Draft for Syno Legal review. This policy is not yet in effect and has not been approved. Items marked [Confirm] are assumptions that need checking against the shipped Arc app before publication.
Arc Privacy Policy
This Privacy Policy explains how Syno Labs LLC ("Syno Labs", "we", "us") collects, uses, shares and protects personal information when you use the Arc: Level Up Your Reality app for iPhone and iPad (the "App") and related services (together, the "Service").
Controller / operator: Syno Labs LLC, a Wyoming limited liability company, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA.
Contact: support@synostudios.com
Website: https://www.synostudios.com/arc/privacy
1. Summary
- Arc uses anonymous sign-in. You don't need an email address or phone number to use it.
- To build your plan, Arc asks for fitness calibration details such as age, height, weight, experience, goals, available equipment and any injuries or limitations. It then records your workouts and progress.
- Your player name, level, rank and streak can appear on Arc's global leaderboards. [Confirm]
- We do not sell your personal information, and we do not use your fitness or calibration data for advertising.
- Arc's App Store privacy label declares that purchase history, a device identifier and product-interaction data may be used for tracking. We only do this if you allow it through Apple's App Tracking Transparency prompt. [Confirm]
- Our main service providers are Supabase (sign-in and database), Superwall (subscription paywall and status) and Apple (payments and notifications).
2. Information we collect
2.1 Information you give us
| Data | Details | Required? |
|---|---|---|
| Calibration data | Age, weight, height, training experience, activity level, goals (for example muscle, weight loss or strength), training frequency, available equipment, and any injuries or limitations you tell us about | Needed to generate your plan |
| Profile | Player name and title shown in the App [Confirm whether the name is user-chosen] | [Confirm] |
| Creator code | A creator code, if you enter one during setup | Optional |
| Support messages | Anything you email us, including your email address | Optional |
2.2 Information collected when you use the App
| Data | Details |
|---|---|
| Account identifier | A random user ID created by anonymous sign-in (Supabase) |
| Workout and progress data | Quests, exercises, sets and reps logged, session duration, XP, level, stats (STR, VIT, AGI, INT, SEN, END), rank, streaks, penalty quests and plan adherence |
| Subscription data | Products viewed and bought, purchase and trial status, and purchase history. Apple processes payment; we never receive your card details. |
| Device and usage data | Device identifier, device model, OS and app version, IP address, time and duration of use, and how you interact with features such as quests, training mode and the paywall |
| Notifications | A push token and your reminder preference, if you allow notifications |
2.3 What we do not collect
- Apple Health (HealthKit): Arc does not read or write HealthKit data. [Confirm]
- Location, contacts, photos, camera or microphone: not accessed. [Confirm]
- Payment card details: handled by Apple only.
3. How we use information (and legal bases)
| Purpose | Data | Legal basis (EEA/UK) |
|---|---|---|
| Create your anonymous account and keep it secure | Account identifier, device data | Contract |
| Generate and adjust your personalized plan, daily quests and smart swaps | Calibration data, workout and progress data | Contract. Explicit consent for injury or health details. |
| Show progress, XP, stats, ranks, streaks and leaderboards | Profile, workout and progress data | Contract |
| Process subscriptions, trials and restores, and unlock Arc Pro | Subscription data, account identifier | Contract; legal obligation (record keeping) |
| Send your daily reminder and important notices | Push token, preferences | Consent (OS permission) |
| Analytics to improve the App and balance quests | Usage data, product interaction | Legitimate interest |
| Measure and market Arc, including attributing installs and purchases to creator codes and ads [Confirm] | Purchase history, device identifier, product interaction, creator code | Consent (App Tracking Transparency) where tracking is involved; otherwise legitimate interest |
| Customer support | Messages, account data | Contract / legitimate interest |
| Comply with law and enforce our terms | As needed | Legal obligation / legitimate interest |
We do not use automated decision-making that has legal or similarly significant effects on you. We do not use your personal or fitness data to train AI models.
