Privacy Policy

This policy explains how Arcoco Ltd ("arcoco", "we", "us") handles your information when you use arcoco, our vocabulary-building app for iPhone and Android (the "app"). It is written for users in the United Kingdom and applies to everyone who uses the app.

Android app: what is different

The Android version of arcoco is an offline app. It does not collect, share or send any personal data. Specifically, the Android app has:

• No accounts or sign-in. There is no Apple or Google progress saving on Android.
• No purchases. arcoco Plus is not offered on Android, so no purchase, subscription or payment information is processed.
• No analytics, crash reporting or advertising measurement. The Android app does not include Firebase Analytics, Crashlytics, Remote Config or Meta measurement, and it requests no internet access.
• Only local data. Your starting level, practice progress, streak, reminder time and settings are stored on your device only. Android cloud backup is switched off for the app. Deleting the app removes this data.
• Two permissions. Notifications, used only for the optional daily reminder you enable, and boot completion, used only to restore that reminder after a restart.

The sections below describe the iPhone app. Where they mention sign-in, purchases, analytics, advertising measurement or diagnostics, those features are not present in the Android app. If a future Android update adds any of them, we will update this policy and the Google Play Data safety section first.

1. Who we are

arcoco is operated by Arcoco Ltd, a company registered in England and Wales (company number 10951526), based in the United Kingdom. Arcoco Ltd is the data controller for personal data processed through the app.

For any privacy question or request, contact privacy@arcocoapp.com.

2. What arcoco is

arcoco is a short vocabulary practice app for iPhone. It helps users improve word choice and communication through quick rounds, including synonym matching, cloze prompts, scenario questions, pressure-test exercises, and jumble or spelling practice.

The app also includes optional Daily Reminders, optional arcoco Plus subscriptions and a Lifetime purchase, and optional progress saving through Apple or Google sign-in. You can use arcoco without creating an account, signing in, or building a public profile.

3. Information we process

We aim to collect as little information as possible to operate the app. The information that may be processed falls into the following categories:

• Practice and app data on your device. Your progress through rounds, exercise results, streaks, difficulty level, settings, reminder preferences, and app state needed for practice are stored locally on your iPhone so the app can adapt to your skill level over time.
• Reminder information. If you enable Daily Reminders, iOS handles notification permission and delivery. The app stores your selected reminder time and reminder state so it can schedule or cancel the reminder you requested.
• Subscription and purchase information. If you use arcoco Plus, Apple StoreKit handles the transaction and payment flow. RevenueCat helps us manage subscription status and entitlements. We may process purchase status, purchase history, entitlement identifiers, and restore outcomes. We do not receive your full payment card details.
• Optional progress account information. If you connect Apple or Google to save progress, Firebase Authentication may process the email address and name supplied by that provider, the provider account identifier, and a Firebase user identifier. Cloud Firestore stores the learning progress you choose to save so it can be restored on another device.
• Analytics and product interaction information. In TestFlight, beta, and App Store builds, we may use Firebase Analytics and Firebase Remote Config to understand how the app is working and how features are used. This can include product interaction or usage data, gameplay content, identifiers, coarse location, and remote configuration information.
• Advertising measurement. With your separate advertising consent and Apple's tracking permission, arcoco can share advertising and installation identifiers, app openings and purchase or subscription events with Meta. RevenueCat sends purchase events, including product, value, currency and a pseudonymous subscription customer identifier. Meta may match these with activity on other companies' apps and websites. Direct Meta SDK measurement does not start without both permissions. Apple may separately provide limited privacy-preserving attribution.
• Diagnostics. Where necessary, Firebase Crashlytics may process technical information such as device type, operating system version, crash data, and other diagnostic data to help us keep the app working and to fix problems.
• Information you choose to send us. If you email us for support or a privacy request, your email address and the contents of your message will be processed so we can reply.

Third-party sign-in and SDK disclosures. Google Sign-In declares that it may process phone numbers for app functionality, other usage data for analytics, and other data for functionality and analytics, linked to the Google account. arcoco requests the standard profile and email sign-in permissions and does not request access to your phone number. The Meta SDK also declares other data for analytics. These provider declarations are included in our privacy disclosures; they do not mean arcoco sends your phone number to Meta.

The app does not ask you to type a name, address, or phone number in order to use it. If you choose optional Google progress sign-in, Google may supply the name already associated with that account to Firebase Authentication.

4. How we use information

Where we process information, we do so to:

• Provide and maintain the app's vocabulary practice features.
• Remember local progress and practice state on your iPhone.
• Schedule or cancel Daily Reminders when you ask the app to do so.
• Manage arcoco Plus subscription status, entitlements, purchase attempts, and purchase restoration.
• Authenticate an optional progress connection and save, restore, or delete cloud-saved learning progress.
• Diagnose and fix issues that affect the app's reliability.
• Understand which features are working well and where the app needs improvement.
• Measure advertising performance with your permission, alongside Apple's separate privacy-preserving attribution.
• Respond to questions, support requests, and privacy requests you send us.
• Comply with our legal and regulatory obligations.

