Privacy Policy

1. Your Arbor account

When you create an account, we collect your email address and password to authenticate you. We also store the profile details you provide, which can include your first and last name, date of birth, gender, and address. You can review and update these details in your account.

We record which Arbor apps are connected to your account, your consent choices and their versions, and your membership or access status. These records help us provide the service you chose, keep it secure, and show which features you can use. One Arbor account works across the Arbor apps.

2. How Arbor apps work together

Each guide uses what you choose to share with it to give support in that area. If you separately agree to “Connect my life to Arbor”, selected summaries or useful facts an app has learned may be added to your shared Arbor understanding so another guide can take relevant context into account. This is not a blanket transfer of every message, journal, transaction, or record between apps.

Some information can be kept within the app where you shared it, or marked as locked so other guides do not use it. You can review, remove, or lock information shown in “What Arbor knows” in your account. The app’s own notice explains what it keeps and what it contributes to the shared understanding.

3. Information in each app and device permissions

The information an app handles depends on its purpose. It may include what you type or create, preferences, plans, or information you choose to connect from another service. Some app content may be stored on your device; other information may be sent to Arbor’s servers to provide account, sync, or guide features. Check the notice in the app for the details that apply to that app and feature.

An app may ask for access to a device feature or connected service, such as your calendar, health information, or financial account. You are shown a separate explanation and permission or consent request where required. You can decline optional access and manage device permissions in your device settings; a feature that depends on a permission may then be unavailable.

4. AI features

When you use an AI feature, the app sends your request and the relevant information needed to answer it to Arbor Core. Arbor Core sends that information to Anthropic to generate the response. This may include your message and relevant context from the app or your shared Arbor understanding. The app’s AI notice explains the feature and any separate consent required. If you do not use an AI feature, your content is not sent to an AI provider for that feature.

AI responses can be inaccurate, incomplete, or unsuitable for your circumstances. They are not a substitute for professional medical, mental-health, legal, or financial advice. Review suggestions and use your own judgement.

5. Health, wellbeing, and other sensitive information

Some Arbor guides may work with health, training, financial, or wellbeing information. The app-specific notice identifies the information involved, and the app asks for any separate consent required before processing it. Optional connected information can be turned off in the relevant app or service; you can also remove shared information Arbor holds in “What Arbor knows”.

We do not treat agreeing to the account Terms and Privacy Policy as consent to every sensitive-data feature. Each app explains its own data choices. You can withdraw a consent in the app where it was given; this may make the feature that depends on it unavailable.

6. Membership and payments

If you join a paid membership, we and our payment provider Stripe process information needed to set up and manage your membership, including its plan, status, renewal or end date, and payment history. Stripe handles your full payment card details; Arbor does not receive or store the full card number. If you use an access code or trial, we record the access granted and when it ends so we can manage your membership correctly.

7. How we use information and our legal bases

We use your information to operate and secure your account, provide the apps and features you choose, maintain your membership, respond to support requests, and meet legal obligations. Depending on the purpose, our legal basis may be providing the service under our agreement with you, our legitimate interests in keeping and improving a secure service, a legal obligation, or your consent.

Where an app processes special-category information such as health or wellbeing data, it will explain the relevant information and ask for the required separate consent. You can withdraw consent as described in the app; this does not affect processing that already took place before withdrawal.

8. Who helps us provide Arbor

We use service providers to run Arbor, and share only the information they need for their role. These currently include Supabase for account authentication and databases; Railway for Arbor Core hosting; Anthropic for AI responses you request; Stripe for website membership payments; and Apple and Google for app distribution and platform services. An app may also connect to an outside service when you choose to enable that feature; the app will explain this at the point of connection.

9. Advertising and analytics

We do not sell your personal information or use it to target advertising. We do not currently use third-party advertising or cross-company tracking. If we introduce analytics or another materially different use, we will update this policy and provide any additional notice or choice required.

10. How long we keep information

We keep account and shared-understanding information while your account is active. You can remove shared information or request account deletion from your account. Information held on your device or within an app may need to be deleted there as well; the app explains how.

We may retain limited records after account deletion where needed to meet legal, tax, accounting, security, or dispute-resolution obligations. Payment records may be retained for the period required by law.

11. Your choices and rights

You can see and manage information Arbor has learned in “What Arbor knows”, update your account details, manage consent choices, and request a copy or deletion of your account. You can also withdraw optional permissions or consents in the relevant app or device settings. Some information is needed to provide a feature, so removing it or withdrawing consent may make that feature unavailable.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your information, object to or restrict some processing, and complain to a data protection authority. To exercise a right or ask a privacy question, contact vinc3.parker@gmail.com.

12. Security

We use safeguards intended to protect information, including encrypted connections and access controls. No method of storing or transmitting information is completely secure.

13. Who can use Arbor

Arbor accounts are for people aged 18 or over. If you believe a person under 18 has created an account, please contact us.

14. International data transfers

Some service providers may process information outside the United Kingdom. Where required, we use a recognised transfer mechanism or other safeguard under applicable data protection law.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Effective” date above and, for material changes, provide additional notice where appropriate.

16. Contact us

If you have questions about this policy or your information, contact us at vinc3.parker@gmail.com.