1. Our Commitment
At Arrive, we believe your location data belongs to you. We built this tool to provide personal insights without the invasive tracking found in many "free" apps. We do not sell your data, we do not track you in the background without your knowledge, and we do not require a password that can be compromised.
2. Information We Collect
We only collect information that you explicitly provide or that is necessary for the Service to function:
- Check-in Data: When your Siri Automation (or other API client) triggers, we record the data you send in the payload. This typically includes the Place Name (tag), Timestamp, and optionally your approximate location (if enabled in your shortcut) and generic connection details (User Agent).
- Account Information: If you choose to provide an email address during setup, we store it solely to send you your dashboard link and critical service updates. We do not use it for marketing newsletters without your consent.
- Usage Logs: We may collect anonymous technical logs (server request times, error rates) to maintain and improve the stability of our infrastructure.
3. How We Use Your Data
We use the information we collect for specific purposes:
- To display your personal dashboard and history.
- To generate statistics (e.g., "Weekly Consistency", "Total Check-ins").
- To authenticate your API requests via your unique token.
4. Data Security & Magic Links
Arrive uses a "passwordless" authentication system.
- Your Dashboard Link: Access to your data is controlled by a unique, cryptographically secure URL. You must keep this link private. Anyone who possesses this link can view your dashboard.
- Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS (HTTPS).
5. Data Sharing and Disclosure
We do not sell your personal data. We do not share your location history with third-party advertisers or data brokers.
We may disclose your information only in the following limited circumstances:
- Service Providers: We use trusted third-party providers for hosting (e.g., Vercel, AWS) and database management (e.g., Supabase, PostgreSQL). These providers are bound by confidentiality agreements.
- Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court order).
6. Data Retention and Deletion
We retain your check-in history for as long as your account is active.
You are in control. You may delete specific check-ins or your entire account history at any time. If you lose access to your dashboard link and did not provide an email for recovery, your data effectively becomes orphaned and inaccessible, though it may persist in our backups for a limited time before being overwritten.
7. Children's Privacy
Our Service is not directed to anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
8. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@arrive.fyi.