We've written this in plain language because you deserve to understand exactly what happens with data as personal as your emotional experiences.
Arbor is a journaling and emotional-exploration app that uses AI. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We've written it in plain language because we believe you deserve to understand exactly what happens with your data — especially data as personal as your emotional experiences.
Arbor is built by Arbor AI, LLC ("Arbor AI," "we," "us," or "our"). When this policy refers to "Arbor AI," it means Arbor AI, LLC; "Arbor" refers to the application. Arbor is a journaling and emotional-exploration tool that uses AI — not a clinical or health-care service — and using it does not establish any clinical, treatment, or professional care relationship with Arbor AI or with any individual associated with it, regardless of any professional credential that individual may hold. This Policy describes our data practices and does not create any rights or remedies beyond those provided by applicable law.
Arbor collects what you directly provide, as well as limited technical and usage data through crash reporting and analytics tools described below. IP addresses and similar network identifiers may be processed transiently by our infrastructure and third-party service providers for security, routing, rate limiting, and fraud prevention purposes, but are not linked to individual user profiles for tracking or advertising.
Account information
Emotional reflection data
Goals and values
Subscription information
Technical and usage data
We use your information solely to provide and improve the Arbor experience for you. Specifically:
We do not use your information for advertising. We do not sell your data. We do not share your emotional, reflection, or any other personal data with advertisers, with any third party for their own marketing, or for any cross-context behavioral advertising.
Sage, Arbor's AI reflection companion, is powered by Anthropic's Claude API. The emotion classification feature uses Google's Gemini API. When you interact with Sage or log an emotion that requires classification, your input is transmitted to these APIs to generate a response.
AI training: Arbor does not provide user conversation content to third-party AI providers for model training under its commercial API arrangements. Sage is powered by Anthropic's API, which — under Anthropic's standard commercial API terms — does not use customer data to train or improve Anthropic's models. The emotion classification feature uses Google's Gemini API under Google's standard API terms, which similarly do not use customer data submitted via the API to train Google's models. Arbor stores and processes your conversation content only as necessary to deliver the Service, maintain security, provide support you request, comply with law, and operate the system as described in this Policy.
We cannot guarantee third-party data handling practices beyond what their published terms state. If we become aware that either provider's data practices have changed materially, we will update this policy.
Arbor uses the following third-party services to operate. Each receives only the data necessary for its function.
| Service | Purpose | What they receive |
|---|---|---|
| Supabase | Database and backend infrastructure | All data listed in Section 1, stored in encrypted PostgreSQL |
| Anthropic (Claude API) | Powers Sage reflection sessions | Your messages to Sage during an active session |
| Google (Gemini API) | Emotion input classification | Emotion context text you provide during logging |
| RevenueCat | Subscription management | Your email address, an account identifier, and subscription status; no payment card data; no reflection content |
| Apple / Google | Payment processing | Payment details you enter in their native purchase flows |
| Sentry | Crash reporting and error monitoring | App version, OS version, memory state, stack traces; no name, email, account identifier, or any content you enter |
| PostHog | Usage analytics | Anonymous behavioral events (e.g., that an emotion log was completed) tied only to a per-device identifier, not your account; IP discarded; no name, email, reflection content, emotion labels, notes, Sage text, or goal text |
We do not integrate any third-party advertising networks or social media trackers.
Your data is stored in Supabase-managed PostgreSQL databases. Arbor implements commercially reasonable administrative, technical, and organizational safeguards designed to limit unauthorized access to your data. No security measure is absolute.
Data location. Supabase infrastructure operates in the United States. Arbor is offered only in the United States and Canada (see Section 10). If you access Arbor from Canada, your data is transferred to and processed in the United States. Arbor is not offered in the European Economic Area, United Kingdom, or Switzerland; if we expand to those regions in the future, we will update this policy and implement the required safeguards before doing so.
No security system is perfect. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
Access and export: You can export your Arbor data from Settings → Data & Privacy → Export my data. If any information we hold about you is not included in the automated export, you can obtain it by request to the Privacy Officer at support@yourarbor.app.
Deletion: You can permanently delete your account and all associated data from Settings → Data & Privacy → Delete my data, or by contacting support@yourarbor.app. Once processed, this deletion cannot be undone and the data cannot be restored from active systems. Residual copies in encrypted backups are purged according to our standard automated backup rotation schedule, typically within 30 to 90 days. Arbor may retain data longer where required by law or legal process.
