Privacy policy

Data we use

Registration stores your email, account ID and registration date. Passwords are stored as strong hashes rather than plaintext. Session identifiers keep you signed in. We also store email confirmation status and hashes of temporary confirmation and password-reset tokens. Recovery links expire after 30 minutes and can only be used once; changing a password ends previous sessions.

We store notebooks, cards, tasks, events, images, settings and workout materials you create. Coaching data may include client names, programs, comments, completion dates and times, and connections between a program and an account.

Operating and protecting the service involves technical request information, including IP addresses at hosting infrastructure, error codes and account activity timestamps. Activity is updated at most every five minutes and is not an online status.

Purposes and grounds

Account data and your materials are processed to provide the service you request, including sign-in, storage and sharing. Registration is not consent to advertising.

Technical information supports abuse prevention, rate limiting, troubleshooting and reliability. Our interest is operating a secure and stable service. We do not use this information for advertising profiles or automated decisions producing legal effects.

Feedback is used to respond to requests and resolve problems. Your email accompanies feedback only if you enable a reply. Registration does not subscribe you to marketing emails.

Who can see data

Ordinary users cannot access the account directory. Authorized administrators can see email addresses, account IDs, registration dates, last activity and notebook and card counts to operate the service. The directory excludes passwords, session tokens and private note contents.

Other people can access materials when you share them. Anyone holding a public card or program link can open it. Invited notebook collaborators receive the access provided by the interface. Disabling a link does not erase copies recipients already saved.

Infrastructure suppliers also process data as needed to run the service. We do not sell user data.

Coaching and guests

You can view a program without an account. When a guest records completion, the coach sees the name entered, selected workout, date and time, and comments submitted. A guest name is not verified identity.

A browser identifier helps distinguish guest activity. Guest does not mean fully anonymous: your name and comments are visible to the coach. Signed-in completion records may be connected to your account.

Coaches are responsible for having a lawful basis for adding client data and informing clients about their own processing. Do not upload medical records, diagnoses or other sensitive information. Arrangely is not designed as a medical record system.

Suppliers and external services

Voice notes retain an audio recording. When transcription is enabled, audio is sent to Cloudflare Workers AI to produce text. The transcript is stored with the recording. Unfinished text drafts and audio awaiting successful upload may be stored in IndexedDB on your device; they are removed after successful saving, deletion of the local copy, or clearing site data.

The website and web app use Vercel, the API and PostgreSQL use Railway, and uploaded images, GIFs and videos use Cloudflare R2. These suppliers process requests and hosted data. Infrastructure may be outside your country; we do not claim that all data is stored exclusively in the EU.

Resend delivers email confirmation, password-recovery and password-change messages and receives the recipient address and service email content, including the applicable link. Passwords are never included in emails. These are not marketing emails.

In-app feedback is delivered to an operational Telegram chat. Do not include passwords or sensitive documents. When error notifications are enabled, Telegram receives the operation, error code and type, release and timestamp; those error notifications exclude note contents, passwords and email addresses.

Media added by you or a coach through external links may load from another site, sharing technical request information with that site. AI links on the landing page open at your request. Data entered on external services is governed by their own policies.

Retention

Account data and saved materials are retained to operate your account until you delete them or request account deletion. Accounts are not currently deleted automatically for inactivity.

Sign-in sessions last up to 30 days and guest cookies up to 365 days. Note trash and revision history provide a seven-day recovery window. Background cleanup means removal from the interface and physical storage cleanup may not happen at the same time.

Copies saved by other users are under their control. Backup and infrastructure log retention depends on supplier settings. The seven-day trash period does not promise deletion of every backup within seven days.

Your rights and requests

Depending on applicable law, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Contact Movo studio at support@arrangely.space or through Settings → Feedback in the app. You can email us without an account. Describe your request. When using in-app feedback, enable a reply if you want an email response. Proportionate account ownership verification may be necessary; never send your password. You may also complain to the competent data protection authority in your country.

Applicable law determines rights, exceptions and response deadlines. Free access to the service does not remove statutory data protection rights.

Policy changes

The current version is published here with its update date. Materially different processing purposes must be explained before that processing starts. Publishing a policy does not replace consent where consent is required.