Signal Ark is designed to be private by default. We do not ask for your name, email address, phone number, or any government-issued identifier. The app generates an anonymous random identifier on your device to enable core functionality — this is never linked to your real-world identity by us.
| Data | Purpose | Stored where | Retention |
|---|---|---|---|
| Anonymous device ID (UUID generated on device) | Entitlement sync, journal backup, session continuity | Our server (Hostinger, EU) | Until you request deletion |
| App tier / entitlement status | Unlock paid features after purchase | Our server | Until you request deletion |
| Journal entries you choose to sync | Cross-device journal access | Our server | Until you request deletion |
| Scan results you submit | Citizen science data contribution | Our server | Indefinitely (anonymised) |
| App version, device model (optional) | Bug diagnostics | Our server | 90 days |
| Purchase transactions | Verify entitlements | Apple's servers (we see product ID + status only) | Per Apple's policy |
Apple Inc. — processes payments, provides StoreKit transaction verification. Apple's privacy policy applies to purchase data: apple.com/legal/privacy
We do not use advertising networks, analytics SDKs (e.g., Firebase, Mixpanel), or social login providers. We do not sell, rent, or share your data with third parties for marketing.
All communication between the app and our server uses HTTPS (TLS 1.2+). API requests include a timestamp-based HMAC signature to prevent replay attacks. Device identifiers are stored as hashed values where practical. Our server infrastructure is hosted in the EU.
To delete your account data, email support@signal-ark.space with the subject line "Data Deletion Request". We will permanently delete all records associated with your anonymous device ID within 30 days and confirm by reply.
Signal Ark is not directed at children under 13. We do not knowingly collect any data from users under 13. If you believe a child has submitted data, contact us immediately and we will delete it.
We will update this page when our practices change. Significant changes will be noted in the app update release notes.
EU/EEA residents have rights under GDPR including access, rectification, erasure, portability, and the right to object to processing. To exercise these rights or ask any privacy question: support@signal-ark.space