Privacy Policy
This policy explains what personal data the Winter Arc mobile app (the "App") keeps, why, where it is stored, and the choices you have. The App is published by Tenantora ("we", "us"), which decides how this data is used. Questions and requests go through our contact form.
In short: the App keeps your fitness data so it can work out your targets and back up your progress. We don't sell it and we don't run analytics. Without a subscription, the App can show optional rewarded video ads from Google AdMob, but your fitness and health data is never shared with advertisers. Winter Arc Pro subscribers see no ads. You can erase everything from inside the App at any time.
1. Data you give the App
| Data | Why we use it |
|---|---|
| Profile: first name, sex, age, height, weight, activity level, goal, training experience, where you train, training days per week, diet preference, the BMI scale you chose, and arc length | To calculate your BMI, energy needs and daily targets, and to build your training plan. Your name is shown on your contract. |
| Targets you set by hand | To use your own calorie, protein, water or step targets in place of the calculated ones. |
| Your contract: the rules you choose and your hand-drawn signature | To show and track the commitment you signed. |
| Daily logs: rules ticked off, water, food entries, weigh-ins | To track your day, your streak and your progress. |
| Workouts: exercises, sets, weights and reps, lift records, and exercises or foods you add yourself | To record your training and suggest your next weights. |
| Language choice | To show the App in your language. |
Some of this, such as weight and body measurements, is health-related. We use it only to provide the App's features to you.
2. Account data
- Guest account. When you first open the App it creates an anonymous account with a random ID through Firebase Authentication, so your data can be backed up. This ID is not linked to your name or email.
- Sign in with Google or Apple (optional). If you link an account, we receive the email address and account ID that Google or Apple share with us. With Apple you can hide your email and share a relay address instead. We use this only to sign you in and restore your data on another device.
3. Apple Health and Health Connect (optional)
If you turn on Apple Health (iPhone) or Health Connect (Android) in the App, and only with the permissions you grant:
- The App reads steps, active calories burned, sleep and body weight.
- The App writes your weigh-ins, water intake and workouts.
Daily summaries the App reads (step count, active calories, minutes asleep and weight) are saved in your day logs and backed up with the rest of your data. Health data is used only to tick off your health-related rules and show your progress. It is never used for advertising or marketing, never sold, and never shared with anyone except the hosting provider listed below, which stores it for us. You can turn this off in the App at any time and remove the App's permissions in the Health app or Health Connect settings.
4. Advertising (Google AdMob)
If you don't subscribe to Winter Arc Pro, you can choose to watch a short video ad to unlock a Pro feature for a limited time. Ads are only ever shown when you tap "Watch a video". There are no banner ads or ads that interrupt you. The ads are served by Google AdMob, a Google service.
- What AdMob receives. When a video is requested, Google receives device and network data such as your IP address, device model, operating system, app version, a coarse location inferred from the IP address, how you interact with the ad, and, only if you allow it, your device's advertising identifier (IDFA on iPhone, Advertising ID on Android). Google uses this to show, measure and limit ads and to prevent fraud. See how Google uses information from apps that use its services.
- What AdMob never receives. We never pass your name, email, profile, body measurements, food, workouts, contract or any Apple Health or Health Connect data to Google AdMob or any other advertiser.
- Your consent. In the European Economic Area, the UK and Switzerland, the App first shows Google's consent form, and ads are personalized only if you agree. You can change or withdraw your choice at any time in Me → Ad privacy choices. On iPhone, the App asks for permission to use the advertising identifier through Apple's "Allow tracking" prompt. If you decline, or later turn it off in iOS Settings → Privacy & Security → Tracking, ads are not personalized. On Android you can reset or delete your Advertising ID in your device settings.
- Under 18. If the age in your profile is under 18, the App requests only non-personalized ads, tells Google the user is under the age of consent, and does not show the tracking prompt.
5. Subscriptions (Winter Arc Pro)
Winter Arc Pro is sold through the App Store or Google Play. Apple or Google take your payment: we never see your card or payment details. The App checks which plan you have directly with the store on your device: it reads your active subscription (product, renewal date and status) from Apple or Google and does not send your purchase history to us or to anyone else. The App keeps your subscription status on your device so Pro works offline.
6. Data we don't collect
The App does not collect your precise location, contacts, photos, camera or microphone input. It contains no analytics tools. Apart from the ads described in section 4, it contains no third-party tracking.
Like any internet service, our hosting provider processes technical data such as your IP address and device type when the App connects to it. This is used to deliver the service and keep it secure, not to profile you.
7. Where your data is stored
- On your device. The App keeps a copy of your data on your phone so it works offline.
- In the cloud. Your data is backed up in Google Cloud Firestore, a Firebase service run by Google, in the Mumbai, India region (asia-south1). Sign-in is handled by Firebase Authentication, which runs on Google's global infrastructure and may process your account ID outside India.
Security rules on the database let only your own signed-in account read or write your data. Data is encrypted in transit and at rest by Google.
8. Who we share data with
We do not sell, rent or trade your personal data. We share it only with:
- Google (Firebase), which hosts our database, authentication and website and processes data only on our instructions. See the Firebase privacy information.
- Google or Apple sign-in, if you choose to link an account.
- Google AdMob, which serves the optional rewarded video ads and receives the device and ad data described in section 4, never your fitness or health data. Google acts as an independent controller for the data it uses for advertising.
- Apple and Google Play, which process subscription purchases as described in section 5.
- Authorities, if Indian or other applicable law requires it.
9. How long we keep it
We keep your data while you use the App. It is deleted when you erase it yourself:
- Me → Reset app and erase all data deletes your arc, logs, workouts and weigh-ins from your device and from our database.
- Me → Delete account (for accounts linked with Google or Apple) deletes all your data from our database, deletes your account, and revokes the App's access to your Google or Apple sign-in.
- Uninstalling the App removes the copy on your device. To delete the cloud copy as well, use one of the options above first, or ask us through the contact form.
Messages sent through our contact form are kept for up to 12 months after your request is handled.
Purchase records are kept by Apple or Google for as long as their policies and tax and accounting laws require, even after you delete your data in the App. Ad data is kept by Google under Google's own policies.
10. Your rights
Under India's Digital Personal Data Protection Act, 2023, and similar laws where you live (such as the GDPR in Europe), you can:
- see a summary of the personal data we hold about you;
- correct or update it (most of it you can edit in the App under Me → Edit profile);
- have it erased;
- withdraw your consent, for example by turning off Apple Health or Health Connect, changing your choice in Me → Ad privacy choices, turning off tracking in iOS Settings, or deleting your data;
- nominate someone to exercise these rights on your behalf if you die or become incapacitated;
- raise a grievance with us, and, if you are not satisfied with our answer, complain to the Data Protection Board of India or your local data protection authority.
To use any of these rights, contact us through the contact form. We may ask you to confirm you own the account, and we aim to reply within 30 days.
11. Grievance officer
Tenantora's grievance officer, Aadil Halepotra, handles privacy grievances. Contact them through the contact form and choose "Privacy request".
12. Children
The App is not for anyone under 16. Users aged 16 or 17 may use it only with the consent of a parent or legal guardian, who is also responsible for any subscription purchase. We do not knowingly process data of children under 16 or use young people's data for tracking, behavioural monitoring or targeted advertising: users whose profile age is under 18 are shown only non-personalized ads (see section 4). If you believe a child has used the App without consent, contact us and we will delete their data.
13. Changes to this policy
If we change this policy, we will update the date at the top of this page. If the change is significant, we will also tell you in the App.