Notifications: You can enable or disable all notification types from Settings → Notifications at any time.
Data correction: If you believe information in your account is inaccurate, you can update your display name and email from Settings → Account. For other corrections, contact us at support@yourarbor.app.
Response time. We aim to respond to data requests promptly, and within the timeframe required by any applicable law.
We retain your data for as long as your account is active. If you delete your account, your active data is deleted immediately and cannot be recovered. Residual encrypted backup copies are purged according to our standard automated backup rotation schedule, typically within 30 to 90 days. We may retain certain data longer where required by applicable law or legal process.
Arbor is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us at support@yourarbor.app and we will delete the account and all associated data promptly.
Crash reporting — Sentry. Arbor uses Sentry to automatically detect and report crashes and errors. Sentry receives your device's OS version, app version, memory state, and a stack trace at the time of the error. It does not receive your name, email address, IP address, or any content you enter in the app. Sentry is configured without user PII collection and without session replay.
Usage analytics — PostHog. Arbor uses PostHog to collect behavioral usage events (for example, that an emotion log was completed or a Sage session was started). These events help us understand how the app is being used so we can improve it. PostHog does not receive your name, email, or any content you enter, and the events are not linked to your account or identity — they are associated only with a per-device anonymous identifier. Your IP address is discarded rather than stored with these events.
Neither Sentry nor PostHog receives your name, email, account identifier, the content of your emotion logs, your emotion labels or notes, your Sage conversations, or your goal text.
Arbor is currently offered to users in the United States and Canada. The Service is not directed at users in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions outside the United States and Canada. If you are located outside the United States or Canada, you use the Service at your own risk and are responsible for compliance with your local laws.
If you are in Canada, the following applies in addition to the rest of this Policy.
Privacy Officer. Arbor AI has designated a Privacy Officer responsible for the protection of personal information and for handling questions, access and correction requests, and complaints. You can reach the Privacy Officer at: Privacy Officer, Arbor AI — support@yourarbor.app.
Cross-border processing. Arbor is operated from the United States. If you use Arbor from Canada, your personal information is transferred to and stored and processed in the United States by us and by the service providers listed in Section 4. While in the United States, your information may be accessible to courts, law enforcement, and government authorities under applicable U.S. law. Arbor AI remains accountable for personal information transferred to its service providers and relies on contractual protections with them.
Your rights. You may access and request correction of your personal information, withdraw consent, and make a complaint, by contacting the Privacy Officer. If we deny a request, you may appeal; if an appeal is denied, we will provide information on contacting the appropriate regulator (for example, in Quebec, the Commission d'accès à l'information; federally, the Office of the Privacy Commissioner of Canada).
Consent. We rely on your consent to collect and process your personal information. You provide affirmative consent to collection of your reflection data through a step separate from accepting our Terms, and you may withdraw consent at any time by contacting the Privacy Officer or by ceasing use and deleting your data through the app. Upon withdrawal of consent, we will cease processing your personal information, subject to any legal obligations that require continued retention.
Arbor provides the following privacy controls to all users, wherever you live, as standard platform features:
To use these controls, go to Settings → Data & Privacy, or email support@yourarbor.app. We aim to honor requests promptly. We provide these controls as standard features available to everyone, rather than as obligations tied to any specific jurisdiction's statute.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes — particularly those involving data collection, sharing, or your rights — we will notify you within the app before they take effect. Where required by applicable law, we will obtain your affirmative consent before such changes apply to you. Your continued use of Arbor after a change takes effect constitutes your acceptance of the updated Policy, except where affirmative consent is required by law.
Some state laws define "consumer health data" broadly enough to include general personal data such as self-recorded moods or reflective notes, even when that data is not collected for any health purpose. Although Arbor is a journaling and emotional-exploration tool and not a health or clinical service, we maintain a Consumer Data Addendum that describes how we handle this generalized category of data in compliance with those laws. The Consumer Data Addendum is available at yourarbor.app/consumer-data and supplements this Privacy Policy. In the event of a conflict between the Consumer Data Addendum and this Privacy Policy, the Consumer Data Addendum controls solely to the extent required by applicable law; otherwise, this Privacy Policy governs.
If you have questions or concerns about this Privacy Policy or your data, contact us: