Privacy Policy

Last updated: October 5, 2026

Arcly is an iPhone app for people in clear-aligner treatment. This policy explains what information Arcly handles, why, and the choices you have. In this policy, "Arcly", "we" and "us" mean the Arcly app and its publisher. Contact: roland.ibrg@gmail.com.

1. Information stored on your iPhone

Arcly stores what you enter in the app's private storage on your iPhone:

• wear sessions: when your aligners or elastics were out and in;
• your treatment plan: trays, planned and actual tray changes, daily wear goal and time zone;
• treatment events, appointments and the notes you add to them;
• elastic instructions, reminder settings and aligner cleaning records;
• progress photos you take or import.

This information describes your dental treatment, so we treat it as health information. If you use Arcly without an account, it is not sent to us. It leaves your iPhone only when you choose to share or export it.

2. Optional account and backup

You can sign in with Apple, with Google, or with a code sent to your e-mail address. If you do, we store:

• an account identifier and your e-mail address. Apple may give us a private relay address instead of your real one. Google also shares your name;
• a backup of the records listed in section 1, including your progress photos, so you can restore them on another iPhone.

Your backup is stored privately and can only be accessed with your account. When you use Arcly on more than one iPhone, the most recent backup replaces the earlier one.

If you sign in with an e-mail code, we use your e-mail address to send the code. To limit abuse, we keep only a keyed hash of your address and of the code, and delete it about an hour later.

3. Subscriptions

Purchases are made through Apple. We never receive your payment card details. We use RevenueCat to check whether your subscription is active. RevenueCat receives a random app user identifier (your account identifier if you are signed in), your purchase and subscription history from Apple, and basic technical information such as your iOS and app version.

4. What we don't do

• We don't show ads or use your information for advertising.
• We don't track you across other companies' apps or websites.
• The app contains no analytics or advertising software.
• We don't sell your information or share it for marketing.
• We don't use your information to diagnose or recommend treatment. Arcly records what you report.

We may disclose information if the law requires it, or to protect the rights and safety of our users or of Arcly.

5. Permissions on your iPhone

• Camera: only when you take a progress photo.
• Photos: you pick individual photos to import. Arcly doesn't get access to your whole library.
• Notifications: reminders are scheduled on your iPhone. We don't send push messages.
• Live Activity: shows the current out-of-mouth timer on your Lock Screen. It uses data on your iPhone only.
• Calendar: Arcly can create a calendar file for you to add. It doesn't read your calendar.

6. Exports and sharing

When you export your record or share a report or photo, the file is created on your iPhone and goes only where you send it. Once shared, the recipient's handling of it is outside our control.

7. Service providers

We use these providers to run Arcly. They process information only to provide their service to us:

• Supabase: accounts, backups, photo storage and e-mail sign-in.
• RevenueCat: subscription status.
• Resend: sending e-mail sign-in codes.
• Apple: Sign in with Apple, payments and app distribution.
• Google: Sign in with Google, if you choose it.
• Cloudflare: hosting this website.

Arcly is based in Serbia. Our providers may process information in other countries, including the United States. Where required, these transfers rely on safeguards such as standard contractual clauses. Like most online services, they also process technical data such as IP addresses and request logs to operate and secure their services.

8. Legal bases

We process information under the Serbian Law on Personal Data Protection and, where it applies, the EU and UK General Data Protection Regulation, on these bases:

• Treatment records and photos: your explicit consent, which you give by entering them. You can withdraw it at any time by deleting them.
• Account, backup and subscription information: to provide the service you asked for.
• Security and abuse prevention: our legitimate interest in keeping Arcly safe.
• Legal obligations: where the law requires it.

9. How long we keep information

Information on your iPhone stays until you delete it or the app. Backups are kept while your account exists.

• Delete tracking data (Profile, then Privacy & data) removes your sessions, trays and photos from the phone and from the backup. Your account and subscription stay.
• Delete account removes your account, every backup and your photos within 30 days, and asks RevenueCat to delete your subscription record. Your Apple subscription must be cancelled separately in your iPhone's Settings.

Copies in our providers' routine backups are removed on their regular schedule.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your information, to restrict or object to its use, and to withdraw consent. You can export and delete your data directly in the app. For anything else, contact roland.ibrg@gmail.com. You can also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) or to the data protection authority where you live.

We don't sell or share personal information as those terms are defined in California law.

11. Children

Arcly is not directed at children under 13. If you are under the age of digital consent where you live, use Arcly only with permission from a parent or guardian. If you believe a child has given us information without permission, contact us and we will delete it.

12. Security

Information is encrypted in transit, and backups are stored by providers that encrypt data at rest. Access to a backup is limited to its account. Records on your iPhone are protected by iOS. No system is perfectly secure, so please keep your iPhone and accounts protected.

13. Changes

If we change this policy, we will update the date at the top of this page. For significant changes, we will also tell you in the app or by e-mail where possible.

14. Contact us

For questions about this policy or to exercise your rights:

• E-mail: roland.ibrg@gmail.com
• Location: Belgrade, Serbia