This Privacy Policy describes how Raedus Labs (D-U-N-S: 753163623), operated by Diven Rastdus ("we", "us", "our"), collects, uses, and protects your personal information when you use the Arc Journal mobile application (package: com.astraedus.arcjournal).
By using Arc Journal, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Arc Journal collects the following categories of data to provide its core journaling and insight features:
| Data Type | What & Why |
|---|---|
| Account information | Email address and authentication credentials, used to create and secure your account. |
| Journal entries | Text content you write in journal entries. This is the core data of the app. |
| Voice recordings | Audio captured via your device microphone for voice-to-text journaling. Recordings are transcribed on-device using expo-speech-recognition and are not stored on our servers. Only the resulting text transcription is saved. |
| Mood data | Mood selections and ratings you provide, used for mood tracking and pattern analysis. |
| Calendar events | Read-only access to your device calendar (via expo-calendar) to provide contextual journaling prompts. We do not modify or store your full calendar data. |
| Location data | Approximate location (via expo-location) to add geographic context to journal entries. Location access is optional and can be revoked at any time in your device settings. |
| Weather data | Current weather conditions fetched from Open-Meteo API based on your approximate location, to enrich journal context. |
2. How We Use Your Information
We use the data we collect for the following purposes:
- Core journaling features: Storing, organizing, and displaying your journal entries, mood data, and associated context.
- AI-powered insights: Processing journal text through Google Gemini Flash API to extract themes, generate action items, identify patterns, and organize entries. This processing occurs on Google's servers (see Section 3).
- Contextual prompts: Using calendar events, location, and weather data to suggest relevant journaling prompts and enrich entry metadata.
- Account management: Authenticating your identity and securing your account.
- Service improvement: Aggregated, anonymized usage analytics to improve app performance and features.
We do not use your data for advertising. We do not sell, rent, or share your personal data with third parties for their marketing purposes.
3. Third-Party Services
Arc Journal relies on the following third-party services to function. Each service only receives the minimum data necessary for its specific purpose:
Supabase (Authentication & Database)
Provides user authentication and stores your journal entries, mood data, and account information. Data is hosted in the Sydney, Australia (ap-southeast-2) region.
Google Gemini Flash API (AI Processing)
Journal entry text is sent to Google's Gemini Flash API for theme extraction, action item generation, and content organization. Google processes this data according to their API terms, and data sent via the API is not used to train their models.
Open-Meteo (Weather Data)
Your approximate location coordinates are sent to Open-Meteo to retrieve current weather conditions. Open-Meteo is an open-source weather API that does not require an API key and does not track users.
Expo Services (App Infrastructure)
Arc Journal is built with Expo (React Native). Expo services may be used for push notifications and over-the-air updates. Expo collects minimal device metadata for these functions.
4. Data Storage & Security
Your data is stored in Supabase-managed PostgreSQL databases hosted in the Sydney, Australia (ap-southeast-2) region. We implement the following security measures:
- All data is transmitted over HTTPS/TLS encryption in transit.
- Database access is protected by Supabase Row Level Security (RLS) policies, ensuring users can only access their own data.
- Authentication tokens are securely stored on your device.
- Voice recordings are processed on-device and are not uploaded to our servers.
While we take reasonable measures to protect your data, no method of electronic storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your data for as long as your account is active. Specifically:
- Journal entries and mood data: Retained for the lifetime of your account.
- Voice recordings: Processed on-device in real time. Raw audio is not stored on our servers.
- Location and weather data: Stored as metadata attached to journal entries for the lifetime of your account.
- Account data: Retained until you delete your account.
When you delete your account, all associated data is permanently removed from our systems within 30 days.
6. Your Rights
You have the following rights regarding your personal data:
- Access: You can view all data associated with your account within the app at any time.
- Export: You can request an export of all your journal data by contacting us at the email below.
- Correction: You can edit or update your journal entries and account information directly in the app.
- Deletion: You can delete individual journal entries within the app, or delete your entire account and all associated data from the app settings.
- Withdraw consent: You can revoke location, calendar, or microphone permissions at any time through your device settings. The app will continue to function with reduced features.
For any privacy-related requests, contact us using the information in Section 10.
7. Children's Privacy
Arc Journal is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete that information as promptly as possible.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address below.
8. International Data Transfers
Your primary data is stored in Australia (Sydney region). However, journal entry text may be transmitted to Google's Gemini API servers (which may be located outside Australia) for AI processing. Weather API requests are sent to Open-Meteo servers in Europe.
By using Arc Journal, you consent to these transfers. We ensure that any international transfers are subject to appropriate safeguards as required by applicable data protection laws.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or via email before the changes take effect. The "Effective date" at the top of this page indicates when the policy was last revised.
Your continued use of Arc Journal after changes are posted constitutes acceptance of the revised policy.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us:
Company
Raedus Labs (D-U-N-S: 753163623)
Operator
Diven Rastdus
Location
Sydney, Australia