Skip to content
ARCA
Features Security Pricing Blog FAQ Get Arca free

Privacy Policy

Last updated

Arca is built so that we never see your data. This policy explains, in plain language, what the Arca app and this website do and don't collect.

The short version

  • No account. Arca has no sign-up, login, or user profile.
  • No server. Your photos, videos, thumbnails, and metadata are stored and encrypted only on your device.
  • No analytics on your media. We do not and cannot see the contents of your vault.
  • Nothing auto-uploads. Backups and exports happen only when you explicitly create them.

What the Arca app stores

Everything you import — photos, videos, albums, thumbnails, and the metadata manifest — is encrypted with AES-256-GCM and stored locally on your iPhone. The encryption keys are derived from your PIN and never leave the device. We have no ability to access, recover, or decrypt your vault. If you forget your PIN, not even we can restore it.

What the Arca app does not collect

  • The contents of your photos or videos.
  • Your PIN, passcode, or biometric data (Face ID/Touch ID is handled by Apple's Secure Enclave; Arca never receives your biometrics).
  • Your contacts, location, or browsing history.

Purchases

Premium purchases are processed by Apple through the App Store and by our payments provider, RevenueCat, to validate your subscription or lifetime purchase. This processing uses an anonymous app-generated identifier and transaction receipts — it is never linked to the contents of your vault. See Apple's and RevenueCat's privacy policies for how they handle purchase data.

Diagnostics

If you opt in, Apple may share anonymized crash and performance diagnostics with us through App Store Connect. These reports never include vault contents. You can disable sharing in iOS Settings → Privacy & Security → Analytics & Improvements.

Backups you create

When you create an encrypted .arcavault backup, the file is encrypted on your device before you save or move it. If you choose to store that file in iCloud Drive, Files, or another service, it is subject to that service's terms — but it remains encrypted and unreadable without your PIN.

This website

https://arca.pacifiq.io is a static marketing site. It does not require an account. If analytics are used, they are limited to aggregate, privacy-respecting traffic measurement and never identify you personally. We do not sell any data.

Children

Arca is not directed to children under 13, and we do not knowingly collect information from them. Because Arca collects no personal data, there is no child data for us to access.

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new “last updated” date.

Contact

Questions? Email support@pacifiq.io.