Your data, your control
Privacy policy
Your goals and reflections are personal. Here’s exactly how we handle them.
Winter Arc is a personal goal tracker. This page explains, in plain language, what we store, why, who helps us run the service, and how you can get a copy of your data or delete it.
What we store
- Your account: your email address and, if you choose one, a password (stored only as a secure hash by our authentication provider).
- Your workspace: the goals, life areas, check-ins, journal notes and moods, reviews, season dates and settings you create.
- Journal photos you choose to add, resized on your device before upload.
- Reminders: reminder notifications we create for your goals, and, if you turn on push notifications, a technical address for each device so we can deliver them.
If you use Winter Arc without an account, everything stays in your browser on that device and is never sent to us.
How we use it
Only to run Winter Arc for you: syncing your workspace across your devices, sending the sign-in codes and reminders you ask for, and keeping the service secure. We do not sell your data, show ads, or use your journal or goals for advertising or to train AI models.
Services that help us run Winter Arc
| Provider | What for |
|---|---|
| Supabase | Database, sign-in, and photo storage. Your data is protected so that only your account can read it. |
| Vercel | Hosting the website, plus privacy-friendly, cookie-free visit counts (no personal profiles). |
| Resend | Delivering sign-in codes and the reminder emails you turn on. |
| Google, Apple, Mozilla | Delivering push notifications to devices where you turn them on. The content is encrypted end to end. |
| Google Fonts | Loading the typefaces used on our pages. |
Storage on your device
We use your browser’s storage (not advertising cookies) to keep you signed in, remember your theme, keep a copy of your workspace for offline use, and cache the app so it opens quickly. When you sign out, your workspace copy is removed from that browser.
Security
All connections are encrypted (HTTPS). Database rules ensure each account can only access its own data, and photos are kept in private storage. No system is perfectly secure, but we work to protect your information and fix problems quickly.
Your choices: export and delete
- Download your data: in the app, open Account & appearance → Download my data to get everything, including photos, as a .zip file.
- Delete your account: Account & appearance → Delete my account permanently removes your account, workspace, photos, reminders and push devices from our systems. It can’t be undone.
- Turn off emails or push at any time in the same settings.
How long we keep data
We keep your data while your account exists. When you delete your account, it is removed from our live systems immediately; copies in our providers’ routine backups expire on their normal schedule.
Children
Winter Arc isn’t intended for children under 13, and we don’t knowingly collect their data.
Changes and contact
If we change this policy, we’ll update this page and the date below. Questions or requests? Email hello@winterarc.space.