Privacy Policy

Last updated: April 19, 2026

Arcline is built on a simple principle: your health data belongs to you. This policy explains what we collect, what we don’t, and how we protect your privacy.

What Data Stays on Your Device

All health data you enter into Arcline — bloodwork results, injection logs, symptom entries, protocol details — is stored exclusively on your iPhone using Apple’s SwiftData framework. This data is never transmitted to Arcline’s servers, because Arcline has no servers. It does not leave your device.

This includes:

Bloodwork values (Total T, Free T, Estradiol, Hematocrit, PSA, SHBG, and all other biomarkers)
Dose logs and injection records
Symptom journal entries
Protocol configuration (medications, dosing schedules)
PDF exports you generate

What We Do Collect

Anonymous usage analytics (PostHog). Arcline uses PostHog to collect anonymous product events — things like “bloodwork tab opened” or “PDF export completed.” PostHog assigns an installation-scoped anonymous identifier that is not linked to your identity, not shared with advertisers, and not used to track you across other apps or websites. Events contain no health values. You can opt out in Settings → Privacy → Analytics.

Subscription data (RevenueCat via Apple). If you purchase an Arcline subscription, the transaction is processed by Apple through the App Store. RevenueCat receives the transaction receipt — including purchase history (which tier, when purchased, renewal status) — to manage your access to premium features. RevenueCat assigns an anonymous RCAnonymousID that is not linked to your identity. RevenueCat receives no health data. Apple’s privacy policy governs payment processing itself.

Diagnostics (Apple / on-device). Arcline uses Apple’s standard crash reporting and performance metrics to detect and fix bugs. These diagnostics are anonymized, contain no health data, and are controlled by your iOS Settings → Privacy & Security → Analytics & Improvements toggle.

What We Never Collect

Your name, email address, or any account credentials (Arcline requires no account)
Your health data (bloodwork, doses, symptoms — all stays on-device)
Your location
Device advertising identifiers

iCloud Sync & Backup

Arcline uses Apple’s CloudKit with your private database to sync data between your own iPhone, iPad, and Apple Watch. Data stored in your private CloudKit container is encrypted by Apple and inaccessible to Arcline — we cannot read, copy, or share it.

If you have iCloud Backup enabled on your iPhone, your Arcline data may also be included in your iCloud backup alongside other app data on your device. This is controlled by your iPhone’s iCloud settings, not by Arcline. iCloud data is governed by Apple’s privacy policy.

Data Deletion & Retention

On-device and iCloud data. To delete all health data, delete Arcline from your iPhone — all on-device SwiftData is removed on uninstall. If you use iCloud Sync, removing the app from your primary device and clearing Arcline from Settings → [your name] → iCloud → Manage Storage on any linked device removes the CloudKit container.

Anonymous analytics. Arcline retains anonymous analytics events with PostHog for up to 12 months before automatic deletion. If you would like them removed sooner, email privacy@arcline.health and we will delete them on request.

Children’s Privacy

Arcline is not intended for use by individuals under 18 years of age. We do not knowingly collect information from minors.

Changes to This Policy

If we make material changes to this policy, we will update the “Last updated” date above. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

Questions about this privacy policy? Email privacy@arcline.health.