5. Legal bases (UK GDPR)

Where the UK GDPR applies, the legal bases we rely on are:

• Legitimate interests — to provide a working, reliable app and to respond to messages you send us, balanced against your right to privacy.
• Contract — to provide the app features you use and to manage arcoco Plus subscriptions or purchase restoration.
• Legal obligation — where we are required to retain or disclose information by law.
• Consent — for Meta advertising measurement when you give advertising consent and Apple's separate tracking permission, and for other processing that requires your permission. You can refuse or withdraw advertising consent without losing access to practice, purchases or purchase restoration.

6. Sharing

We do not sell your personal information. We do not send Meta your learned words, answers, email address or phone number. Advertising measurement uses the limited identifiers and event information described below.

We may share limited information with service providers that help us run the app only to the extent necessary for them to perform their service for us. These include Apple StoreKit for App Store purchases and platform services, Apple and Google for optional progress sign-in, RevenueCat for subscription status and entitlements, and Firebase/Google services including Firebase Authentication, Cloud Firestore, Firebase Analytics, Firebase Crashlytics, Firebase Remote Config, and BigQuery for progress saving, analytics, crash reporting, remote configuration, and related reporting.

Meta advertising measurement and your choice

arcoco may ask for advertising consent after a completed game, when no other post-game prompt takes priority. You can also choose or change your answer in Settings → Advertising privacy. Apple's tracking permission follows if you agree and haven't already answered it. Direct Meta SDK measurement starts only when both are allowed. You can refuse without losing games, Plus, purchase restoration or saving progress. Apple's separate attribution can report limited conversion information without direct Meta SDK measurement.

With both permissions, RevenueCat may send trial starts, purchases and renewals to Meta, including renewals while arcoco is closed. RevenueCat is the only purchase-event sender. Its App Store integration requires tracking authorization and an advertising or Facebook installation identifier. Meta may match permitted information with information from other services to measure ad results.

You can change your advertising choice in arcoco Settings > Advertising privacy, and Apple's permission in iPhone Settings > Privacy & Security > Tracking. arcoco stops explicit activations and advertising-identifier collection when it receives a withdrawal, and queues removal of matching identifiers from RevenueCat. Keep arcoco online so that change can reach the purchase service. Changes cannot recall data already sent or requests already in progress. The initialized Meta SDK has no complete shutdown control. Contact privacy@arcocoapp.com for deletion or other privacy requests.

We may also disclose information where we are legally required to, or where it is necessary to protect our rights or the safety of others.

7. International transfers

Some service providers we may use are based outside the United Kingdom. Where personal data is transferred outside the UK, we put appropriate safeguards in place (such as the UK International Data Transfer Addendum or equivalent mechanisms) to protect that data.

8. Retention

We keep information only as long as needed for the purposes described in this policy, or as required by law.

Practice data, settings and reminder preferences stored on your iPhone remain under your control. Deleting the app removes the app's local data from your device. Version 8.0 may store custom mascot photos locally; version 8.1 no longer offers that feature. Neither version uploads those photos. If you connect progress saving, the account and cloud-saved progress remain until you delete them in Settings > Progress or ask us to delete them, except where limited retention is required for security, fraud prevention, legal compliance, or an unresolved support request. Purchase records and entitlement history may be retained by Apple and RevenueCat as needed to manage subscriptions, restore purchases, prevent fraud, and meet legal obligations. Support and privacy emails are kept only as long as needed to handle the request and maintain appropriate records.

Advertising measurement information may also be retained by Meta and RevenueCat under their applicable retention settings and policies. The relevant criteria include the period needed to measure advertising results, resolve reporting errors, prevent fraud and meet legal obligations. Withdrawing tracking permission does not itself erase historical subscription or advertising records; you can request deletion using the contact details below.

9. Your rights and data deletion

If you are in the United Kingdom or European Union, you have rights over your personal data, including the right to access, correct, delete, restrict, or object to processing, and the right to data portability where applicable.

You can delete local app data by deleting arcoco from your iPhone. If you connected Apple or Google for progress saving, Settings > Progress lets you sign out or delete the account and cloud-saved progress. Deleting a progress account does not cancel an arcoco Plus subscription; subscriptions are managed separately through Apple and the App Store.

To exercise any of these rights, email privacy@arcocoapp.com. If you are not satisfied with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk).

10. Children

arcoco is not directed at children under 13 and is not submitted in the App Store Kids Category. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the app, contact privacy@arcocoapp.com and we will take appropriate steps to remove it.

11. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top of this page and bring relevant changes to your attention before using information for a new purpose. Continuing to use arcoco does not grant tracking permission; identifier-based tracking requires your permission, and limited measurement is described separately above.

12. Contact

For any privacy question or request, contact privacy@arcocoapp.com.

For general support, contact support@arcocoapp.com.