Privacy

Consumer Health Data Privacy Policy

Effective 3 October 2026.

This policy is for people who live in Washington State or Nevada, and for anyone whose consumer health data we collect there. It is required by Washington's My Health My Data Act (chapter 19.373 RCW) and Nevada's consumer health data law (NRS 603A.400 to 603A.550). It covers only "consumer health data" as those laws define it. Our general Privacy policy covers everything else.

ArcForm is provided by GETARCFORM LTD, 5th Floor, 167-169 Great Portland Street, London, W1W 5PF. Contact: privacy@getarcform.com.

1. The consumer health data we collect

Where it is sore and your answers about it: the area, pain from 0 to 10, how it started, your answers to the safety questions and whether it has been looked at.
Measurements of your body's movement: joint positions worked out from your phone's camera during the movement check and your sessions, and the reps, range, tempo and timings worked out from them. We never collect video, photos or audio.
Your plans and reports: your training plan, the changes made to it, and your reports.
Your ratings after sessions: how it went and your pain scores.
Your chat with Arc, our AI coach, and the notes Arc writes about you each week, where they include information about your health.
Information worked out about you: a training-focus code chosen from our fixed list, the level of each exercise, and a short plain-words note if you were shown a get-it-checked notice.
Age and gender, where used with the above.

2. Why we collect it and how we use it

We collect consumer health data only to provide ArcForm to you, at your request and with your consent. We use it to:

build your training plan around where it is sore
count and estimate your movement in sessions
change your plan using your ratings and pain scores
apply the safety rules, including telling you to get something checked
let Arc answer you and remember you
write your reports
keep a copy on our server so your plan runs and follows you to a new phone
give you your data, or delete it, when you ask.

Only if you separately say yes to "Help ArcForm get better for everyone", we also use the numbers behind your movements (for each set, the record of where your joints were frame by frame and the numbers worked out from it), with your name, email and account id removed, to learn across many people and improve tracking and plans. This is off until you say yes. You can turn it off again in Settings at any time.

We do not use consumer health data for advertising. We do not sell it.

We will not collect other categories of consumer health data, or use it for other purposes, without telling you first and getting your consent.

3. Where it comes from

You: your answers, ratings and messages.
Your iPhone's camera, processed on the phone into joint positions while you use the app.
ArcForm itself: the plan, the changes to it, the training-focus code and Arc's notes are produced from what you gave.

We do not get consumer health data about you from anyone else.

We do not share consumer health data with third parties, and we have no affiliates. We do not sell consumer health data.

We use two processors, which handle consumer health data only on our instructions to provide ArcForm to you:

Cloudflare, Inc. runs our server, database and file storage. It holds the copy of your data that we keep.
Anthropic, PBC provides the AI model behind Arc. Our server sends it what each AI task needs. That can include any of the categories in section 1 except your raw joint-position recordings. It does not include your email address or account id. Anthropic does not use this data to train its models and deletes it within 30 days by default.

Apple provides Sign in with Apple and takes payment. We do not send consumer health data to Apple.

We may disclose consumer health data if the law requires it.

No third party collects consumer health data about you over time and across different websites or online services through ArcForm. The app has no advertising or analytics tools in it.

5. Your rights and how to use them

You have the right to:

confirm whether we collect, share or sell your consumer health data
access it
get a list of all third parties and affiliates we have shared or sold it to, with a way to contact them. Today that list is empty
withdraw consent to our collecting or sharing it
have it deleted. We delete it from our records and tell our processors to delete it. Copies in backup history are gone within 30 days, well inside the six months the law allows.

How to use them

In the app: Settings, then "Download my data", "Delete account", or the consent switches.
By email: privacy@getarcform.com, from the email address on your account. We will check it is you before we act.

Withdrawing consent for health data ends the ArcForm service, because the app cannot build or run a plan without it.

Timing. We answer without undue delay and within 45 days. If we need more time we will tell you why within the first 45 days, and we can take up to 45 more. Requests are free up to twice a year.

Reviewing and changing your data. You can review your data with "Download my data". You can change your answers in the app, or ask us to correct something by email.

If we refuse. We will tell you why. You can appeal by replying, or by emailing privacy@getarcform.com with "Appeal" in the subject. We will give you a written answer within 45 days, with our reasons. If we refuse your appeal you can complain to your Attorney General:

Washington: atg.wa.gov/file-complaint
Nevada: ag.nv.gov/Complaints/File_Complaint

We will not treat you differently for using your rights.

6. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change applies and update the date at the top. We will ask for your consent before collecting new categories of consumer health data or using it for a new purpose.

7. Contact

GETARCFORM LTD, 5th Floor, 167-169 Great Portland Street, London, W1W 5PF. privacy@getarcform.com.