At arc (operated by Quantini OÜ), privacy isn't just a feature—it's the foundation of everything we build. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.
Key Fact: arc's financial data processing is deployed within your own self-hosted container. When end-to-end encryption is enabled, we have zero access to your data—technically, architecturally, and by design. In no instance does arc access, read, process, or use your financial data.
Our Privacy Principles
Your Container
Financial data lives in your own self-hosted container—never on our servers
Zero Access
With E2E encryption enabled, we cannot see your data—technically impossible
End-to-End Encrypted
All data is encrypted on your device before transmission; only you hold the keys
1.Information We Collect
Information You Provide
- Account Information: Email address when you create an account
- Support Communications: Information you provide when contacting our support team
- Feedback: Any feedback or suggestions you voluntarily provide
Information We Do NOT Collect
- Bank account credentials or login information
- Transaction history or financial data (stored in your own container, never on our infrastructure)
- Budget categories, goals, or spending patterns
- Any data processed by our on-device AI features
Important: arc deploys financial data processing within your own self-hosted container. When end-to-end encryption is enabled, your data is encrypted with keys that only you possess. This means arc has no technical ability to access, read, or use your financial data under any circumstances.
2.How We Use Your Information
We use the limited information we collect for:
- Providing and maintaining the arc service
- Sending you important updates about the service
- Responding to your support requests
- Improving and optimizing our application
- Complying with legal obligations
We never: Sell your financial data, share your budget data with advertisers, or use your transactions for targeted advertising.
3.Data Storage & Security
Self-Hosted Container Architecture
arc's financial data processing is deployed within your own self-hosted container—an isolated environment that you own and control. Your financial data never passes through or resides on arc's servers. We have no access to your container or its contents.
End-to-End Encryption
When end-to-end encryption is enabled, all data is encrypted on your device using AES-256 before any transmission occurs. The encryption keys are generated and stored exclusively on your device—they are never sent to or accessible by arc. This makes it technically impossible for us to decrypt, view, or use your financial data.
Zero Data Usage Guarantee: In no instance—whether for analytics, model training, product improvement, or any other purpose—does arc access or use your financial data. Our architecture is designed so that we technically cannot, even if compelled.
4.Third-Party Services
arc integrates with the following third-party services:
- Actual Budget: Open-source budgeting engine (self-hosted or our managed servers)
- Google Gemini API: Used for smart transaction categorization. Only generic transaction descriptions are sent—no personal identifiers, account numbers, or user information is transmitted
- App Store / Google Play: For app distribution and in-app purchases
- Campaign measurement: Privacy-minimal website visit tracking for paid campaign reporting. We do not send budget data, transaction data, account balances, receipts, emails, phone numbers, or advanced matching identifiers.
Coming Soon: We're actively developing local LLM support for fully on-device AI processing, ensuring your data never leaves your device.
5.Your Rights (GDPR & CCPA)
You have the right to:
To exercise any of these rights, please contact us at the address below. For account and data deletion instructions, see our Delete Account page.
6.Data Retention
We retain your account information only as long as your account is active or as needed to provide services. You can request deletion of your data at any time—see how to delete your account. Local data on your device is entirely under your control.
7.Children's Privacy
arc is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
8.Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
9.Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Quantini OÜ
Registry Code: 17114373
Tallinn, Estonia
connect@arc.moi