4. What other users can see
- Leaderboards: your player name, level, rank and streak can appear on global leaderboards that rank players by level, streak and momentum. [Confirm the exact fields and whether you can opt out]
- Your calibration data, injuries and workout logs are not shown to other users.
5. Sharing and service providers
| Recipient | Role | Data | Location |
|---|---|---|---|
| Supabase, Inc. | Processor: anonymous authentication, database and hosting | Account identifier, calibration, workout, progress and profile data | USA [Confirm region] |
| Superwall | Processor: paywall and subscription status | Account identifier, device data, paywall interaction, purchase status | USA |
| Apple Inc. | Independent controller for payments, Family Sharing and Ask to Buy; provider for push notifications | Payment handled by Apple; device token | USA / global |
| Advertising or attribution partner [Name the SDK, or remove this row] | Measuring installs, ads and purchases, only with your tracking permission | Purchase history, device identifier, product interaction | [Confirm] |
| Other Arc users | See §4 | Leaderboard data | Worldwide |
| Authorities / legal | When required by law, or to protect rights and safety | As required | — |
| Successor | In a merger, acquisition or asset sale, with notice to you | As needed | — |
We do not sell personal information. If Arc uses data for cross-context behavioral advertising, that is "sharing" under the CCPA/CPRA. You can opt out by denying or withdrawing tracking permission in Settings → Privacy & Security → Tracking, or by emailing us. [Confirm once the tracking question is settled]
6. International transfers
Syno Labs is based in the USA and our providers process data mainly in the USA. If you are in the EEA, UK or Switzerland, we rely on the EU Standard Contractual Clauses (and the UK Addendum) and/or our providers' EU–US Data Privacy Framework certifications, where applicable.
7. Retention
| Data | Retention |
|---|---|
| Account, calibration, workout and progress data | While your account is active, or until you ask us to delete it |
| After a deletion request | Deleted from live systems once we have verified the request; backups expire within 30 days [Confirm Supabase backup window] |
| Subscription records | As long as needed for tax, consumer-protection and dispute purposes, up to 5 years |
| Usage and server logs | Per provider defaults, typically 30 days or less; aggregated analytics may be kept longer [Confirm] |
8. Your rights and choices
- Access, correction, deletion, portability, restriction, objection and withdrawal of consent, depending on where you live (for example GDPR/UK GDPR and US state laws). Email us to exercise them. We will respond within the legal deadline, normally 30 days.
- Delete your data: email support@synostudios.com with the subject "Arc data deletion request". Because Arc uses anonymous sign-in, we may ask for details that let us find your account. [Confirm the verification method, and whether an in-app delete option exists] Deleting the App or your data does not cancel an Apple subscription. Cancel it in Settings → your name → Subscriptions.
- Tracking: you can allow or deny tracking when Arc asks, and change it any time in Settings → Privacy & Security → Tracking.
- Notifications: controlled in Settings → Notifications → Arc.
- Complaints: you can complain to your local data protection authority, such as your EU supervisory authority or the UK ICO.
9. Children
Arc is not directed at children under 13, and we do not knowingly collect personal data from them. Where local law requires a higher age for consent without parental approval (for example 16 in some EEA countries), users under that age need a parent or guardian's consent. If we learn that we have collected data from a child without valid consent, we will delete it. [Confirm the minimum age: the App Store page shows 9+, and Run Wars uses 14+]
10. Security
We use encryption in transit (TLS), access rules that limit each account to its own data, and least-privilege access for our team. [Confirm Supabase row-level security is enabled] No system is completely secure. If a breach affects you, we will notify you and regulators as the law requires.
11. Changes
We will post updates here and tell you in the App about material changes, at least 7 days in advance (30 days for changes that disadvantage you, where required).
12. Contact
Syno Labs LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA. support@synostudios.com
Use of Arc is also subject to Apple's standard Licensed Application End User License Agreement.