Privacy Policy

Section 01

Scope and adults-only service

This policy applies to the Revenge Arc mobile application, website, support, Creator Program, community, and related services. Revenge Arc is for adults 18 and older. We do not knowingly offer accounts to minors. Reports that an account may belong to a minor should be sent to the privacy contact below.

The final operating entity name, business address, privacy contact, initial launch countries, and any required representative details must be confirmed before publication.

Section 02

Information you provide

• Account, authentication, profile, age-confirmation, preference, and support details.
• Training plans, exercise history, goals, performance, recovery notes, nutrition logs, meal information, body measurements, progress entries, and other wellness-related information you choose to enter.
• Prompts, messages, feedback, and contextual information supplied to AI features.
• Photos, video, audio, captions, posts, comments, reactions, reports, direct messages, and other community content.
• Creator Program applications, including contact details, social profiles, audience information, and application responses.
• Purchase status and entitlement information; Apple processes payment-card details and does not provide the full card number to us.

Section 03

Information collected through use

• Device, app version, language, time zone, approximate network information, diagnostics, crash, security, and feature-interaction data.
• Workout completion, streak, subscription, account, moderation, and support events generated when you use the Services.
• Website page path, referrer host, campaign fields, device class, allowlisted event name, and a rotating anonymous daily identifier. Public website analytics do not store raw IP addresses in analytics records.
• Step count or active-energy information from Apple Health only when you grant the relevant permission. Revenge Arc should request only the HealthKit types needed for the feature you choose.

Section 04

Information from other sources

• Apple or Google sign-in information, according to the permissions and choices you make with those services.
• Subscription and entitlement information from Apple and RevenueCat.
• Food, nutrition, and barcode information from configured food-data providers, which may include FatSecret or Open Food Facts.
• Information another user shares about you, such as a mention, message, report, or uploaded image, subject to their obligations and your available controls.

Section 05

How we use information

• Provide accounts, workouts, nutrition tools, progress tracking, social features, messaging, subscriptions, support, and requested AI features.
• Personalize plans, recommendations, reminders, and the experience you request.
• Authenticate users, prevent fraud and abuse, enforce policies, investigate reports, secure systems, and respond to incidents.
• Operate, diagnose, measure, and improve the Services, including privacy-conscious product analytics and quality evaluation.
• Process Creator Program applications and communicate about them.
• Comply with law, protect rights and safety, resolve disputes, and maintain necessary business records.

Section 06

Legal bases where applicable

Depending on your location and the activity, we may process information to perform a contract with you, with your consent, to comply with law, or for legitimate interests such as security, service improvement, and fraud prevention where those interests are not overridden by your rights. Sensitive health or biometric-like information may require explicit consent or another specific legal condition. The final legal-basis map must be validated for each launch jurisdiction before publication.

Section 07

AI and automated processing

When you request an AI feature, relevant prompts and limited account, training, nutrition, progress, image, audio, transcript, or conversation context may be sent from Revenge Arc servers to the configured AI provider to generate a response. Do not submit information you do not want used for that request. Cal AI and other AI-assisted outputs are estimates, are not 100% accurate, and should not be the sole basis for health, safety, legal, or similarly significant decisions.

Provider identity, contract terms, data-use controls, retention settings, processing regions, model configuration, and deletion behavior must be confirmed before launch. See the AI & Data Processing Notice for additional details and controls.

Section 08

Health and sensitive information

Training, nutrition, body measurement, recovery, image, audio, inferred-health, and Apple Health data can reveal sensitive facts. We use this information only for requested features, security, support, and other disclosed purposes. Apple Health data must not be used for advertising, marketing, or unrelated data mining, and must not be sold. You can control Health permissions in iOS settings.

Revenge Arc does not currently intend to identify people through face geometry, voiceprints, or another biometric identifier. If a future feature creates or uses a biometric identifier or biometric template, it must receive a separate notice and any required written or affirmative consent before collection. See the Consumer Health Data Privacy Notice and Biometric & Media Notice.

Section 09

Community visibility

Profile fields and content may be visible to other users according to the feature and selected privacy settings. Posts, comments, reactions, follower relationships, and content shared in public or group areas should be treated as visible to that audience. Direct messages and restricted media are intended for their selected recipients, but no online sharing method can guarantee that recipients will not copy or redistribute content.

In-app reporting and blocking controls are available. Record-deletion controls let you remove eligible information. Visibility defaults, media-access rules, encryption, and deletion propagation still require documented production checks. Blocking does not remove copies someone already saved or shared.

Section 10

When information is shared

• With processors that help operate the Services, such as cloud hosting, authentication, storage, AI, subscriptions, push notifications, diagnostics, food data, and support providers, under appropriate contractual restrictions.
• With other users and audiences you select when you use community or messaging features.
• With professional advisers, auditors, insurers, or transaction counterparties when reasonably necessary and subject to confidentiality protections.
• With authorities or others when required by law or reasonably necessary to protect rights, safety, security, and the integrity of the Services.
• As part of a merger, financing, acquisition, reorganization, or sale, subject to applicable notice and legal requirements.

Section 11

Selling and targeted advertising

Revenge Arc does not currently sell personal information or use health information for targeted advertising. The public website does not currently use advertising pixels or advertising cookies. If these practices change, we will update disclosures and provide legally required choices before the new use begins.

Section 12

Communications and notifications

We may use your contact details and device tokens for requested support, account, security, subscription, moderation, legal, reminder, and service notifications. Optional marketing communications are sent only as permitted by law and your choices. Email marketing can be unsubscribed through the message; push notifications can be changed in device settings. Essential account or legal notices may still be delivered.

Section 13

Retention

We retain information only for as long as reasonably needed for the purposes described here, including providing the Services, maintaining security, resolving disputes, enforcing agreements, and meeting legal obligations. Retention depends on the data type, account status, sensitivity, operational need, consent, and applicable law.

The website database is configured to delete raw analytics events older than 90 days and privacy-safe daily aggregates older than 24 months. Exact production-app, backup, log, AI-provider, message, media, moderation, billing, and legal-hold schedules must be approved and operationally verified before launch. More detail appears in the Data Retention & Deletion Policy.

Section 14

Your rights and choices

• Access, correct, export, or delete eligible information.
• Withdraw consent or object to, restrict, or opt out of certain processing where applicable.
• Control Apple Health permissions, notifications, community privacy settings, and device-level permissions.
• Appeal a rights-request decision or use an authorized agent where local law provides those rights.
• Submit a request to revengearchelp@gmail.com. We may reasonably verify identity and authority before acting.

Section 15

Security

We use administrative, technical, and organizational safeguards intended to protect information, such as access controls, server-side credentials, transport encryption, rate limits, and restricted administrator access. No system is completely secure. The final production security, access, logging, backup, incident-response, and vendor-control evidence must be reviewed before launch.

Section 16

International processing

Providers may process information outside your state, province, or country. Where required, we will use an approved transfer mechanism and provide information about relevant safeguards. Actual provider regions and transfer mechanisms must be confirmed before publication.

Section 17

US state and other regional notices

Depending on where you live, local privacy or consumer-health laws may provide additional rights and require specific notices about categories, purposes, recipients, consent, appeals, or authorized agents. The final notice set must match the confirmed launch geography and data flows. We will not discriminate against you for exercising a legally protected privacy right.

Section 18

Changes and contact

We may update this policy as the Services or law changes. Material changes will receive additional notice where required. Privacy requests, underage-user reports, and questions may be sent to revengearchelp@gmail.com.