FiveArc Privacy Policy

Effective date: October 13, 2026

FiveArc (“the app”) is made and run by [YOUR FULL LEGAL NAME], an individual developer (“I”, “me”). This policy explains what the app collects, why, where it is stored, who can access it, how long it is kept, and how you can delete it. It covers the FiveArc iPhone app and the FiveArc website.

The short version

• I collect only what the app needs to work: your sign-in email, your profile, and the entries you make.
• Apple Health workouts are read only if you allow it, are never written back, and are never used for advertising or marketing.
• I don’t sell your data, I don’t show ads, I don’t use analytics or tracking tools, and I don’t share your data with anyone except the storage provider that runs the app’s accounts.
• You can delete your account and everything in it from inside the app at any time.

1. What the app collects

Account information

• Email address and password. Used to create your account and sign you in. Your password is handled by Google Firebase Authentication. I never see it.
• Account ID. A random ID that Firebase assigns to your account so your entries are linked to you.

Profile (you choose what to add)

• First name, last name and nickname.
• A profile photo, if you add one. Only the single photo you pick is used. The app crops it to a small square (256 × 256 pixels) on your device and stores that copy. The app does not access your other photos. On iPhone, the camera is used only if you choose to take a new photo.

Your entries

Everything you type into the five sections:

• Fitness: workouts (activity, minutes, effort, date, and distance for imported workouts), your weekly minutes goal, and trophies earned.
• Hobby: your hobbies, time spent, and any notes you write.
• Better Habit: the habits you track and the days you check them off.
• Schoolwork: assignments, subjects, due dates and whether they are done.
• Nutrition: meals you log (name, meal type, calories, protein, fruit and vegetable servings), glasses of water, and your daily targets.

Apple Health (iPhone app only, and only if you allow it)

If you tap Connect Apple Health and give permission, the app reads your workouts from Apple Health, including workouts recorded by Apple Watch. For each workout it reads the workout type, start date, duration and total distance, plus Apple Health’s ID for that workout so it is not imported twice. The app reads no other Health data (no heart rate, sleep, weight, medical records or anything else) and never writes anything to Apple Health.

Imported workouts are saved in your account like workouts you log yourself, so they appear on your other devices. Health data from the app:

• is used only to show your own workouts, totals and trophies back to you;
• is never used for advertising, marketing or data mining, never sold, and never shared with anyone other than the storage provider described in section 3;
• is never stored in iCloud.

You can turn off access at any time in the Health app on your iPhone: tap your profile picture, then Apps under Privacy, then FiveArc. Workouts already imported stay in your entries until you delete them or delete your account.

Technical information

• Sign-in security logs. When you sign up or sign in, Firebase Authentication records your IP address and device/browser type to protect accounts from abuse. Google keeps these IP addresses for a few weeks.
• Save time. The time your entries were last saved.

What the app does not collect

No location, contacts, advertising ID, browsing history, analytics, crash reports or usage tracking. The app has no ads and does not track you across other companies’ apps or websites.

2. How your information is used

Only to run the app for you:

• to create your account, sign you in, and send password reset emails you ask for;
• to save your profile and entries and show them on any device where you sign in;
• to work out your daily progress rings, weekly totals, streaks and trophies;
• to keep accounts secure and prevent abuse.

I don’t use your information for advertising, marketing, profiling or selling, and no automated decisions with legal or similar effects are made about you.

3. Where your information is stored and who can access it

Your account and entries are stored with Google Firebase (Firebase Authentication and Cloud Firestore), a service provider that stores and processes the data on my behalf under Google’s data processing terms. Firebase Authentication runs in data centers in the United States. Database rules let each account read and write only its own record.

Other services involved:

• Apple runs the App Store and Apple Health. Apple Health data stays on your device unless you allow this app to read it as described above.
• GitHub Pages hosts the FiveArc website. Like any web host, it receives your IP address when you visit the site.
• Google’s content network (gstatic.com) may deliver the Firebase sign-in code to the website if the copy bundled with the site can’t load. It receives your IP address in that case.

Each of these providers is bound by its own privacy and security commitments, which provide at least the same level of protection as this policy. I don’t share your information with anyone else, except if required by law (for example, a valid court order), or to protect the safety of a person.

I don’t sell or share your personal information as those terms are defined under U.S. state privacy laws.

4. On your device

To keep working when you are offline, the app keeps a copy of your profile and entries on your device. It also remembers whether you chose “Keep me signed in” and whether you have seen the Add to Home Screen tip.

• The on-device copy is removed when you delete your account.
• Signing out does not remove it. If you share a device, delete the app (or clear the website’s data in your browser) when you are done.

5. Security

Data travels between the app and Firebase over encrypted connections (HTTPS) and Google encrypts it at rest. Access is limited to your signed-in account. No system is perfectly secure, so please use a strong password you don’t use anywhere else.

6. How long information is kept, and how to delete it

Your account and entries are kept until you delete them.

• Delete one entry: tap the × next to a workout, habit, assignment or meal.
• Erase your entries: open Profile, tap Erase my entries at the bottom, then tap again to confirm. This clears all your entries and keeps your account.
• Delete your account: open Profile, tap Delete account, then tap again to confirm. This immediately deletes your database record (profile, photo and all entries) and your sign-in account. Google removes remaining copies from its backup systems within up to 180 days.
• Withdraw Apple Health permission: see section 1.

If you can’t use the app, email me at phisarys911@gmail.com from the address on your account and I will delete the account for you.

7. Your choices and rights

Wherever you live, you can:

• see and correct your information in the app at any time;
• get a copy of your information by emailing me;
• delete your information as described above;
• withdraw permission for Apple Health, the camera or photos in your iPhone settings.

Depending on where you live (for example California, other U.S. states, the UK or the European Economic Area), you may have additional rights, such as to object to or restrict processing or to complain to your local data protection authority. Where those laws apply, I process your information because it is necessary to provide the app you asked for (contract), and for Apple Health data, on the basis of your explicit consent, which you can withdraw at any time. Email phisarys911@gmail.com to make any request. I will respond within 30 days and won’t treat you differently for exercising your rights.

8. Age requirement

FiveArc is for people 13 and older. The app asks you to confirm your age when you sign up. I don’t knowingly collect information from children under 13. If you believe a child under 13 has created an account, email phisarys911@gmail.com and I will delete it.

9. Changes to this policy

If this policy changes, the new version will be posted at this address with a new effective date. If the change is significant (for example, adding advertising or a new type of data), I will tell you in the app before it takes effect and, where required, ask for your permission.

10. Contact

[YOUR FULL LEGAL NAME] Email: phisarys911@gmail.com