction or a copy of what we hold.