Arctelia - Privacy Policy

Arctelia is operated by Arc & Bearing LLC ("we," "us," and "our"). If you have questions about this policy, contact us at hello@arctelia.app.

1. What We Collect

1.1 Account Information

When you sign up, we collect your email address and a password, stored as a hash. We never see or store your actual password. If you sign up through a third-party provider such as Google or Apple, we receive your email address and display name from that provider.

1.2 Content You Create

Everything you enter into Arctelia — session logs, notes, evidence of intent, artifacts, scribble boards, writing documents, threads, map pins, and other content — is stored on our servers. This is the core of the service. We need it to show you your work and provide continuity features.

1.3 Location Data

If you use location features such as Scout, map pins, or auto-conditions, we collect the coordinates your device provides. This data is stored alongside your entries and saved locations. Location capture is always initiated by you. We do not track your location in the background. For geo-primary crafts such as fly fishing, hiking, or hunting, weather, tide, and environmental data are fetched based on the coordinates you provide and cached temporarily.

1.4 Device and Usage Information

We collect basic technical information needed to operate the service: browser type, device type, IP address, and pages visited. We use this to diagnose problems, prevent abuse, and understand how the application is used in aggregate. We do not use third-party analytics or advertising trackers.

1.5 Payment Information

Subscription payments are processed by Stripe. We do not see or store your credit card number. Stripe provides us with a transaction record, your billing email, and the last four digits of your card for display purposes. Stripe's privacy policy governs their handling of your payment data.

2. How We Use Your Data

Your data is used to provide Arctelia's services to you. Specifically:

• Storing and displaying your content within your workspace, project logs, and where you choose, the public Gallery
• Generating AI guidance by sending relevant portions of your entries, artifacts, and project context to third-party AI providers
• Fetching environmental data such as weather, tides, stream flow, species observations, and solar position based on locations you provide
• Sending account-related communications such as password resets, billing confirmations, and terms or policy updates
• Sending optional practice digests if you opt in to email notifications

We do not use your data for advertising. We do not sell, license, trade, or otherwise provide your personal information or content to third parties for commercial purposes. This is a core commitment.

3. Who Receives Your Data

3.1 Infrastructure Providers

Arctelia runs on the following services, which process your data as part of operating the platform:

3.2 AI Providers

When you request AI guidance or when the system generates synthesis from your entries, relevant data is sent to one or more of the following providers:

This processing occurs on a per-request basis. We do not provide your content to AI providers for the purpose of training their models. We do not use your content to train our own models. Each provider's data handling is governed by their own terms of service and privacy policies.

3.3 Environmental Data Sources

When you use location-aware features, we send your coordinates to public data services to fetch contextual information. These services receive only the location coordinates. They do not receive your account information or entry content. Sources include:

• Open-Meteo for weather forecasts
• USGS NWIS for stream flow and water temperature
• NOAA CO-OPS for tide predictions
• SunCalc for solar position, computed locally with no external call
• iNaturalist for species observations
• eBird for bird species frequency when applicable
• FEMA, Census, and EPA for site context in architecture and urban design crafts

3.4 No Other Third Parties

We do not share your data with advertisers, data brokers, marketing platforms, or other third parties beyond those listed above. If this ever changes, we will update this policy and notify you before any new sharing begins.

4. AI Processing - What Gets Sent and When

AI guidance is central to Arctelia, so this section explains the specifics.

When you submit a session log or request guidance, the system may send the following to an AI provider:

• The current entry, including notes, evidence of intent, motion, and craft context
• Project summary and phase context
• Recent entries from the same project for continuity
• Structured session data such as craft log fields and conditions
• Image artifacts as time-limited signed URLs for vision analysis
• Audio artifacts for transcription via Whisper
• Coarse location context at the city or region level, not precise coordinates

AI processing is triggered by your actions, such as submitting a log entry or tapping the guidance button. We do not run background AI processing on your content.

The AI providers listed above process your data under their API terms, which generally prohibit using API inputs for model training. We select providers whose API terms include this protection. However, we cannot guarantee the internal practices of third-party providers.

5. Cookies and Local Storage

Arctelia uses cookies and browser local storage strictly for authentication and session management. We use:

• Authentication cookies set by Supabase to keep you logged in
• Local storage for UI preferences and draft state so you do not lose work if your browser closes

We do not use advertising cookies, social media tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking.

6. Data Retention

While your account is active: All your data is retained and available to you.

If you cancel your subscription: Your account reverts to the free tier. Your data is retained but access to paid features is suspended. You can resubscribe at any time and your data will be there.

If you delete your account: Your data will be permanently removed from our systems within 30 days. This includes entries, artifacts, projects, scribble boards, saved locations, and all associated content. Anonymized, aggregated data that cannot identify you may be retained for service improvement.

AI-generated guidance: Guidance text generated for your sessions is stored alongside your entries. It is deleted when the associated entry or account is deleted.

Backups: Automated database backups may retain deleted data for up to 30 additional days beyond the deletion date, after which it is purged.

7. Data Security

We use industry-standard measures to protect your data:

• All data is transmitted over HTTPS using TLS encryption in transit
• Passwords are hashed and cannot be read by us
• Database access is controlled through Row Level Security so queries return only data belonging to the authenticated user
• File storage for images, audio, and video uses signed URLs with time-limited access
• Administrative access to production data is restricted to the platform operator

No system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify affected users by email within 72 hours of confirmation.

8. Your Rights

Regardless of where you live, we believe you should have control over your data. You can:

• Access your data through the application and through Compile and Export features
• Correct your data by editing entries, projects, and account information
• Delete individual entries, projects, or your entire account
• Export your data through the Compile feature
• Opt out of optional practice digest emails at any time

If you are located in the European Union, you may also have rights under the GDPR including the right to data portability, the right to restrict processing, and the right to object to processing. To exercise any of these rights, contact us at hello@arctelia.app and we will respond within 30 days.

If you are a California resident, you have rights under the CCPA including the right to know what personal information is collected and the right to request deletion. We do not sell personal information. To exercise your rights, contact us at hello@arctelia.app.

9. Children

Arctelia is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Separately, our service is intended only for users who are at least 16 years old under our account rules. If we learn that a child under 13 has provided personal information, or that a user under 16 has created an account in violation of our terms, we will delete the account and associated data. If you believe this has happened, contact us at hello@arctelia.app.

10. International Data Transfers

Arctelia's infrastructure is hosted in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using Arctelia, you consent to this transfer. We rely on standard contractual protections and the data handling commitments of our infrastructure providers to safeguard data transferred internationally.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top and notify registered users by email. Continued use of Arctelia after changes take effect constitutes acceptance of the updated policy. We will not retroactively reduce your privacy protections without your explicit consent.

12. Contact

If you have questions about this policy, want to exercise your data rights, or need to report a concern:

Email: hello@arctelia.app

13. Governing Law

This policy is governed by the laws of the Commonwealth of Massachusetts, United States, consistent with the Terms and Conditions.