Arro privacy policy

Arro is a daily ritual for families: each person moves a little, the family sees it, and you keep one streak together. This policy says what Arro collects, why, who sees it and how to delete it.

Arro is made by Bryce Rambach, an individual developer (“we”, “us”). Questions: support@arrofamily.com.

The short version

• Arro collects what it needs to run your family’s streak and nothing else.
• Your workouts are shown to the members of your family and nobody else.
• Apple Health is optional, read-only, and limited to today’s and yesterday’s workouts.
• We don’t sell your data, show ads, or use tracking or analytics tools.
• You can delete your account and everything in it from Settings in the app.

What Arro collects

Account. You sign in with Apple. Apple gives us an account identifier and the email address you chose to share (which can be Apple’s private relay address). The first time you sign in, Apple may also share your first name, which Arro offers as your display name. You can change it.

Your family. The family name, your display name, the colour Arro gives you, your time zone and the reminder time you pick. Your time zone is used to work out what “today” is for you. It isn’t your location.

Workouts. For each workout: the date, the kind (walk, run, gym, yoga, swim, ride or other), the duration if you give one, and a short note if you write one. Also the cheers and nudges family members send each other.

Apple Health, only if you connect it. Arro asks Apple Health for permission to read workouts. It reads nothing else: no heart rate, calories, steps, routes, location or other health data. It only reads workouts from yesterday and today, and never writes anything to Health. From each Health workout Arro saves the date, the kind of workout, the duration in minutes and Health’s identifier for it (so it isn’t counted twice). Workouts recorded by other apps that save to Health, such as Strava or Apple Watch, are read the same way.

Photos stay on your phone. If you add a profile photo or a photo to a workout, it’s kept on your phone only. It isn’t uploaded, and your family doesn’t see it.

Notifications, only if you allow them. Arro reminds you once a day at the time you pick. That reminder is set up on your phone. If you allow notifications, Arro also saves a push token for your phone, an address Apple gives Arro for sending notifications to it, so it can tell you when someone cheers your workout, cheers you on before you’ve moved, joins your family, or hasn’t moved yet that evening. Each notification’s text is kept for up to 7 days, then deleted.

What we don’t collect. No location, contacts, advertising identifier, analytics, crash reporting or tracking of any kind.

Why we use it

Only to run Arro: to sign you in, show your family who’s moved, work out the family streak and freeze days, and let you cheer and nudge each other.

Health data

Data from Apple Health is used only to count your workouts toward your family’s streak and to show them to your family. It is never used for advertising or marketing, never sold, never shared with data brokers, and never used for any purpose other than running Arro. It isn’t stored in iCloud.

Who sees it

• Your family. Members of your family see your display name and colour, your workouts (date, kind, duration and note), and cheers and nudges. Nobody outside your family can see them. Families are joined only with an invite code.
• Our hosting provider. Arro’s data is stored with Supabase, a database provider, on servers in the United States (California). Supabase processes it on our behalf and may not use it for anything else.
• Expo, which delivers Arro’s push notifications. It receives your phone’s push token and the notification’s text, passes them to Apple, and processes them on our behalf only.
• Apple handles Sign in with Apple and Apple Health under Apple’s own privacy policy.
• Nobody else, unless the law requires it.

How long it’s kept and how to delete it

Your data is kept while you have an account. To delete everything, open Settings > Delete account in Arro. That removes your account, your place in the family, your workouts, cheers, nudges and push tokens. If you were the last person in a family, the family is deleted too. Data can remain in the hosting provider’s backups for a short time before it’s overwritten.

Signing out keeps your account. Deleting the app keeps your account too; sign in again to get back to your family.

You can also disconnect Apple Health at any time in the iPhone’s Settings app, under Health > Data Access & Devices > Arro, or switch to “I moved today” in Arro’s Settings. Workouts already counted stay until you delete them with your account.

Children

Arro isn’t directed at children under 13, and we don’t knowingly collect data from them. If you think a child has given us data, contact us and we’ll delete it.

Your rights

Depending on where you live, you may have the right to see, correct, export or delete your data. Most of it you can see and change in the app. For anything else, email support@arrofamily.com and we’ll answer within 30 days.

Changes

If this policy changes, we’ll update the date above, and tell you in the app if the change is significant.

Contact

Bryce Rambach, support@arrofamily.com